Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: lhV87vHzhbZtK6HNJcpJbxFfvE5/vR/1msWF/weuOH0=
Subject key identifier: 39:CA:DB:15:51:6C:C8:D2:E3:8D:40:3E:43:58:2C:EC:50:15:DB:71
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 01987E9CE544EE0C017E144A4B26B5EE7E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0AAA
Signing time: Wed 06 Aug 2025 09:01:08 +0000
Manifest this update: Wed 06 Aug 2025 09:01:08 +0000
Manifest next update: Thu 07 Aug 2025 09:01:08 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 7TOBJC+nCQ2BsCGQkVDsddkS+1qoMK1l+JJrS/+vKpc=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:e5:44:ee:0c:01:7e:14:4a:4b:26:b5:ee:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Aug 6 09:01:08 2025 GMT
Not After : Aug 7 09:01:08 2025 GMT
Subject: CN=39cadb15516cc8d2e38d403e43582cec5015db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:07:f8:84:4b:ae:f5:65:5c:7b:bf:fe:a2:
a2:0b:ab:37:1e:ea:55:dd:0b:d7:d5:a7:24:65:83:
3b:72:8a:fc:8f:33:8a:0c:e5:1c:82:90:39:6c:fc:
96:f6:82:22:36:5b:55:72:8e:68:89:25:02:65:ea:
73:ec:93:36:e6:7b:9e:4e:76:02:68:cd:4e:3c:d5:
cb:f8:bd:a4:9c:50:3d:59:f3:11:72:79:1a:9b:86:
db:c5:bb:99:d8:52:6d:ed:12:9a:ad:95:16:26:8c:
26:f3:59:e5:aa:0a:15:a8:1f:27:3c:93:be:bf:3a:
b8:40:2a:5c:71:5d:c2:f4:1a:18:23:64:60:2c:6c:
5b:6c:e9:10:46:ed:d2:90:75:df:f2:9e:fe:8a:b3:
c8:b1:78:7b:6f:26:84:1f:51:0a:47:66:1d:7c:fa:
6a:28:0f:38:bf:94:c8:b3:8c:49:23:de:94:70:3a:
ff:fc:6c:f1:31:97:23:74:db:d5:fc:60:9e:97:25:
95:da:69:38:58:5a:34:12:80:3e:02:51:a2:c7:bf:
e7:53:94:4a:f5:28:31:10:bb:aa:4b:70:4f:f0:3c:
37:5a:e6:18:3e:9f:05:4c:cd:1e:b9:66:74:31:9a:
48:41:2a:15:3a:6a:15:92:6f:c1:ea:45:0a:f0:68:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:DB:15:51:6C:C8:D2:E3:8D:40:3E:43:58:2C:EC:50:15:DB:71
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5c:7d:9e:a3:b1:50:d4:1a:95:cb:f7:8f:9c:6e:2d:02:7a:
c2:6d:47:78:bb:ea:eb:55:6f:7e:10:f9:50:ab:0f:92:a7:14:
54:af:9d:90:53:54:ca:7e:70:4b:e0:b9:24:18:61:50:4c:0c:
35:0d:86:7f:a6:c8:a0:ee:68:63:db:01:13:14:82:57:3c:ad:
25:e8:53:60:1c:b4:cf:b0:8a:19:0d:58:9d:7b:76:42:03:39:
59:4b:18:b2:b9:11:9d:8b:c7:bb:3e:17:03:74:e8:65:ab:09:
2c:e8:6d:c5:d3:84:e5:62:d3:25:5f:c1:88:38:2f:95:99:16:
e0:2c:d3:18:2c:aa:26:d1:14:03:6a:87:37:1c:10:fe:a0:fe:
e6:96:02:44:af:88:40:31:9b:88:a3:ab:10:ac:72:3b:ab:4e:
58:f5:dc:ee:d8:ed:a8:a3:c7:46:19:cb:b0:2e:f4:50:71:df:
09:fc:26:7e:f2:e3:ae:53:64:22:28:9f:da:72:58:ca:b4:af:
65:1d:46:fb:63:4e:87:3f:fb:98:a9:00:f8:be:8f:e2:73:d3:
ff:2f:3a:36:17:aa:ae:92:59:e3:c3:7a:00:95:6a:cf:a6:4d:
cd:14:90:4e:8d:47:e9:a0:53:ad:27:49:20:92:04:44:0f:8e:
50:7b:d3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nOVE7gwBfhRKSya17n6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk
ZGI0OTYwHhcNMjUwODA2MDkwMTA4WhcNMjUwODA3MDkwMTA4WjAzMTEwLwYDVQQD
EygzOWNhZGIxNTUxNmNjOGQyZTM4ZDQwM2U0MzU4MmNlYzUwMTVkYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPsH+IRLrvVlXHu//qKiC6s3HupV
3QvX1ackZYM7cor8jzOKDOUcgpA5bPyW9oIiNltVco5oiSUCZepz7JM25nueTnYC
aM1OPNXL+L2knFA9WfMRcnkam4bbxbuZ2FJt7RKarZUWJowm81nlqgoVqB8nPJO+
vzq4QCpccV3C9BoYI2RgLGxbbOkQRu3SkHXf8p7+irPIsXh7byaEH1EKR2YdfPpq
KA84v5TIs4xJI96UcDr//GzxMZcjdNvV/GCelyWV2mk4WFo0EoA+AlGix7/nU5RK
9SgxELuqS3BP8Dw3WuYYPp8FTM0euWZ0MZpIQSoVOmoVkm/B6kUK8GgzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnK2xVRbMjS441APkNYLOxQFdtxMB8GA1UdIwQY
MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt
NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4
LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVx9nqOx
UNQalcv3j5xuLQJ6wm1HeLvq61VvfhD5UKsPkqcUVK+dkFNUyn5wS+C5JBhhUEwM
NQ2Gf6bIoO5oY9sBExSCVzytJehTYBy0z7CKGQ1YnXt2QgM5WUsYsrkRnYvHuz4X
A3ToZasJLOhtxdOE5WLTJV/BiDgvlZkW4CzTGCyqJtEUA2qHNxwQ/qD+5pYCRK+I
QDGbiKOrEKxyO6tOWPXc7tjtqKPHRhnLsC70UHHfCfwmfvLjrlNkIiif2nJYyrSv
ZR1G+2NOhz/7mKkA+L6P4nPT/y86NheqrpJZ48N6AJVqz6ZNzRSQTo1H6aBTrSdJ
IJIERA+OUHvTZQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:14 2025 by rpki-client