Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: qhOmBIdtQcvinojB+sD0hNJJbG1eAFBNw6k6l/i0B30=
Subject key identifier: 48:9A:43:49:3E:9D:AB:68:CD:D5:89:81:7C:52:C7:C3:11:1D:18:2B
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 0198D7736DBA30304A57D15F65CA23DBDB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 15:02:02 +0000
Manifest this update: Sat 23 Aug 2025 15:02:02 +0000
Manifest next update: Sun 24 Aug 2025 15:02:02 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: oruCSmyuVKDHS57qn73jeybcIXhSXbTmXMy9nTfIWsw=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:6d:ba:30:30:4a:57:d1:5f:65:ca:23:db:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Aug 23 15:02:02 2025 GMT
Not After : Aug 24 15:02:02 2025 GMT
Subject: CN=489a43493e9dab68cdd589817c52c7c3111d182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:8b:3c:7f:a5:c6:86:96:38:3c:ee:3f:da:
f5:2c:12:0c:3e:04:e0:1c:9f:5d:b6:00:83:38:ec:
a3:a1:f0:7b:95:5a:fa:35:96:e3:77:97:c1:75:f7:
84:48:40:7a:ca:81:6e:d2:13:e8:8d:d2:ff:cd:91:
bd:74:a3:48:10:8d:1a:b5:7b:cf:a4:9e:e7:ef:f5:
4f:d7:9c:b4:07:d1:43:51:7a:f2:02:6b:91:4e:aa:
b4:6a:70:a1:42:29:51:de:c9:d9:a9:2d:eb:d4:3b:
1f:26:85:f0:3a:95:f6:f6:5a:21:72:b0:e1:cd:73:
d4:e6:77:18:ad:45:ad:10:0f:c3:81:d6:57:4c:cd:
23:67:5d:c8:c0:16:ab:53:83:6f:e3:58:27:f8:ef:
05:a4:69:9e:01:7a:a4:3f:ce:de:cd:19:07:51:d5:
60:ef:4d:9c:24:ed:78:2a:5d:6f:cf:44:92:64:07:
79:bf:9d:ae:b3:7c:a1:6f:1d:4a:a4:b6:8a:73:ad:
9b:42:40:12:dd:f6:37:f2:73:6b:3c:ff:33:44:37:
50:71:0f:d7:69:5d:2c:94:d7:c7:13:12:d2:16:16:
63:e4:e2:42:ba:2b:0a:8a:4a:ed:32:7d:28:c2:64:
b5:b4:38:9e:02:e7:d5:f1:cf:83:b9:ba:03:06:b4:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:43:49:3E:9D:AB:68:CD:D5:89:81:7C:52:C7:C3:11:1D:18:2B
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f1:38:61:33:11:7b:c8:83:79:37:b3:1e:f8:a0:e3:67:8c:
a9:75:e9:dc:90:76:48:41:36:9e:1d:05:26:46:2c:0a:a6:e8:
e7:46:17:ac:37:aa:10:56:14:c1:a9:a2:78:a3:c4:b2:c6:36:
3f:df:93:55:e8:e0:8c:45:52:6d:31:0d:37:66:0b:2c:ac:7e:
04:48:33:3b:5c:51:5a:12:b1:8e:0d:93:6d:4f:b5:29:45:c9:
41:8e:43:93:3b:ae:74:12:a6:94:df:c6:86:c7:f9:ae:fc:ee:
07:2f:be:c4:60:08:6e:69:41:62:c8:57:23:22:b8:0d:09:00:
a6:a3:f4:a1:9a:23:83:bf:a4:15:e4:9d:f5:59:94:9b:d7:e3:
6d:f7:89:ff:11:cc:da:c5:e6:cf:85:b4:9c:e3:5d:be:c0:e0:
8b:1c:5e:bd:0a:76:f4:04:38:f2:be:40:0c:85:08:c6:0a:c2:
ad:58:b3:75:5d:e9:e2:bb:7e:d2:c1:03:0e:11:ac:94:d5:41:
74:06:28:9c:ba:de:48:c8:eb:92:76:56:38:76:8b:32:b3:b9:
18:bd:c1:a9:9d:57:c6:b1:5d:be:2f:2b:af:5d:57:7a:45:f7:
8b:ec:7b:10:8c:3e:e9:9d:99:dd:cc:9a:3e:e5:fb:e8:3b:fd:
d4:1f:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:37:58 2025 by rpki-client