Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: tdeTlyRqUR2d/g7i8QG6pvi6ltGPtQjehID4kvSz87g=
Subject key identifier: 52:6A:91:01:85:D2:C8:6C:98:7C:FC:D9:C3:01:25:81:E1:FC:B1:E6
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 0198D73BDD554F8A7EAB9FA202DCE112B48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0BA4
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: 1SaFpf1R6qWaqznN+0b15Fajhsp/csDR3elBFJSOFgc=)
2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:dd:55:4f:8a:7e:ab:9f:a2:02:dc:e1:12:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=526a910185d2c86c987cfcd9c3012581e1fcb1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:b3:8b:81:02:4f:66:c9:f8:32:23:a5:23:
dd:b5:78:aa:a5:2e:73:3c:61:9b:a7:e4:b6:1e:20:
f7:c9:56:cc:a4:01:00:23:51:11:09:df:d0:e4:d4:
50:20:73:64:92:f3:1e:e5:89:da:7f:d5:6b:18:7f:
15:4b:79:72:da:b3:a1:e1:e8:42:bf:06:b5:b5:be:
0a:50:7e:b6:d2:76:85:62:27:7b:e3:86:c3:57:54:
5f:f8:dc:3d:1a:d1:e2:f4:f4:a5:b5:9d:6f:4f:02:
25:d9:1b:f4:c7:94:64:2b:10:5b:26:f5:b8:22:d4:
e9:2c:f1:33:8e:50:f6:c9:51:c6:87:31:8d:88:29:
10:eb:70:6e:90:7e:ac:7e:b3:e3:1e:8a:36:b0:6a:
a7:a4:01:48:7e:d1:c5:0d:cb:68:ce:85:3b:45:9d:
ff:cf:94:5d:39:d2:c1:b2:11:b7:a4:a9:2a:f3:8f:
c1:16:69:54:1a:d7:dc:b5:61:87:a1:78:44:bf:fc:
51:5f:b6:01:09:35:39:b9:4d:b7:91:95:a6:23:ca:
7c:59:97:32:d6:f7:2d:66:12:a1:8d:c0:ce:5c:32:
5b:cf:35:00:27:ca:22:8a:8f:cd:79:bc:09:8f:38:
9e:4f:aa:47:03:c3:7a:c3:98:14:56:0f:d1:9e:13:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:91:01:85:D2:C8:6C:98:7C:FC:D9:C3:01:25:81:E1:FC:B1:E6
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:61:87:a7:d4:d9:a2:59:fc:4d:dd:bc:9c:6e:95:df:f3:ad:
70:82:e9:85:70:95:78:95:61:71:a3:b3:9e:40:e0:3a:98:ce:
8e:49:7f:7b:4b:cd:9d:c7:9a:29:f6:1b:c9:df:69:52:ee:81:
54:91:ea:dc:89:1b:4f:b3:b4:9c:45:6d:e9:90:41:86:46:8b:
7e:e2:1a:0d:8c:da:5d:52:86:e4:ee:8b:a1:52:92:7a:d4:20:
9d:e2:3d:b3:15:ef:05:57:6c:21:a2:cb:04:67:a8:36:96:e9:
72:b4:56:af:ab:a3:4e:7e:fb:55:bb:98:ab:27:2d:cf:8c:ca:
73:b7:b5:3e:ba:d8:5b:e8:9e:96:b2:51:27:81:c1:a5:37:7c:
77:f4:0b:ac:62:58:e7:ae:5d:29:20:d5:2a:24:23:87:d6:c0:
da:24:f1:8d:9b:27:0f:b5:da:88:c1:84:3f:71:cf:d7:cc:44:
d6:ac:f2:fa:2a:b0:54:79:9b:b4:3c:e4:ec:1f:49:8a:01:9f:
60:11:aa:35:b9:ed:6a:4c:32:49:9a:71:0c:c8:c6:87:96:c8:
42:a0:13:5b:60:e3:a4:c6:c1:36:20:e7:74:c2:be:3a:f6:cc:
b8:e9:69:ce:70:95:da:5f:0f:74:68:bc:70:98:87:99:e0:e5:
7e:fb:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:01 2025 by rpki-client