Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: obaMudHlgWleQElicdh4qDw5RbgmtGlYDWZdHa6cVM0=
Subject key identifier: 8E:BB:D8:D7:D6:F0:59:F5:E6:1D:88:A8:5D:A4:01:20:FF:E5:8E:55
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 0197B5C4D905F890668095350E5022A52020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 09:01:06 +0000
Manifest this update: Sat 28 Jun 2025 09:01:06 +0000
Manifest next update: Sun 29 Jun 2025 09:01:06 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: 0YOfDCH+EXDZ5gMQG7zn5ou5fsGuRhmeC8e9bCxK3kU=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d9:05:f8:90:66:80:95:35:0e:50:22:a5:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jun 28 09:01:06 2025 GMT
Not After : Jun 29 09:01:06 2025 GMT
Subject: CN=8ebbd8d7d6f059f5e61d88a85da40120ffe58e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:26:3a:b1:92:ca:ca:8e:57:5e:29:91:19:
17:dd:9f:94:2f:cb:7f:b6:b6:a4:86:9c:5b:4f:bb:
29:09:d0:16:8f:19:29:75:35:3f:c2:e1:b9:8e:ed:
b2:85:7d:f7:25:28:b5:54:32:08:01:79:62:a3:e0:
1c:49:8a:46:14:7f:d4:da:52:d7:3c:1a:7e:73:25:
99:e2:2c:30:15:6f:e6:68:cc:fd:4f:82:f9:10:85:
41:f7:ee:cc:ca:fd:14:7a:5c:4b:b0:4d:45:61:7f:
72:8d:bb:3c:26:06:17:93:b8:b7:a6:be:5a:c4:fc:
86:25:1c:66:e4:a3:52:be:46:7e:1a:cd:69:77:79:
41:c3:90:c7:3c:37:c5:20:56:43:22:cc:5b:0f:bb:
9f:c8:10:91:5f:b0:53:ed:4c:f0:dc:a6:ce:4e:d7:
da:13:4c:fd:c5:eb:c2:f0:0e:1a:99:fa:6f:25:fe:
67:66:9b:e2:48:e2:65:9a:9f:58:4d:fa:f8:0c:40:
29:b2:41:ca:9f:4e:58:d7:32:2e:a3:99:88:4f:f1:
41:01:ee:b7:75:f5:10:86:4d:e5:a8:b5:d8:e2:73:
ca:f5:77:d0:2b:db:d2:c8:ce:4b:6b:0f:c8:78:f6:
d1:22:a4:3e:9d:41:15:32:51:67:74:b6:cf:41:c7:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:D8:D7:D6:F0:59:F5:E6:1D:88:A8:5D:A4:01:20:FF:E5:8E:55
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:7b:a8:c9:93:4e:9c:2f:4e:8d:b7:43:03:8d:1b:18:b3:
1e:12:ec:66:3c:f7:9a:14:89:26:24:4b:e8:bc:94:a5:1e:e9:
11:67:15:ca:c5:32:84:f3:05:6d:4a:76:28:2a:72:03:0e:41:
05:1c:2d:21:6b:89:d9:0d:57:5c:99:8a:02:c1:1e:a6:f2:54:
ec:3a:73:ed:f4:b7:57:c3:a7:2a:e8:7d:b4:ee:50:68:8b:f7:
d9:53:f9:2b:c1:67:e6:f9:5a:18:2c:51:e1:f0:72:3f:47:14:
18:06:3e:55:b3:93:fa:06:b0:20:55:b7:c6:b4:df:bc:8a:8c:
ec:1e:73:04:50:02:ab:c5:c2:24:ce:3d:ea:78:6d:0c:d7:bd:
68:e6:5a:82:85:37:43:d1:4c:16:f0:14:ea:e3:1e:af:3e:79:
ba:ab:48:80:d8:45:8c:ac:3f:2c:c0:09:50:d3:20:7f:38:8b:
f2:96:27:65:e7:2b:92:79:92:8f:f8:90:60:ab:46:80:62:ce:
7d:23:58:f7:7b:26:fc:d4:b5:4d:6a:59:f3:d0:7f:0b:b2:25:
8a:c2:95:19:a2:26:bc:d3:32:00:8d:f2:61:3e:97:92:3c:5e:
9b:55:0e:d1:4f:e5:7d:0d:32:ed:63:43:db:a3:2f:21:38:5d:
b7:2b:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:28 2025 by rpki-client