Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: ZuPQiW/FAPBPsacqbJyrU5rtqvzr6C48BWBWr2sV4Qc=
Subject key identifier: 00:3C:34:83:EC:09:C0:BF:FB:5A:D9:3C:81:7D:22:BB:55:7D:A6:BF
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 0197B7EA7B91958526584A6192257FB1A09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 12DE
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: qbQ9qjGmH08qMXFKwKDBjY2pcNuHnDlXAdis31L5SiU=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7b:91:95:85:26:58:4a:61:92:25:7f:b1:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=003c3483ec09c0bffb5ad93c817d22bb557da6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:6e:98:0c:45:7b:87:d2:d6:0d:d1:7a:47:
ae:9b:f9:41:7b:ed:75:e4:ee:e5:59:f8:b8:c6:d2:
63:8b:89:ef:ce:38:4b:f3:73:bb:87:c0:ce:6a:16:
87:24:d4:5f:99:f2:87:5e:75:1e:09:f9:ac:16:2c:
6b:15:ae:3c:c5:d9:75:ab:90:e5:6a:74:41:75:53:
24:08:ef:a6:8b:8b:a3:f9:9f:5a:88:50:51:bd:b6:
1d:8b:a2:3f:7e:8b:a9:fc:ca:38:71:b3:97:8b:cc:
0c:69:7a:37:25:e3:14:14:13:6d:12:d8:2a:69:5c:
c2:4b:41:f5:06:64:29:5e:1e:4a:51:51:41:d6:c9:
90:e9:b1:41:6a:ee:6c:06:b7:e9:ca:9a:10:a1:34:
2a:42:94:9f:e1:18:ba:90:59:29:a9:04:7b:b8:af:
34:26:8a:19:8f:57:da:8f:2f:12:0d:f4:66:c2:15:
ec:45:b9:a4:3a:23:91:39:24:9d:09:77:30:eb:82:
77:1a:14:c4:27:91:6a:4f:fe:45:67:43:5c:34:69:
c4:59:bb:fc:5b:c8:fc:b7:c6:e1:32:6a:35:ca:de:
2d:0d:bc:e3:2e:38:c0:f7:1b:14:1f:af:40:b5:0c:
47:3e:b8:4d:8c:36:5d:01:9e:93:13:5d:9f:89:a2:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:34:83:EC:09:C0:BF:FB:5A:D9:3C:81:7D:22:BB:55:7D:A6:BF
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:44:fc:d4:e4:ee:f6:c3:d1:70:cf:5e:0e:d3:d6:24:9c:
94:b5:32:92:7c:33:ee:cb:80:77:ef:24:8f:54:c5:64:52:f5:
ce:a0:24:68:e8:52:9b:30:d3:5b:44:9c:6a:38:50:d3:b3:12:
a0:86:b2:b1:d3:c1:6b:0a:46:94:3c:cb:8e:19:95:8f:40:4a:
2c:a4:9e:01:06:d9:ac:f1:4f:63:e0:13:fd:e7:ae:41:86:07:
98:3c:2f:2f:93:80:84:d8:d7:29:cf:b5:9a:c5:2e:cc:89:ff:
59:29:90:a1:8c:15:80:d7:8a:61:8b:45:51:e3:d0:81:8d:6c:
6d:25:8a:33:83:1e:63:f9:52:39:0c:a0:b9:f8:a4:1a:5f:82:
6f:79:dd:b1:60:ff:8e:ef:11:5c:3a:66:9a:24:e9:ef:f7:dc:
b3:c1:0e:14:f0:bd:1c:d8:83:4a:24:2c:2f:f3:fb:81:b5:0b:
14:bf:c0:3e:28:cc:e0:e4:c2:b1:9c:dc:cb:26:59:a8:d1:f4:
47:d4:73:e1:ef:48:61:10:1a:44:b6:2b:cb:24:09:8a:b2:da:
54:f3:1e:f1:d4:a6:8a:07:29:01:bb:dc:9a:5c:ae:f7:84:64:
21:46:8b:ff:9e:8f:d1:86:ba:63:63:1c:fb:54:3c:96:34:4d:
0b:8c:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:43 2025 by rpki-client