Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: vIK3Hbod3RyTzI4SONOzK34U4lCcT1l7R3SoWxapHmg=
Subject key identifier: AC:F7:6B:7D:9B:DA:9F:29:06:C4:87:36:C0:4D:ED:9B:29:7B:6E:43
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0199FE7DC63B202FFE17974C082085C075FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: nwgy8FbWqqGDUyL3ljP824CgTdtYRuVd4dCVixpbJuY=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c6:3b:20:2f:fe:17:97:4c:08:20:85:c0:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=acf76b7d9bda9f2906c48736c04ded9b297b6e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:f1:ff:90:2a:e3:a1:3e:cd:0a:10:79:c8:
a5:b1:b4:07:d0:b6:80:d3:34:7d:ee:59:bc:68:4a:
82:0e:f6:4a:df:42:cc:2c:84:6e:0e:db:3d:6a:a4:
7c:36:88:11:be:e3:5b:e5:19:74:9a:6b:99:1e:0e:
62:9d:41:cb:80:e1:8a:23:3e:12:ad:f5:5e:83:48:
e0:a3:51:19:fb:fb:f8:ff:23:5d:2c:3f:84:83:aa:
bf:d4:9e:af:95:72:41:cd:25:49:3e:fa:2a:51:e9:
fe:a7:39:f7:27:12:e5:70:39:8f:b8:a0:08:af:f9:
32:7d:55:3e:22:4e:e3:ad:41:93:25:9f:02:ab:73:
0d:70:92:e5:0f:da:cc:3b:e5:71:36:d7:ba:95:b1:
4e:7f:c0:5d:58:44:76:1b:60:e0:54:2a:61:86:09:
d3:0c:0f:7a:2e:92:a4:a2:c8:01:7a:82:8e:7f:23:
a7:10:2d:6e:82:09:0b:b1:54:41:3d:17:d3:6c:56:
8d:36:d8:3a:20:34:55:6e:ff:a8:2a:35:e5:2a:dd:
44:a6:58:b4:81:40:6f:4f:3f:cd:ab:31:ae:7f:b1:
5b:01:4e:5e:38:37:7e:72:90:dc:51:9f:a6:aa:7b:
08:a6:5d:48:09:64:9c:52:dd:ee:a6:9f:2a:91:55:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:6B:7D:9B:DA:9F:29:06:C4:87:36:C0:4D:ED:9B:29:7B:6E:43
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:fb:26:1e:bf:ff:d4:91:e2:18:7d:ef:52:e1:5d:1c:42:
7a:77:bc:2e:b8:07:33:aa:74:70:04:57:fb:7b:03:37:74:00:
fc:9d:5e:18:d2:b4:34:be:db:7e:c6:8d:37:6b:14:4a:59:8a:
d7:25:85:f7:94:dc:dd:37:5b:01:78:cd:3a:8d:31:98:7a:9e:
89:24:79:5c:9c:e6:f4:34:f0:47:fb:db:56:da:6b:9d:6c:77:
d1:5b:ce:81:34:41:ac:d6:39:90:1a:62:03:93:a0:2a:16:c1:
bf:42:ef:25:62:12:c4:56:62:2e:4d:a6:5a:d2:e4:c9:c4:5b:
9e:69:5a:6c:f1:87:be:4a:a6:10:3a:a3:12:5a:46:c0:a4:6d:
69:74:df:93:59:69:9d:21:0d:a2:49:a2:e7:6f:bc:f9:c8:63:
73:43:1b:82:c9:a6:b6:42:a2:9c:51:72:db:e9:11:24:fa:01:
7c:1d:74:fb:f8:3a:8d:96:3d:ee:b7:e3:07:d4:af:16:9e:a0:
0c:8d:c6:53:08:c9:fa:3e:61:86:47:07:ed:87:55:8c:81:21:
62:eb:a0:87:81:ca:ed:08:27:e0:66:17:c3:8d:65:88:84:51:
b6:f4:30:3e:4d:8b:03:1a:82:7f:5f:b1:d6:16:70:17:0e:3f:
75:c6:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:40 2025 by rpki-client