Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: /K2dEkRLcJ+EUdSmg6ERjpKOnLMJTqrSk1FWyE/Sei0=
Subject key identifier: E1:E7:BA:C5:FE:44:8B:A6:18:40:F5:D0:50:74:72:8A:1B:9D:5B:E0
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 0198D5BBFBF1581C8AAB15EF27986CDD2A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1372
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: XryJijg+sbwgHZdtVyZbDIgCuk74U8yHGwfgVOKBaTM=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fb:f1:58:1c:8a:ab:15:ef:27:98:6c:dd:2a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=e1e7bac5fe448ba61840f5d05074728a1b9d5be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:97:88:6b:af:d6:38:69:3e:31:e1:45:53:
1c:75:f7:e9:1a:fd:00:da:0b:e0:e8:c3:66:8a:eb:
c6:e9:cc:55:e9:b9:ef:a7:44:10:97:2d:dd:e8:87:
a0:0d:56:2b:5b:6e:7c:d5:23:3c:65:ca:d4:03:77:
6e:ce:c5:6c:85:0a:73:fd:cd:67:81:48:44:42:8a:
c4:d9:13:98:73:b6:f9:0e:a6:82:b3:5e:ad:e9:8c:
4b:30:5f:31:e8:4a:23:3b:1d:85:bc:55:38:33:fb:
cc:c0:27:66:bd:c9:74:20:37:e7:97:03:20:1e:b3:
48:f2:8c:66:48:7b:cc:b1:f6:51:ca:96:8e:9f:7a:
c3:41:82:6b:91:fc:42:02:97:2b:34:5b:b5:10:72:
82:e5:d8:08:87:c0:eb:23:d3:01:8d:aa:e8:b0:a6:
17:92:9a:27:ea:0d:ed:d2:d7:c0:fd:85:e1:91:e3:
96:f8:c6:8d:81:d2:71:77:19:0a:16:53:5c:04:7f:
eb:d6:24:0a:fc:03:c1:72:e0:51:6f:f4:54:db:ea:
9c:57:7e:df:3a:9c:c9:a8:bd:98:21:75:85:6c:a8:
a7:dc:1b:96:ce:7f:1c:6f:be:5e:3c:86:cf:f4:34:
0e:e5:10:e4:05:32:d7:a1:89:02:d1:e7:4d:1d:a7:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E7:BA:C5:FE:44:8B:A6:18:40:F5:D0:50:74:72:8A:1B:9D:5B:E0
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:d8:be:b2:1f:b0:78:e3:40:de:e1:eb:3d:e4:f8:00:fb:
2e:6a:be:99:ef:c1:ba:73:e7:2b:d0:23:42:e1:20:5a:05:49:
24:ee:52:c4:45:71:d4:2b:ab:b4:74:fc:65:2c:61:96:2c:96:
79:16:68:7a:43:bc:18:c7:21:1d:d7:84:22:00:59:69:0a:66:
fa:11:f3:83:8f:fe:6c:0b:fb:b3:a0:50:b0:06:72:e0:7f:35:
22:96:fa:6f:19:27:df:9b:07:b0:e7:f4:68:49:66:33:ec:fb:
4a:05:79:01:38:1a:ad:2f:80:1d:02:ed:8f:2b:32:85:ba:dd:
50:3e:d6:07:2d:03:31:1c:f6:61:96:cc:aa:51:89:30:8a:ce:
5b:92:1a:7b:51:51:98:a3:dd:cd:30:c5:0b:bc:dd:f2:53:6f:
d9:31:b6:c9:ea:eb:0a:0f:78:42:26:61:4a:a5:a1:b0:21:7a:
72:5a:d6:5c:4d:8c:16:0a:15:b5:bd:a5:12:e0:af:ec:d7:52:
5c:dd:9a:5b:1d:4a:ff:75:18:18:ee:ea:cc:de:eb:e9:5b:09:
61:54:1a:9b:61:21:f7:fa:9d:8d:8b:00:17:0a:ad:52:8b:e8:
60:43:3e:95:63:4a:b2:14:11:4f:91:63:77:10:f3:7d:9f:34:
e2:7a:4c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/vxWByKqxXvJ5hs3Sp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTJiZTM3MzJmNmVmZDU5YzdkZTVhYjAzMDcyYTAxMmM3
MWI1ZWQwHhcNMjUwODIzMDcwMjAzWhcNMjUwODI0MDcwMjAzWjAzMTEwLwYDVQQD
EyhlMWU3YmFjNWZlNDQ4YmE2MTg0MGY1ZDA1MDc0NzI4YTFiOWQ1YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9SXiGuv1jhpPjHhRVMcdffpGv0A
2gvg6MNmiuvG6cxV6bnvp0QQly3d6IegDVYrW2581SM8ZcrUA3duzsVshQpz/c1n
gUhEQorE2ROYc7b5DqaCs16t6YxLMF8x6EojOx2FvFU4M/vMwCdmvcl0IDfnlwMg
HrNI8oxmSHvMsfZRypaOn3rDQYJrkfxCApcrNFu1EHKC5dgIh8DrI9MBjarosKYX
kpon6g3t0tfA/YXhkeOW+MaNgdJxdxkKFlNcBH/r1iQK/APBcuBRb/RU2+qcV37f
OpzJqL2YIXWFbKin3BuWzn8cb75ePIbP9DQO5RDkBTLXoYkC0edNHadQQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHnusX+RIumGED10FB0coobnVvgMB8GA1UdIwQY
MBaAFG6ivjcy9u/VnH3lqwMHKgEscbXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQt
MTMwODZlY2ZmOWQ1LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQtMTMwODZlY2ZmOWQ1
LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNLYvrIf
sHjjQN7h6z3k+AD7Lmq+me/BunPnK9AjQuEgWgVJJO5SxEVx1CurtHT8ZSxhliyW
eRZoekO8GMchHdeEIgBZaQpm+hHzg4/+bAv7s6BQsAZy4H81Ipb6bxkn35sHsOf0
aElmM+z7SgV5ATgarS+AHQLtjysyhbrdUD7WBy0DMRz2YZbMqlGJMIrOW5Iae1FR
mKPdzTDFC7zd8lNv2TG2yerrCg94QiZhSqWhsCF6clrWXE2MFgoVtb2lEuCv7NdS
XN2aWx1K/3UYGO7qzN7r6VsJYVQam2Eh9/qdjYsAFwqtUovoYEM+lWNKshQRT5Fj
dxDzfZ804npMRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:12 2025 by rpki-client