Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: f2Bkdk/z0JyiB3sbmrHB938Fr557XJpATqVzRKrOUPU=
Subject key identifier: CE:A4:9B:11:AF:BD:5F:DA:5C:90:2E:19:17:00:85:9D:40:7C:C3:B6
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019A04B6419B932BB9239B06E142BF4C3ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0B74
Signing time: Tue 21 Oct 2025 03:00:44 +0000
Manifest this update: Tue 21 Oct 2025 03:00:44 +0000
Manifest next update: Wed 22 Oct 2025 03:00:44 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: ZzlIbbTnR3+J39xEgam6Yakzbri7Q64urYjrRgse614=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b6:41:9b:93:2b:b9:23:9b:06:e1:42:bf:4c:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Oct 21 03:00:44 2025 GMT
Not After : Oct 22 03:00:44 2025 GMT
Subject: CN=cea49b11afbd5fda5c902e191700859d407cc3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:3f:87:67:31:db:d6:41:c0:5e:fb:34:bf:
e8:b3:d6:0d:79:39:03:60:20:eb:16:43:5e:2b:c0:
cc:52:c9:5a:4f:5e:65:38:78:17:18:8f:ae:8c:ed:
f8:55:57:1a:57:50:16:bb:fe:3f:7d:b3:6a:f6:1b:
60:10:06:1d:6b:20:39:f5:ea:46:99:6c:f8:5a:25:
d4:b1:b6:f0:f0:c2:c5:e8:dc:9c:ee:08:d2:f7:16:
4a:57:23:f9:5c:38:82:e8:a4:40:40:1c:7b:77:20:
74:30:91:4c:72:a4:11:b0:29:fd:26:79:1f:2e:a3:
93:ff:02:6b:30:05:10:ed:39:3c:81:29:41:e3:65:
1a:18:13:5e:d5:78:ed:c2:98:5c:66:0b:c8:96:87:
87:14:29:6d:96:27:f8:64:3c:40:ce:c8:1b:73:48:
a5:c1:74:b4:0b:66:a9:89:01:e3:21:ff:b7:2c:f4:
b1:f9:d8:8d:d5:d5:42:fb:00:4d:71:ca:1a:86:ba:
8a:42:54:e7:39:42:7d:5f:80:6b:fb:dd:2f:00:92:
48:6b:2c:e7:04:c9:56:39:88:e3:8d:21:4b:fb:55:
4b:14:38:a0:b0:06:64:bd:7e:55:de:bd:80:07:a4:
d8:e1:4a:4a:8e:a4:8f:9c:54:d7:13:b6:cf:67:02:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:9B:11:AF:BD:5F:DA:5C:90:2E:19:17:00:85:9D:40:7C:C3:B6
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e3:81:5c:55:70:3a:ec:4d:28:50:98:1c:94:a8:31:84:98:
5e:3d:bd:e6:d8:14:86:25:29:af:d6:51:f0:b2:ed:9b:b6:70:
e4:02:5b:fa:8e:8c:dc:43:03:80:d7:30:9f:cc:f8:ec:dc:5a:
38:ca:8c:33:63:d2:21:fa:20:7c:0c:17:c8:af:36:b0:8e:78:
29:ed:0a:87:cc:8c:61:57:45:0c:eb:13:05:83:e1:11:cf:d6:
aa:de:d6:a8:66:a7:5a:34:bb:fa:94:85:42:5a:72:2a:0e:b9:
a4:3d:b8:76:9f:01:a5:76:dd:9c:17:96:82:f8:bc:61:8e:01:
47:29:a6:e1:ee:10:4e:3a:37:e7:38:82:37:09:2b:a9:f1:fb:
d5:fc:00:a2:39:0b:f9:76:18:c7:be:94:4c:50:5f:ab:f3:2b:
cf:ba:64:6f:be:57:58:4f:bc:9e:2a:98:b4:49:03:dd:2a:3a:
ce:54:a9:80:73:0d:14:05:85:d0:39:41:85:7c:4b:22:39:13:
f9:08:93:c9:3b:96:3e:79:b7:74:0f:e8:ac:97:00:39:fa:c0:
69:47:0f:43:40:8b:73:8a:3a:18:5e:2c:75:68:92:90:81:2a:
e0:d3:44:e8:91:e3:a7:26:65:1c:df:85:85:dc:23:ce:39:3e:
67:72:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:55 2025 by rpki-client