Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: pp1Oal+YjUvikl1hsQ8xdo1WWvmV9X71JdeppQmn+qE=
Subject key identifier: 9E:90:C0:4B:4B:BA:56:2C:C1:08:0E:39:8F:81:83:5A:92:17:52:AF
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 0197B70F40A42DBB3F6D68E618F018C3E3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: W16neeNDUFsKeITlOvWQV0oTc7HFGeyo37ORIowr798=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:a4:2d:bb:3f:6d:68:e6:18:f0:18:c3:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=9e90c04b4bba562cc1080e398f81835a921752af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:17:c3:9d:77:7f:cd:1d:34:76:2a:17:47:
f1:e0:6a:55:e9:af:47:70:1e:82:43:07:63:43:5c:
79:e2:8a:cd:51:8b:e8:39:f6:4d:38:8a:26:e8:af:
a9:0f:ff:fb:22:39:c9:68:15:cc:d1:78:e7:84:2e:
18:9a:c7:db:09:5a:37:da:e8:64:c5:b0:1d:9f:9f:
ba:86:e4:17:9e:cd:59:a8:bb:c9:e7:1a:f3:0e:d3:
57:0f:f5:5a:4f:c5:b7:6c:5b:97:8b:01:b9:e6:ed:
ce:02:a5:90:d4:39:ee:ca:5e:95:a7:6b:ee:1f:e1:
a5:96:f3:56:82:89:d9:a2:6d:d2:37:9c:00:92:03:
f1:ee:15:c1:b1:2e:1a:7b:fa:86:6e:fc:fd:a1:7d:
a3:ce:5f:45:53:9f:6f:94:46:ec:7f:f4:a2:7d:4e:
03:28:c6:30:d2:e7:25:0a:cc:e7:c6:95:f3:12:72:
ea:7f:a3:3e:1d:48:0a:83:64:35:77:82:43:7b:a9:
c1:65:49:87:19:00:74:b7:91:fd:2e:63:dc:c7:c1:
34:81:8f:8f:a7:73:5a:ac:77:7a:03:1e:5c:fa:76:
6b:f4:6b:1a:73:15:1f:49:b0:90:72:e7:25:43:e2:
80:b3:51:03:e0:ac:38:40:84:61:bf:9b:33:92:10:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:C0:4B:4B:BA:56:2C:C1:08:0E:39:8F:81:83:5A:92:17:52:AF
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4f:5d:60:d8:5e:ff:7c:5c:cd:1a:87:cb:b1:bb:eb:b8:e7:
b4:a8:66:0e:b9:10:81:bc:0e:b5:25:95:87:35:94:71:94:15:
62:a5:fc:4e:b6:ed:26:c3:50:6e:7d:81:ad:c3:b7:ef:9b:f5:
23:30:ea:33:0a:d0:c7:53:8b:a7:b4:23:22:f9:ce:24:fc:16:
86:76:f8:9c:77:26:16:b0:64:63:3c:4c:2b:3e:5c:36:34:63:
3e:10:c9:67:0a:e7:82:69:b4:13:d0:f9:46:cb:3a:5d:b2:47:
af:2c:47:6c:ab:0a:36:cf:87:43:e1:61:52:87:32:24:2b:1e:
22:00:a5:b1:0d:e1:7d:ed:ed:d4:42:04:42:b0:c9:b3:24:06:
ad:6a:9e:6e:c9:cb:c5:09:1f:4c:9a:c2:e3:4d:99:0a:cb:c3:
65:23:76:6a:0c:d6:5e:95:aa:b8:30:b8:34:6d:da:d3:11:6d:
14:d9:d3:d6:d3:c4:ae:bd:94:d7:23:65:b6:00:25:cd:c8:ec:
93:25:c6:4b:12:d9:22:86:be:4b:b3:74:4c:c5:ab:dc:56:98:
98:15:db:4c:1c:f5:7e:02:4e:7a:1c:29:32:1a:89:db:53:21:
34:2b:33:8e:c8:0d:5f:9e:10:6e:4e:a6:f8:af:de:4a:aa:52:
b6:10:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:06 2025 by rpki-client