Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: SDdG3jQOBdT2ySLsVTxqPT2rI3PTiY5HOh6djmDqIGk=
Subject key identifier: AE:5B:64:CA:34:75:C6:B1:32:E1:94:81:D2:C7:FB:7F:D7:A7:83:06
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0198D705E45E537FB0E4450FB49E77B12929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: +zJFAt6zsx9pQ5FuUsQmyDZAwBWuH5GgA4xhihQtDrE=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e4:5e:53:7f:b0:e4:45:0f:b4:9e:77:b1:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=ae5b64ca3475c6b132e19481d2c7fb7fd7a78306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:5f:11:e2:7c:eb:6f:90:58:50:8d:00:3d:
1d:9d:9e:50:f6:cb:d9:49:6a:59:9b:76:89:c6:9f:
24:97:8a:a8:c2:6d:26:cb:88:23:fa:86:cf:cd:86:
06:02:53:12:8d:a2:4f:c3:29:48:12:10:17:11:c4:
1c:5d:e0:f4:50:5c:de:a8:ec:10:04:cf:ab:10:30:
14:2c:83:2a:66:6e:8f:5c:f5:44:24:63:2f:74:e4:
f4:6f:82:5a:a8:1c:2c:80:b8:42:32:ed:58:4f:06:
78:a2:3c:1f:a2:3c:46:d8:4a:9b:e7:e8:59:d0:07:
c2:59:78:66:46:8f:13:c8:0a:91:a4:96:21:23:bf:
77:9b:0f:b4:4e:c4:15:c2:a9:7e:cb:19:35:31:03:
f2:6d:e9:0c:2b:3f:91:00:3e:70:41:eb:9c:f6:b5:
58:78:63:fa:7e:04:58:83:dd:bd:df:44:7f:e8:76:
25:c7:63:63:44:c4:19:ff:2b:4e:e0:19:bb:7f:a1:
66:59:7c:85:a0:98:d6:48:11:08:cb:62:89:6d:b4:
35:08:e6:c9:c7:b4:06:1b:16:48:3f:27:2e:3a:38:
24:1d:cd:1f:e4:3a:cd:fb:60:83:f5:06:5f:c7:a3:
d5:c7:2f:7e:ca:ac:ca:58:49:68:84:db:04:7f:6e:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5B:64:CA:34:75:C6:B1:32:E1:94:81:D2:C7:FB:7F:D7:A7:83:06
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d2:94:d3:9e:18:17:70:bf:cb:9b:5e:51:7a:7f:ff:a7:94:
e2:fa:8c:af:4e:4e:82:ba:27:7a:a0:51:f0:43:22:99:0f:75:
db:0b:11:e8:63:41:4b:51:ab:df:20:5b:e4:92:0d:d0:5c:75:
68:01:cd:2d:ca:b7:db:6d:58:ea:57:3b:c1:a7:97:4e:0f:21:
34:8e:43:a7:16:2a:14:07:02:f2:a4:41:0f:ec:e7:a5:f1:da:
20:f4:36:83:10:30:72:f6:26:b7:48:de:46:8c:a3:1a:d8:e1:
fb:9b:9f:b3:d7:4b:8f:4c:8d:76:52:7a:5e:3e:b2:fd:a3:b6:
0f:77:1e:77:b4:16:1a:ac:62:1b:7a:84:98:c0:69:1e:b9:42:
46:f6:73:b0:7c:9d:fa:8c:95:d2:b1:c2:de:29:f0:e0:cf:69:
3d:40:77:a4:83:8f:9f:8c:45:1c:f5:83:6d:a6:e9:15:45:ff:
07:8d:3d:36:c0:5c:37:e4:5a:b0:ac:45:75:8d:8a:c6:42:c3:
e3:ae:ba:56:06:b6:50:24:89:ee:24:70:5d:6b:c2:30:d9:b0:
55:2c:d9:e3:bc:32:ce:98:8a:60:0b:b4:71:35:2c:a2:bc:83:
50:0c:53:6a:39:c5:a9:16:e9:1d:e2:a3:3f:8b:e2:a9:73:16:
37:0e:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:11 2025 by rpki-client