
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: q8JQARI8oIMz2y1bp519bmyar9YKt1DxwKVuXSCyC94=
Subject key identifier: 58:6C:AF:14:28:5D:3C:06:BA:36:CB:D1:1F:3C:41:94:99:B5:A6:12
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 0198D54EB959B6EDB5FEFBCF71463CAF9B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: TgfB4SsDy3j5xLS7enhbqG490cg6VnHwaHJbERY9dlY=)
2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b9:59:b6:ed:b5:fe:fb:cf:71:46:3c:af:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=586caf14285d3c06ba36cbd11f3c419499b5a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:b6:25:76:ab:a3:74:ed:d6:d3:c3:90:32:
e4:7e:ff:de:31:c0:46:bf:30:fc:7e:fa:bb:9d:2c:
f6:87:c4:f7:53:5b:c0:c8:1e:53:a0:27:bb:e3:ad:
86:da:ad:0a:91:45:1a:45:ab:eb:b5:43:e0:21:a6:
0d:34:04:b8:0d:ee:f1:16:46:21:b7:c3:15:fb:78:
e7:f8:0d:c2:c2:9e:ae:7e:d7:39:6b:f8:92:77:de:
a5:90:0f:19:27:40:0c:e3:f4:a4:d3:9a:f7:09:97:
36:bc:59:fb:18:49:30:f6:c0:d1:55:1d:68:bf:09:
f7:c3:41:b8:0d:d1:b1:46:20:df:62:03:b7:63:fa:
96:bb:af:79:b2:d5:62:80:17:d1:33:1d:a5:25:41:
61:0c:ea:28:8a:44:ba:9e:4e:cd:15:3b:16:59:7f:
fe:94:43:a0:8a:90:f9:c0:f4:1f:44:4e:4e:88:0e:
c4:1c:a0:0a:9f:a5:0d:fa:a0:91:bf:27:95:f6:20:
72:d1:4c:04:e9:d9:7a:0e:45:98:42:83:36:ab:0b:
c4:f5:c4:72:b0:ce:48:60:43:87:3d:84:21:54:e4:
83:2e:be:6f:c1:6e:c9:aa:c0:42:6a:a7:82:e0:82:
50:92:8d:46:8e:b7:1f:76:b0:33:3b:cf:12:40:ba:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:AF:14:28:5D:3C:06:BA:36:CB:D1:1F:3C:41:94:99:B5:A6:12
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:cb:20:80:c6:ec:a4:cb:0b:c8:d3:5f:e1:37:54:b8:e0:
06:27:a6:cb:d7:15:01:64:96:31:37:96:60:15:fc:22:0b:e5:
1b:ec:41:2c:40:18:a2:a5:a3:ea:54:e2:78:0b:49:c1:5d:45:
7a:ef:31:19:17:c0:54:0f:69:ff:37:8a:bf:2e:7a:cf:86:e8:
81:c0:e9:35:76:f0:88:5f:f3:8b:60:64:ce:1a:85:b7:88:4d:
af:e8:c0:cb:82:f3:68:26:99:e3:2f:f2:d8:30:47:02:5f:b3:
da:c1:08:72:64:5a:9a:07:67:0a:fa:8d:a1:33:80:a5:4c:97:
d1:3e:24:b3:af:3b:63:57:29:31:64:17:93:14:fe:b4:a9:4b:
a6:7d:c8:9d:07:27:4b:3b:eb:44:1d:64:88:42:3b:1b:9a:b2:
58:b2:28:90:c2:2b:f1:7f:28:44:2e:5b:f7:fb:ca:13:32:25:
42:b9:31:d2:33:57:53:9f:8b:78:31:f8:25:4f:bd:26:c8:97:
59:9a:f9:36:1d:fc:d1:e3:7d:1b:6b:2b:b3:d9:13:ea:78:ac:
dd:68:34:c3:d4:2b:a8:a5:4b:64:67:a3:6d:3f:43:ea:e7:67:
ef:d3:cc:1b:fd:a2:e6:b6:72:46:45:6d:47:9a:58:05:83:3d:
54:3d:fa:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrlZtu21/vvPcUY8r5s2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzQwN2QyZTdiMmZmNGJjZWU2ZWExMGQ0MDg1MmVjZGNi
YzY5YjgwHhcNMjUwODIzMDUwMjQyWhcNMjUwODI0MDUwMjQyWjAzMTEwLwYDVQQD
Eyg1ODZjYWYxNDI4NWQzYzA2YmEzNmNiZDExZjNjNDE5NDk5YjVhNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArga2JXaro3Tt1tPDkDLkfv/eMcBG
vzD8fvq7nSz2h8T3U1vAyB5ToCe7462G2q0KkUUaRavrtUPgIaYNNAS4De7xFkYh
t8MV+3jn+A3Cwp6uftc5a/iSd96lkA8ZJ0AM4/Sk05r3CZc2vFn7GEkw9sDRVR1o
vwn3w0G4DdGxRiDfYgO3Y/qWu695stVigBfRMx2lJUFhDOooikS6nk7NFTsWWX/+
lEOgipD5wPQfRE5OiA7EHKAKn6UN+qCRvyeV9iBy0UwE6dl6DkWYQoM2qwvE9cRy
sM5IYEOHPYQhVOSDLr5vwW7JqsBCaqeC4IJQko1GjrcfdrAzO88SQLpiwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhsrxQoXTwGujbL0R88QZSZtaYSMB8GA1UdIwQY
MBaAFAV0B9Lnsv9LzubqENQIUuzcvGm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEt
MWJlZDJlZTA2NWYwLzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEtMWJlZDJlZTA2NWYw
LzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+fLIIDG
7KTLC8jTX+E3VLjgBiemy9cVAWSWMTeWYBX8IgvlG+xBLEAYoqWj6lTieAtJwV1F
eu8xGRfAVA9p/zeKvy56z4bogcDpNXbwiF/zi2BkzhqFt4hNr+jAy4LzaCaZ4y/y
2DBHAl+z2sEIcmRamgdnCvqNoTOApUyX0T4ks687Y1cpMWQXkxT+tKlLpn3InQcn
SzvrRB1kiEI7G5qyWLIokMIr8X8oRC5b9/vKEzIlQrkx0jNXU5+LeDH4JU+9JsiX
WZr5Nh380eN9G2srs9kT6nis3Wg0w9QrqKVLZGejbT9D6udn79PMG/2i5rZyRkVt
R5pYBYM9VD36lA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:37 2025 by rpki-client