Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: xGUwfjPEYooIMgZHtugCF/JutNfsRQ1oXsgab/UCPO4=
Subject key identifier: 72:87:95:41:F4:9E:E7:4F:6A:1C:D1:66:99:E7:A8:0E:CA:F1:97:1C
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 0198D5F1684CBAF30539F0A7583B4C1C56B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0D47
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: GLoC6tEyzgRFt1o1y3D919+3m5/gajBGQPWZQhm43pk=)
2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:68:4c:ba:f3:05:39:f0:a7:58:3b:4c:1c:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=72879541f49ee74f6a1cd16699e7a80ecaf1971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:30:40:fd:1b:6a:47:51:ac:bf:14:49:ba:
7b:dc:04:fe:e7:6d:85:c8:70:c7:67:b8:7b:e8:d4:
37:8e:89:ae:1d:8b:5e:2d:18:56:55:9f:2b:18:3d:
5e:29:13:14:df:72:9b:39:5b:59:ec:71:0c:8b:08:
f4:56:a4:68:6d:28:19:fe:f8:8c:b9:b8:f1:99:30:
04:0a:51:fb:03:70:39:15:8e:63:7d:66:93:35:20:
74:be:39:79:e9:d8:5a:84:10:ac:fb:eb:05:0a:b4:
ee:8b:be:f6:5f:0d:0f:34:53:d7:66:79:2c:e7:a5:
53:ca:82:38:45:32:31:5c:50:25:b7:77:16:45:76:
3e:36:4e:c8:4c:33:b1:4a:fd:3e:1e:85:a2:fa:bf:
b6:23:de:15:bf:32:62:69:41:b4:eb:d8:f0:74:ea:
b6:c1:d9:30:c5:72:e8:eb:f9:52:47:92:e9:10:4a:
af:85:21:b8:62:af:40:5b:1d:bb:78:4c:37:81:70:
c5:93:8e:92:8c:08:35:ca:4c:aa:5e:53:97:a8:99:
7c:55:6a:22:85:ad:db:bb:11:2b:f0:5e:52:4a:01:
c2:72:d4:7b:09:dc:6a:7d:36:db:78:00:45:db:3f:
43:e7:53:99:9a:38:1c:0a:0e:f0:16:21:52:27:79:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:95:41:F4:9E:E7:4F:6A:1C:D1:66:99:E7:A8:0E:CA:F1:97:1C
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:6e:22:eb:0d:ca:57:7f:00:4c:5e:45:ec:20:b2:d5:27:
15:95:e2:be:76:da:68:eb:11:c1:02:49:25:86:0f:15:53:bb:
5b:3b:3c:57:f9:49:74:b3:d7:6b:74:87:85:ba:73:dc:ba:e2:
42:77:39:5e:d1:2c:35:47:e1:12:7d:d9:9c:2d:a0:8c:62:60:
a1:75:d6:81:0a:e8:81:89:34:af:c1:10:42:4a:df:58:0b:4d:
ce:dc:a7:ff:7d:e7:7d:f7:1d:35:3c:b4:87:97:54:76:9d:4c:
4a:63:1e:15:b5:22:7c:2d:39:86:5f:ea:ba:ad:90:d7:5e:8c:
ec:94:d2:b8:6d:66:5b:2e:fd:21:07:6a:af:2a:a6:fd:e1:1b:
cb:ce:85:f8:a9:5c:19:56:55:fe:a3:1b:3e:1d:0d:f4:e0:91:
31:26:f9:0d:cc:47:72:67:59:4a:57:b9:a0:38:8c:41:46:b9:
1e:43:4f:89:8c:51:82:7c:13:3d:b7:0d:5d:e3:9c:e4:70:3f:
d3:db:2e:bb:ae:2b:46:ce:ea:c0:cf:c5:89:f5:87:d2:2b:53:
87:6e:88:05:ec:fa:da:c7:67:64:e2:de:d3:7e:e7:f2:26:6a:
32:fe:e2:de:50:b1:65:7d:bc:8b:2d:1f:fe:07:78:0b:a1:06:
0c:c6:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:45 2025 by rpki-client