Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: 3u4dgQu76552jmBjIdm+FUXCE0NVavjTCBHOSC3udjk=
Subject key identifier: D2:ED:0A:AB:AE:13:15:1C:8B:5F:89:D2:18:54:10:6E:41:2C:51:16
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 0198D5835AE3BB7973BECAAB21F4113F86CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 11C1
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: cSaXcmfuYMdJ11MsxJbQCKqk141lqZCMCUhdx24EYpY=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:e3:bb:79:73:be:ca:ab:21:f4:11:3f:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=d2ed0aabae13151c8b5f89d21854106e412c5116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:3c:6c:fc:c1:d3:4c:b4:4f:ab:b0:c5:f8:
cb:ab:f1:39:5e:2b:15:e3:55:d0:50:7d:d4:e9:a6:
17:ae:37:61:46:64:bb:f5:84:25:c2:66:b2:ff:40:
f5:38:bd:9f:62:8f:da:79:c0:fa:49:89:5c:5f:15:
20:09:f3:48:37:66:c2:29:3b:62:62:f3:f5:51:b2:
61:c5:3b:21:f7:c4:73:16:76:b8:07:da:46:94:95:
94:dd:db:d2:45:ff:56:22:cd:2b:78:99:64:83:8c:
99:5f:96:ef:9d:a4:5d:18:36:ff:4c:c7:55:bc:c1:
a7:3b:51:bf:cd:b6:a1:02:60:83:fe:7c:96:4b:b4:
bc:c2:01:92:f9:86:1a:30:6c:48:64:8f:8d:0f:c7:
ae:41:54:79:90:c8:8d:a5:f9:fa:a9:ba:b9:10:af:
a8:ad:28:1d:4e:5c:f6:4f:04:27:87:c0:30:c6:09:
17:a9:88:30:9e:89:4c:d2:79:9f:48:1e:a4:c2:11:
ce:09:63:0e:8c:69:66:b7:b5:ea:24:b3:42:c2:70:
9c:45:9c:ef:04:9a:1e:78:19:9c:44:db:3c:93:e6:
f6:e8:28:90:2e:c9:af:93:ed:e2:39:04:3c:6e:cf:
dd:f1:16:5a:52:82:82:66:32:53:9b:02:f8:fe:f3:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:0A:AB:AE:13:15:1C:8B:5F:89:D2:18:54:10:6E:41:2C:51:16
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:f1:ee:c5:00:6b:34:13:be:32:4f:8b:1e:f2:99:c1:dd:
39:af:45:64:c2:b3:7d:de:da:8d:27:90:f1:fb:bc:bd:5a:ba:
32:00:22:7d:e6:07:0a:79:f5:f9:37:af:f6:83:6b:6e:d0:19:
f8:72:2f:54:de:4a:84:17:85:6d:6a:03:64:28:82:3d:cb:bc:
1c:9f:2a:30:d1:1b:7a:14:5c:7d:39:7f:2e:92:c2:ce:3d:9d:
fa:e7:39:fc:a5:1b:25:fd:ca:46:dd:87:b9:4d:2d:1b:6e:05:
b5:c0:24:56:30:0e:84:cc:55:a7:13:a9:af:ef:4b:dd:21:47:
f0:e1:5e:f4:35:cf:6c:25:57:ea:24:4f:c0:a1:a7:16:64:84:
3d:76:f0:bc:55:04:dd:5f:98:4d:05:29:d5:62:11:d7:0f:3a:
46:42:55:c7:62:e7:ea:96:60:6f:90:d6:2e:22:f8:f9:1a:bf:
fc:96:3f:d1:9b:98:49:0b:ed:8b:92:6a:54:44:40:4c:4b:26:
dd:5e:7e:cc:6d:bc:0a:c4:4b:c8:85:6c:3c:30:b5:dc:34:1b:
32:e9:cc:d6:90:65:d8:da:e8:c0:8a:bf:96:9c:ea:3a:c3:36:
fa:42:de:d8:51:31:d6:49:5b:54:73:62:12:f5:b5:5e:8e:5e:
fe:2f:f8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1rju3lzvsqrIfQRP4bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MGM5ZWM1ZDQwNTg2ZWQzMjU1ZjBmYzRmY2IzMTU3NzE0
ZGRhMTUwHhcNMjUwODIzMDYwMDEyWhcNMjUwODI0MDYwMDEyWjAzMTEwLwYDVQQD
EyhkMmVkMGFhYmFlMTMxNTFjOGI1Zjg5ZDIxODU0MTA2ZTQxMmM1MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F48bPzB00y0T6uwxfjLq/E5XisV
41XQUH3U6aYXrjdhRmS79YQlwmay/0D1OL2fYo/aecD6SYlcXxUgCfNIN2bCKTti
YvP1UbJhxTsh98RzFna4B9pGlJWU3dvSRf9WIs0reJlkg4yZX5bvnaRdGDb/TMdV
vMGnO1G/zbahAmCD/nyWS7S8wgGS+YYaMGxIZI+ND8euQVR5kMiNpfn6qbq5EK+o
rSgdTlz2TwQnh8AwxgkXqYgwnolM0nmfSB6kwhHOCWMOjGlmt7XqJLNCwnCcRZzv
BJoeeBmcRNs8k+b26CiQLsmvk+3iOQQ8bs/d8RZaUoKCZjJTmwL4/vPaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLtCquuExUci1+J0hhUEG5BLFEWMB8GA1UdIwQY
MBaAFAYMnsXUBYbtMlXw/E/LMVdxTdoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDct
OWUwYTUxM2RlZWYyLzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDctOWUwYTUxM2RlZWYy
LzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmnx7sUA
azQTvjJPix7ymcHdOa9FZMKzfd7ajSeQ8fu8vVq6MgAifeYHCnn1+Tev9oNrbtAZ
+HIvVN5KhBeFbWoDZCiCPcu8HJ8qMNEbehRcfTl/LpLCzj2d+uc5/KUbJf3KRt2H
uU0tG24FtcAkVjAOhMxVpxOpr+9L3SFH8OFe9DXPbCVX6iRPwKGnFmSEPXbwvFUE
3V+YTQUp1WIR1w86RkJVx2Ln6pZgb5DWLiL4+Rq//JY/0ZuYSQvti5JqVERATEsm
3V5+zG28CsRLyIVsPDC13DQbMunM1pBl2NrowIq/lpzqOsM2+kLe2FEx1klbVHNi
EvW1Xo5e/i/46g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:09 2025 by rpki-client