Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: 9LQFh1tXUwgRWTTQs4Wza0ja5fzltaxoQL3CAKmONvU=
Subject key identifier: 15:BA:C4:CC:DB:CE:84:74:92:9B:B2:5E:CD:AF:14:86:74:AB:80:8A
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0197B7455B4EAD7673ABC9BF3B3DD04C5F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: lkiAkTiHqkwTqRIjs4EBNhKD6aMDUtC3hOvKvcN7Zdk=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5b:4e:ad:76:73:ab:c9:bf:3b:3d:d0:4c:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=15bac4ccdbce8474929bb25ecdaf148674ab808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:ee:cf:3e:a3:bf:ff:c1:92:39:50:c8:3c:
e7:d3:16:71:e2:a2:de:10:00:2f:ca:3c:5c:c6:94:
6f:ce:a9:58:1d:47:53:d8:3a:ea:f5:1d:2e:cf:50:
96:db:3e:41:2c:20:0d:77:2f:33:0c:c8:40:2a:fe:
bf:bf:86:c5:b0:df:14:07:5a:3d:cd:3c:1f:00:64:
f8:88:7d:e0:05:47:0a:0d:28:b2:8b:83:ea:14:f9:
96:40:5f:7a:f1:19:27:69:fc:4d:85:e8:1e:e2:e5:
79:71:31:ff:28:d5:1e:6f:c5:4d:ca:03:a3:b9:ed:
45:0d:0f:70:68:05:4b:be:c0:87:35:c3:bc:c9:ff:
44:5e:4e:44:a4:c1:a3:28:42:b7:ac:07:a6:44:75:
a0:18:9e:87:c9:10:50:a9:eb:25:6d:f5:26:ff:ea:
30:b9:73:c5:cc:f2:7c:09:78:a7:1d:13:e5:0d:96:
0d:34:f3:59:2c:05:d0:97:4a:68:af:e8:8e:3c:ad:
86:eb:72:a4:eb:7d:b8:7d:6e:04:64:ec:13:3b:82:
c2:25:0b:c3:9a:b9:92:98:bb:49:2f:45:af:08:b6:
3e:ec:1d:39:0b:8a:06:29:f6:55:a6:f4:6c:77:84:
5f:ca:f4:e2:78:76:ee:a0:c3:cd:a8:8b:36:10:e0:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:C4:CC:DB:CE:84:74:92:9B:B2:5E:CD:AF:14:86:74:AB:80:8A
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c4:92:d9:33:13:cc:0e:39:57:df:f8:fc:f2:89:eb:ad:06:
ea:08:ae:1b:62:e9:f1:23:1c:ba:ab:5c:76:71:8e:d3:01:93:
01:b4:b7:04:d1:1b:3a:18:7c:6a:b9:fe:48:c1:35:9b:fb:37:
69:6b:13:7c:f5:2b:92:f2:92:02:c5:7e:d1:09:c1:e7:19:e3:
ef:7b:03:2f:66:2a:09:f3:66:61:3f:cc:95:4e:1c:c1:d9:5f:
d3:ad:09:53:82:f5:8f:18:4a:c1:6c:7d:af:1e:8b:9d:d7:d7:
94:b3:0d:84:88:ff:5f:c0:7e:a4:06:60:ec:b5:23:5d:a1:a1:
b5:93:ff:ff:e3:66:7d:a5:2d:c1:29:77:ea:aa:b2:d1:20:80:
70:86:7e:d2:e4:43:2c:ad:04:0d:0f:7e:ba:68:72:56:ca:48:
85:99:70:77:55:ca:73:8a:10:4a:d2:75:fe:29:66:67:48:19:
a3:ce:e4:c2:10:da:74:4e:05:4a:83:7d:9d:2b:41:72:2a:ca:
ac:1e:c9:63:8c:36:56:7a:5e:08:3c:95:c9:ea:a0:09:28:a7:
22:3d:c7:67:28:85:3a:0e:6b:89:76:2d:f7:82:96:d9:f8:a4:
0d:70:ba:63:bc:4a:b2:42:5c:d2:e5:d6:d1:85:67:be:99:68:
5d:d9:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:35 2025 by rpki-client