Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: 90N/cuMzIDGnkWfYatw2lItGywakTh8Fcg72oBDPxrQ=
Subject key identifier: 18:EA:9B:D7:63:66:3F:6B:C3:82:5D:11:A7:6E:51:A1:09:43:D8:2D
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 0198D5BC24F30DC7AC2815B8DB61D9A18D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 9F
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: rh0ryYlwO4p+nhGwE3SStkUWEavswX5K8I73Lqom3CA=)
2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:24:f3:0d:c7:ac:28:15:b8:db:61:d9:a1:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=18ea9bd763663f6bc3825d11a76e51a10943d82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:0a:2b:0e:f5:7a:32:c0:18:6d:de:af:8b:
8b:19:46:9d:1e:a2:03:1b:e7:b5:fd:cf:eb:e4:20:
c2:b8:53:2c:89:02:5a:ed:68:f3:84:65:ea:65:b7:
6a:7e:b0:1d:45:bd:d6:35:1f:ce:46:82:d2:c9:da:
d4:41:59:4d:24:24:b3:11:24:ce:90:8a:dd:5f:a3:
e7:20:7b:55:12:42:a6:87:23:f4:4d:45:8b:af:fe:
2b:81:a7:c5:8f:4c:65:b3:53:ee:99:77:7f:bf:63:
bb:06:14:8b:af:d4:ee:ee:fe:c6:db:fc:1d:d3:25:
12:be:75:a0:b5:63:02:3c:da:bd:36:c5:5d:b9:44:
b2:ca:af:11:9c:7f:a2:b7:d8:db:78:dc:3e:01:6d:
bc:16:5c:3f:2d:bf:ea:d6:0e:d2:a3:02:ad:b8:ca:
fd:1e:ca:17:8e:c9:17:94:4d:a0:e7:85:93:07:c1:
5f:53:08:94:9f:ac:ad:c6:b7:f1:2a:96:3c:4e:9d:
ed:42:6a:02:4d:30:c1:08:c0:67:ab:4d:ef:ca:ef:
b1:36:7c:7f:60:1e:1b:4d:f2:f9:3d:25:cf:0c:30:
ca:cd:10:49:48:f3:94:48:9e:41:c7:32:0f:4d:93:
2f:da:62:cd:85:67:f8:9e:14:db:30:52:1c:ce:c8:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:9B:D7:63:66:3F:6B:C3:82:5D:11:A7:6E:51:A1:09:43:D8:2D
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:47:21:7d:53:08:cd:69:cd:71:1d:52:dd:75:0f:ff:0f:
10:80:1e:e8:33:fe:45:10:47:ff:ec:45:3d:ef:34:0b:25:5d:
fb:32:d1:a5:aa:12:99:74:c0:f9:27:11:cb:c6:72:b3:7e:d8:
a3:ad:ab:c8:31:6f:2d:e9:bc:a5:b1:81:f9:6d:2f:cc:b4:59:
43:32:4f:34:7f:47:c3:eb:53:17:3f:af:2e:ab:f1:81:83:33:
a0:7e:52:97:23:c8:98:36:1c:b0:8d:74:52:28:00:ef:6a:50:
dd:88:28:9b:b9:e3:0d:76:54:9f:52:05:b9:6a:7a:7f:ce:af:
24:a2:76:f6:d7:96:5c:aa:a9:67:e0:1e:34:b2:89:4c:8d:81:
18:a0:94:58:d0:75:cd:18:31:d2:8f:89:65:10:53:82:36:14:
a3:a8:59:ff:2f:6c:d1:24:d8:3e:f1:18:62:53:be:6c:25:57:
7f:ad:dd:a2:21:75:a7:3a:a2:9e:99:87:31:cc:1e:6c:7a:42:
1f:47:61:ff:69:8b:a1:87:6f:83:6a:ec:57:1c:63:4c:38:09:
c8:f6:ff:ca:e5:82:2a:31:b0:c4:9b:85:58:71:42:f7:03:80:
8c:32:8e:05:23:4f:10:7b:c4:ff:2d:59:8a:15:9f:0f:db:67:
fc:8a:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:40 2025 by rpki-client