Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: tyD3a7bGf/EDWnpfT+iMv+KoWVmltrbg7ZZSXbAq+yw=
Subject key identifier: 3D:01:39:33:84:3D:38:AA:98:31:76:41:A9:52:77:EB:90:20:9D:B0
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 0198D7A90BC799BDE7C029A614091DBA1F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0A36
Signing time: Sat 23 Aug 2025 16:00:36 +0000
Manifest this update: Sat 23 Aug 2025 16:00:36 +0000
Manifest next update: Sun 24 Aug 2025 16:00:36 +0000
Files and hashes: 1: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (hash: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=)
2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: XWoIWMaD6Z/Pvsr54a0qC07Wu715lLPZQ3i+PJqVbpI=)
3: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (hash: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:0b:c7:99:bd:e7:c0:29:a6:14:09:1d:ba:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Aug 23 16:00:36 2025 GMT
Not After : Aug 24 16:00:36 2025 GMT
Subject: CN=3d013933843d38aa98317641a95277eb90209db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:f3:53:cc:49:98:32:fc:58:10:ef:ef:72:
44:8f:fc:62:39:92:13:09:87:00:9a:54:4f:75:16:
fe:d7:d7:9a:7f:7c:e8:7c:2d:d8:68:16:05:c8:2d:
73:d9:cd:9e:c8:2f:96:9d:bf:ae:34:73:11:57:44:
ff:1e:54:21:b4:0d:0d:02:06:3d:ea:ef:ab:e8:9d:
c3:92:d8:29:ac:59:69:14:94:d6:65:a7:ca:1a:72:
62:f7:76:49:55:14:7a:ac:4d:39:d2:0d:fb:59:32:
0b:15:21:e2:39:18:3b:8d:d7:7b:11:74:19:30:a6:
08:6f:c3:52:4d:97:8f:7b:06:07:ee:36:37:e5:a1:
91:31:42:7b:f2:8e:70:3f:0f:4d:34:23:28:8e:66:
2a:89:fa:a3:4a:9a:d1:b5:c0:be:d9:2c:ed:fc:cf:
c1:bf:9e:71:84:53:2b:f0:0d:2d:32:8d:5b:b2:8a:
fc:63:fb:ae:31:1c:49:7f:0b:80:08:db:46:60:fb:
83:e0:1e:18:55:04:f6:e4:87:c7:16:bb:99:b2:df:
57:cf:ea:59:ee:1d:79:cd:16:46:43:86:8e:90:ec:
3c:b4:cb:bf:bb:50:6e:88:f2:08:f8:5c:1f:e2:2b:
b1:70:26:bb:eb:95:c6:2e:0f:8c:43:29:1b:3d:e6:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:39:33:84:3D:38:AA:98:31:76:41:A9:52:77:EB:90:20:9D:B0
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:77:71:6d:b3:b1:62:97:14:99:75:03:42:ae:5b:38:59:
19:e6:18:a6:50:1f:3e:20:fe:05:2d:8d:70:f7:44:3c:0b:32:
05:b0:a1:08:ee:96:c2:ad:0b:c3:60:52:fe:5c:26:d2:de:aa:
13:83:73:75:69:f0:94:05:94:ae:20:1a:54:71:6b:85:96:3e:
e0:57:a2:5d:74:e5:e9:11:af:45:32:24:18:f2:e4:1e:4e:88:
4e:fb:7c:09:d5:9a:c3:9b:a1:50:5e:4f:7a:a4:0c:be:f7:2e:
39:b6:3d:fb:18:b1:25:dc:45:9c:52:c0:ab:e7:78:6e:b3:0d:
81:6a:67:0a:f3:2b:53:92:80:5a:ba:ba:fa:85:21:0c:5b:c5:
cd:05:07:64:92:d5:d1:c4:45:d9:c8:3d:c4:b5:79:34:cc:49:
c1:c9:6f:a0:f5:12:f8:60:d6:d7:6e:79:e4:c6:bb:60:ef:89:
b9:cb:46:36:5c:16:ae:c8:2a:1f:d8:1b:49:6f:47:67:a1:16:
d9:33:6f:23:f8:77:9a:89:00:20:49:24:84:48:c7:d0:e1:df:
56:e1:e9:c9:87:49:e1:96:bd:b9:90:86:29:fb:90:73:4b:f5:
ed:74:2e:4c:2c:22:d1:76:0e:a4:ad:f9:db:aa:a8:20:6a:e8:
03:74:36:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:48 2025 by rpki-client