Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: Sl85W66C10bASa6YiXRD185gDqjHtWA/Q+HtiKHph78=
Subject key identifier: B2:E8:BF:93:44:0F:75:88:63:55:93:FB:D0:93:CF:2E:45:C4:42:4C
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 0198D6CDA6A904E909DFE134495A62443F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: 1HC9hvJyL2QEsWa4EcZDq+EMbcD7xOWofKGqYxZTnYA=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a6:a9:04:e9:09:df:e1:34:49:5a:62:44:3f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=b2e8bf93440f7588635593fbd093cf2e45c4424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:e4:9e:c8:64:43:31:2a:08:d5:c4:48:5c:
d6:30:5a:f8:93:ec:f9:aa:b1:7e:54:e1:12:ee:59:
af:11:8b:99:2c:e8:6f:ae:ee:07:47:8e:80:89:27:
60:68:ca:fb:ec:fd:7e:a6:6c:86:13:a9:c7:e5:bd:
7a:86:ab:fe:9a:3e:ba:38:5d:59:de:e2:e9:d9:07:
15:70:77:82:be:dc:8a:6f:1e:33:64:13:34:63:c6:
68:31:98:52:77:ea:7e:d0:8f:dc:ca:5f:5d:a8:72:
5c:64:25:1a:a1:28:df:bf:30:8e:ec:a8:27:37:04:
d1:4d:cc:23:69:46:37:01:80:5d:eb:96:1f:72:aa:
89:d6:36:a7:58:07:24:8d:52:38:c8:39:46:16:96:
3f:9e:a2:a9:94:b7:8b:43:0c:77:83:6a:54:a6:31:
e1:ad:22:ab:98:02:4e:3b:9d:ef:6f:7c:2a:b9:90:
d0:2d:7e:b1:eb:3c:66:85:0e:43:67:0c:5c:ed:bc:
83:b4:8f:12:d4:f6:e3:f4:19:2c:fd:a8:ee:3f:7e:
f5:48:23:b3:05:66:05:dc:6a:ee:69:ce:c5:02:60:
65:44:49:e2:76:ba:71:5e:7f:00:8c:12:9f:d5:0a:
2d:22:66:90:93:ff:d8:82:59:8a:ca:4b:1b:8b:06:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:BF:93:44:0F:75:88:63:55:93:FB:D0:93:CF:2E:45:C4:42:4C
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0a:e8:22:f2:16:e5:88:e6:a0:12:81:0a:83:52:70:40:b0:
64:1f:41:15:26:2b:b1:ed:03:71:9a:fe:8d:f6:b1:84:1c:2c:
d4:57:80:72:d0:c8:b4:92:e3:f6:fa:eb:5a:11:62:72:09:9f:
7a:35:6e:b9:e5:0b:3d:a3:c4:4d:ad:b2:87:b1:1f:1d:83:a3:
7e:b0:50:0d:14:05:21:02:a1:f2:01:d9:05:d9:91:8b:67:d7:
49:5e:08:bf:d9:ba:c5:de:aa:40:10:27:57:eb:d4:b2:0c:b4:
40:02:e7:c5:1e:c9:ef:2a:a6:99:f8:47:8b:55:a0:7a:66:5c:
fd:76:04:d7:09:a8:49:0c:9c:27:70:06:2a:14:30:39:49:5f:
ed:bf:0a:02:35:a9:ac:74:e1:7a:70:45:0a:08:b8:e5:26:a1:
ad:c9:32:d7:4e:69:56:8b:a7:8e:af:7d:f8:cb:3c:4e:c0:d4:
9c:a3:76:52:62:7b:17:74:a7:bc:7c:a4:60:01:b2:fc:ad:61:
a4:54:d4:c6:6c:53:69:c3:66:b7:45:92:bd:07:b0:c6:2d:78:
f9:82:4d:dd:75:bd:08:f9:23:4d:32:27:76:8b:70:55:6e:fd:
06:81:22:10:7c:4a:8c:f4:84:89:8a:f3:c7:fd:51:49:bb:bd:
e3:8b:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:20 2025 by rpki-client