Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: USmIW/7qaN+HmHHzMAuj8HlEuaEpFdJ/KQrRy9sleaQ=
Subject key identifier: 23:9B:2F:81:74:D1:BC:72:FE:7A:4D:C2:BB:CC:14:54:95:3C:5A:D2
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 0199FB45913038CC3D73129DAE6BAF4D3D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0137
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: 7u4i5ZCGbmtiaqBB9hM9Pwm3wIq1XdfhYfpUvW6rYDM=)
2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:91:30:38:cc:3d:73:12:9d:ae:6b:af:4d:3d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=239b2f8174d1bc72fe7a4dc2bbcc1454953c5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:ca:03:b8:aa:ee:fe:ba:22:e0:11:00:84:
ec:89:d4:d9:2f:6f:99:fc:a0:ec:8c:f2:c0:b3:6b:
b4:e5:9b:3b:19:ef:9a:20:d9:59:a0:3f:8d:f0:6d:
48:b0:3f:0c:16:e2:cf:d9:a4:ae:dd:63:39:bd:f3:
53:fd:d7:f4:e3:34:d6:2b:c9:cc:1b:f8:2f:eb:30:
e2:44:14:f7:7a:83:f8:ea:84:54:bb:99:67:ed:9f:
be:1c:d8:c2:e0:4b:e1:e4:d5:61:b8:06:b4:eb:52:
17:1e:09:4a:c3:f6:ef:10:5b:34:4d:63:9f:32:da:
15:93:1e:06:70:f9:6e:47:5b:9d:6e:67:bc:e9:fd:
05:57:4c:36:8d:aa:22:09:b1:1e:7d:5d:ed:b8:44:
c3:cb:e8:49:1a:51:ca:d7:47:22:c4:46:15:ad:94:
d3:c9:a6:d5:10:0e:d9:bb:13:4e:e5:c5:8f:7f:e1:
5b:f7:c3:54:e0:96:7e:f2:77:19:81:2b:da:44:c4:
b2:23:3f:d8:48:c5:08:10:a4:a8:ff:ac:c2:b2:a5:
0a:c1:39:10:31:7d:1a:03:99:6b:23:ff:51:f2:79:
3e:41:f9:07:d3:52:27:a0:17:e5:33:68:41:8a:ca:
ba:1c:39:94:a6:7c:02:30:e5:75:5c:55:b9:63:05:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:2F:81:74:D1:BC:72:FE:7A:4D:C2:BB:CC:14:54:95:3C:5A:D2
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:3d:2a:92:24:92:e0:db:0f:45:b6:dc:81:1a:14:38:58:
06:85:2e:47:91:e2:37:11:c9:75:80:74:af:5a:50:31:ad:4e:
43:0e:fb:ad:42:e0:e6:09:41:f8:99:36:35:67:9c:0b:6f:62:
45:99:ca:ab:a0:f9:93:dd:63:dd:64:0d:72:a4:31:c9:6a:87:
56:76:26:61:07:0b:24:4a:66:55:ca:7e:3b:33:c8:9d:20:e6:
9a:3f:9e:fe:67:83:73:a3:39:cf:08:4d:4e:e0:95:17:ed:bf:
2c:fe:44:c4:f2:86:09:5a:ee:d2:e8:57:c9:55:b0:fd:96:d6:
d8:8e:22:fe:d3:24:30:85:5c:9c:c7:a0:35:0a:60:cf:42:75:
44:59:a8:99:fe:0b:37:90:4a:8f:c8:3e:4c:7a:c8:17:89:35:
a5:2a:e7:ff:8e:fe:c7:ac:85:dc:e6:a9:9c:2a:cb:12:94:a1:
a1:eb:ee:fb:0a:a6:39:5a:22:4f:8d:b1:08:0e:b5:ff:cd:63:
dd:fa:dd:e5:d5:08:59:78:b0:4d:db:de:0d:9d:d5:b6:b2:f8:
b8:62:04:e2:33:33:f4:d8:1c:1f:9d:97:a5:96:d3:ae:29:69:
6e:1f:d4:7c:93:2e:83:57:18:bb:d0:6c:f4:36:2d:aa:2a:fc:
a4:b5:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client