Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: 84cVqlXA9TBmo5+hAVGa7PT8lFD7vloSM87qc4ETrME=
Subject key identifier: 94:55:C9:8F:D5:92:80:13:CC:54:BF:93:DE:59:22:7C:A6:79:72:C4
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 01987ED35B0B09493DB6814363C6A00E4C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 10:00:37 +0000
Manifest this update: Wed 06 Aug 2025 10:00:37 +0000
Manifest next update: Thu 07 Aug 2025 10:00:37 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: 2fYdLhS8upEchArTVYgYUUA0X9vM2ZtV2OLjdZdmTgU=)
2: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:5b:0b:09:49:3d:b6:81:43:63:c6:a0:0e:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Aug 6 10:00:37 2025 GMT
Not After : Aug 7 10:00:37 2025 GMT
Subject: CN=9455c98fd5928013cc54bf93de59227ca67972c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:e9:1f:bb:73:35:b1:aa:40:7c:0d:66:5e:
d6:8b:b9:a9:1f:d4:e4:cb:a9:b0:ea:31:a2:d7:aa:
6f:8a:a3:f4:f9:a5:f2:26:c1:dd:16:d6:b6:7c:a4:
e3:10:6a:db:55:0e:45:b4:47:ff:ed:ab:e7:82:96:
5c:35:9a:1f:3b:cb:41:0d:1e:eb:bc:7a:54:58:e9:
dc:e0:63:c0:82:74:aa:54:a2:92:b1:e8:c8:35:e6:
21:60:d1:76:dc:04:c6:b8:41:0e:22:76:5f:03:49:
de:aa:e7:42:5e:06:a5:6d:24:dc:65:91:6d:39:e6:
eb:91:3f:30:85:90:96:59:b2:2f:a8:ef:44:82:0f:
84:40:83:7b:ff:d6:56:26:f5:e8:b8:a4:5c:e1:68:
6d:d2:14:81:08:db:6e:83:22:6b:82:5b:48:c8:cf:
93:1c:24:02:9e:04:90:8f:36:8f:84:5f:0c:e3:73:
17:c9:25:dd:92:7d:08:99:24:6b:5a:eb:46:a2:e5:
51:ce:70:e4:ad:ca:7a:59:86:ab:26:b1:18:42:9e:
93:39:dd:fd:7f:4c:65:71:af:59:ad:a7:a2:0e:55:
88:ea:2e:24:60:09:9a:d7:a6:d1:a2:40:15:da:64:
e5:69:9d:d8:a7:c3:d8:0d:d4:66:15:43:70:70:a0:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:C9:8F:D5:92:80:13:CC:54:BF:93:DE:59:22:7C:A6:79:72:C4
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:a7:5b:60:ec:55:21:47:93:a1:2f:8b:62:6c:74:62:31:
f2:49:91:a4:a7:05:1e:08:98:a4:fa:fa:b1:50:65:70:88:f8:
69:20:34:d5:b8:7e:cc:9f:31:51:8a:e7:de:e2:ba:0e:e3:ce:
f8:a2:c8:ed:a1:47:29:81:9d:a8:b5:8c:f4:cb:90:a7:4f:5f:
69:3e:84:53:91:3b:44:ac:61:df:f6:14:a1:d7:7d:1f:85:6a:
46:50:b0:53:8c:a4:54:50:7a:4c:4c:f1:6a:de:ee:8a:03:74:
78:b8:7c:31:dd:b4:3d:d8:7e:ff:cc:6e:b5:ef:9d:b6:bb:a8:
39:1f:0b:56:7b:fb:8b:9c:d3:e6:cf:c5:61:04:65:34:69:03:
af:f2:3a:58:4e:91:e8:30:3b:3f:7e:ae:e0:d1:b5:fa:e6:cf:
e1:47:32:6a:ae:77:a9:44:2d:72:60:c5:96:b3:5f:3b:28:ca:
42:aa:e0:b9:a6:00:7b:0e:31:19:37:dc:a9:93:36:87:80:c5:
b3:5e:ea:e5:95:06:08:64:01:ec:06:c9:73:28:9a:d0:3b:c4:
41:44:31:44:66:bd:6a:ea:ed:c3:de:e1:9c:1e:d1:d2:7f:e5:
1b:c1:32:be:7f:08:ba:82:ee:5b:a8:30:43:24:48:b3:08:84:
bc:04:25:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+01sLCUk9toFDY8agDkxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4
MDZjOTEwHhcNMjUwODA2MTAwMDM3WhcNMjUwODA3MTAwMDM3WjAzMTEwLwYDVQQD
Eyg5NDU1Yzk4ZmQ1OTI4MDEzY2M1NGJmOTNkZTU5MjI3Y2E2Nzk3MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/pH7tzNbGqQHwNZl7Wi7mpH9Tk
y6mw6jGi16pviqP0+aXyJsHdFta2fKTjEGrbVQ5FtEf/7avngpZcNZofO8tBDR7r
vHpUWOnc4GPAgnSqVKKSsejINeYhYNF23ATGuEEOInZfA0nequdCXgalbSTcZZFt
OebrkT8whZCWWbIvqO9Egg+EQIN7/9ZWJvXouKRc4Wht0hSBCNtugyJrgltIyM+T
HCQCngSQjzaPhF8M43MXySXdkn0ImSRrWutGouVRznDkrcp6WYarJrEYQp6TOd39
f0xlca9ZraeiDlWI6i4kYAma16bRokAV2mTlaZ3Yp8PYDdRmFUNwcKCFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRVyY/VkoATzFS/k95ZInymeXLEMB8GA1UdIwQY
MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt
NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2
LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNKnW2Ds
VSFHk6Evi2JsdGIx8kmRpKcFHgiYpPr6sVBlcIj4aSA01bh+zJ8xUYrn3uK6DuPO
+KLI7aFHKYGdqLWM9MuQp09faT6EU5E7RKxh3/YUodd9H4VqRlCwU4ykVFB6TEzx
at7uigN0eLh8Md20Pdh+/8xute+dtruoOR8LVnv7i5zT5s/FYQRlNGkDr/I6WE6R
6DA7P36u4NG1+ubP4Ucyaq53qUQtcmDFlrNfOyjKQqrguaYAew4xGTfcqZM2h4DF
s17q5ZUGCGQB7AbJcyia0DvEQUQxRGa9aurtw97hnB7R0n/lG8Eyvn8IuoLuW6gw
QyRIswiEvAQllw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:45 2025 by rpki-client