
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: uZ6DCuQYpyHgBPtDeh/3qJ4cMRrtpPiZuyjDUxOZdnY=
Subject key identifier: EF:31:DC:8B:A6:93:9F:49:75:67:55:D3:D8:D6:DF:67:49:30:98:1F
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 0199FCFD9878A7D591335956735529BF3B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: NM5Izx5hPQbKC3TRzxjpJcH7ygQaryFhHJBkhXGoZXU=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:98:78:a7:d5:91:33:59:56:73:55:29:bf:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=ef31dc8ba6939f49756755d3d8d6df674930981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:f4:e1:95:57:58:04:4e:5b:e4:60:77:1c:
f5:a8:c2:3e:a8:c2:e5:c9:3b:4c:bf:8e:49:f1:e1:
56:4d:2a:98:c4:e3:94:d9:60:b5:61:e2:ef:41:50:
e0:e0:7e:59:26:f2:8e:f1:47:a4:4a:f4:38:d4:0c:
20:fc:e7:76:2a:27:b9:3a:b9:f7:30:8a:c0:57:f5:
ad:4c:2d:0b:6f:87:ec:5e:80:9a:02:ee:c0:b0:04:
28:99:ab:89:4b:28:e2:81:18:89:d1:27:73:2d:dd:
55:f7:83:8c:f1:c9:ff:8a:c3:8a:47:46:b1:04:18:
73:40:11:63:92:48:5f:2d:fc:3c:12:bc:96:81:59:
38:ad:cf:48:fb:3c:a2:fa:9e:ab:76:2a:48:56:24:
d2:bc:ef:81:4a:a1:f9:e6:0a:9f:2a:5b:e5:98:70:
a7:3d:91:5f:b4:6a:b0:80:1d:87:36:b1:f1:50:8c:
e3:5e:9f:ba:33:79:5e:b2:89:67:f6:e8:1d:a8:22:
26:70:a3:7b:57:e3:43:df:11:77:49:cd:9b:14:a0:
40:42:68:4a:ef:66:ad:90:c1:80:31:80:ec:ca:e4:
43:9b:97:73:da:1e:6e:0b:a0:54:82:0a:98:4a:cf:
02:bb:a1:c5:66:c5:9a:f0:3f:0f:26:9d:db:39:c2:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:DC:8B:A6:93:9F:49:75:67:55:D3:D8:D6:DF:67:49:30:98:1F
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:6b:1c:df:b3:88:34:29:5f:a6:b4:6f:18:76:25:e3:5e:
2a:d0:de:f1:67:60:6b:f8:89:c2:ed:aa:7c:f7:4b:d7:61:86:
be:be:c1:ea:30:8a:3b:02:20:87:fb:1e:f5:19:45:ca:b9:c8:
9a:50:37:20:e0:4e:a4:43:54:25:1e:d4:c1:79:6a:60:97:17:
5e:6e:2f:d7:5a:69:50:60:a1:5b:c7:85:94:4d:e5:60:eb:3c:
23:c1:c3:cf:72:8a:b9:f0:30:ec:00:3f:d5:e5:b2:54:04:d2:
66:ed:38:5c:1a:79:9a:a2:55:81:82:39:8c:5d:c9:60:58:69:
02:c8:ca:0d:07:e8:02:01:de:9a:d1:c9:79:70:7b:18:0b:7c:
b4:2f:ac:90:c3:65:a4:92:c4:14:ac:cf:f8:43:52:ec:3d:5e:
19:34:23:f9:f9:d6:e1:e3:35:86:ac:17:13:77:d5:06:6d:d8:
51:6f:f1:53:d0:9b:8a:a5:ea:9b:98:91:62:65:88:50:8d:1c:
58:24:40:33:d0:18:c8:cd:d3:9f:0e:e7:9c:fc:55:30:fa:43:
6d:1e:f3:76:61:a3:28:78:2a:44:a2:1e:f8:3f:3c:f5:80:56:
35:a1:57:c4:93:5a:f9:cf:f3:60:7b:67:20:18:1c:43:a9:14:
f2:4c:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:41 2025 by rpki-client