Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: 7YTrNkmsNLWr01nKbqJdXptoqmov3SsexUktbDKk1A8=
Subject key identifier: 00:19:31:94:E7:26:5C:C1:BA:B1:F2:43:A6:99:A3:48:9B:37:DC:AA
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019A003507341CE61B348D18D70A558BC12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:06 +0000
Manifest this update: Mon 20 Oct 2025 06:01:06 +0000
Manifest next update: Tue 21 Oct 2025 06:01:06 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: 4pqGJwyS04hlr+buYJi7LRhrcQTazZPXqxAttZpLOrs=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:07:34:1c:e6:1b:34:8d:18:d7:0a:55:8b:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Oct 20 06:01:06 2025 GMT
Not After : Oct 21 06:01:06 2025 GMT
Subject: CN=00193194e7265cc1bab1f243a699a3489b37dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:62:f5:69:d3:ea:a9:dc:f4:8c:3b:1d:b0:
67:fa:6a:06:9c:e8:54:7c:2b:82:0f:b8:d4:a8:7b:
76:de:a0:8c:bf:7b:f9:19:de:16:2b:63:3a:aa:c4:
52:34:70:4f:7a:95:bb:54:a8:f3:17:62:e9:4a:32:
ea:2a:ed:d0:a1:c6:70:16:87:3f:f4:a7:90:fe:14:
99:8f:80:83:29:aa:8f:2e:1c:25:02:50:11:4f:f9:
54:fe:f8:2f:af:b1:fd:e1:fa:34:a0:69:31:0a:f2:
5e:39:da:20:2c:37:51:eb:0d:45:b2:6f:ff:88:bf:
09:df:bf:1a:96:48:ae:5d:1d:ce:63:d7:03:0c:a7:
98:fe:85:5e:6a:55:83:b1:8f:b6:03:37:f7:d7:42:
ec:b6:a2:a9:68:2a:4e:12:2e:05:50:0e:89:f2:b9:
6c:7e:e6:40:e4:2e:a7:d6:e1:04:97:04:39:55:9f:
7f:77:fb:d0:01:36:23:66:58:ce:8d:4c:69:5c:89:
44:1a:f5:3e:1c:d5:45:07:a5:e3:e5:36:a5:39:8b:
f2:f6:7e:a3:52:09:46:2f:18:dc:f2:01:0d:92:e0:
6c:d1:57:b3:df:e1:ee:bc:cf:1b:ba:31:4b:e0:4f:
96:a4:14:e8:a3:be:70:81:54:87:99:66:61:f0:00:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:31:94:E7:26:5C:C1:BA:B1:F2:43:A6:99:A3:48:9B:37:DC:AA
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:ef:c8:5f:61:9d:94:d9:c2:9d:4f:5e:95:fb:80:0e:88:
ef:4b:a1:10:fc:92:1d:11:24:cc:7c:88:6e:11:39:4c:0b:d4:
9f:da:ce:bb:a8:97:ac:02:f9:24:e3:da:b4:57:ea:83:4d:1d:
e4:b4:97:0b:36:b2:e8:ee:e9:cd:a7:e0:4b:d8:cc:75:0d:56:
a4:24:d4:48:71:7d:b5:96:57:41:a4:1f:8a:88:8c:23:1c:7a:
68:b8:14:67:c6:02:26:ba:9e:90:e0:13:74:cc:3d:50:44:a5:
4f:4f:43:e6:d0:c0:86:14:c2:de:80:f4:54:b6:ec:d3:2f:63:
65:2b:6e:1d:e5:7f:f7:dc:e7:ce:a9:d0:c3:f3:c7:3b:02:40:
84:c5:ef:95:9f:c3:92:63:a8:68:da:ad:aa:26:96:d3:02:8b:
5f:65:5d:55:03:56:01:c7:42:fb:57:9a:ee:28:29:3a:7b:ef:
d6:4d:70:2c:eb:e2:7f:65:9a:dd:2c:11:12:58:22:2b:4d:17:
39:e8:70:c2:5d:c2:f0:04:44:be:f6:52:b4:f7:b0:95:cc:e1:
05:dd:52:42:b8:40:b3:7b:6c:a9:47:52:9d:e9:24:cb:f6:a2:
eb:7d:bc:38:26:10:63:92:40:2a:ca:77:81:19:81:ac:b2:69:
20:8b:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:31 2025 by rpki-client