Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: vzUtBRGZ3RqnAJGwKti4BeLPCETPem7HDEV9FymZii4=
Subject key identifier: 6A:02:D9:9E:23:26:0F:CE:2A:64:C6:3D:47:0A:38:E6:BC:FD:D4:5C
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0198D7733FD4994425ADE718F5E7D9ED82A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0AD8
Signing time: Sat 23 Aug 2025 15:01:51 +0000
Manifest this update: Sat 23 Aug 2025 15:01:51 +0000
Manifest next update: Sun 24 Aug 2025 15:01:51 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 62+UIF0R3RObWCD+CwxoUC8GPsMuQvxI9QdhmiCG2iE=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:3f:d4:99:44:25:ad:e7:18:f5:e7:d9:ed:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Aug 23 15:01:51 2025 GMT
Not After : Aug 24 15:01:51 2025 GMT
Subject: CN=6a02d99e23260fce2a64c63d470a38e6bcfdd45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:b5:a4:8f:de:c3:ba:6a:bb:1a:9c:d5:87:
6b:b3:9d:e8:a3:9b:95:eb:d7:6d:1a:c5:91:77:5b:
5a:a0:4e:1c:5b:25:57:60:80:b7:a7:9e:d6:76:1a:
06:d6:b5:2a:c9:c3:94:70:6e:18:86:a9:6f:09:2f:
69:19:91:1d:6b:51:a6:9b:10:57:69:5d:0a:d7:91:
10:e7:26:70:78:bc:f3:ae:97:50:a3:06:0a:f1:4e:
1d:8d:bb:a8:dc:92:c0:22:80:a1:53:9e:cf:dc:d8:
04:c3:dc:e2:d2:7c:f1:86:9a:8c:1b:a0:9a:37:86:
bd:23:fe:5d:b7:08:2e:a3:4a:3a:77:3b:00:99:46:
c5:01:2b:a1:8a:d5:2a:78:a7:e1:b5:bb:80:aa:e2:
d0:7b:41:27:19:bc:e4:b5:b3:74:06:4e:26:c2:f6:
88:a5:71:3a:e9:75:27:b2:be:a0:06:1d:79:ab:c8:
dd:87:b5:7e:21:a4:9c:f5:cb:dd:71:90:17:02:3b:
e9:53:fd:ee:48:e0:66:bc:89:1b:9c:4f:b0:f1:bc:
76:8e:cb:e6:b5:96:60:fe:d9:9e:29:4a:13:6d:d1:
1f:d9:a1:5d:10:32:87:1e:78:05:1e:0d:9e:1b:62:
f3:60:17:9f:c5:61:d4:9c:69:46:8c:0a:88:62:8d:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:D9:9E:23:26:0F:CE:2A:64:C6:3D:47:0A:38:E6:BC:FD:D4:5C
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:f8:6d:df:7e:cd:f3:50:b7:ee:e2:f2:9c:82:49:4d:6b:
e1:0f:fd:b3:fb:e1:c2:58:99:7e:19:ff:55:d7:62:0e:ef:5a:
33:c6:f1:5a:4e:20:3b:39:20:0b:a3:41:5b:52:89:09:9b:cb:
78:34:ee:30:4f:d2:7b:34:1c:11:82:60:fd:1c:09:0e:5f:8d:
0c:f1:8b:88:ab:ee:a4:44:a9:97:21:b7:8e:1b:c8:28:9f:03:
70:2e:c8:68:4b:2b:61:c4:f5:f4:ce:d3:79:d5:a9:f1:35:59:
00:f9:87:30:d2:13:33:98:5d:b8:1f:b4:5c:71:9a:a7:e6:97:
3a:93:74:aa:bd:95:34:a7:d0:c8:27:f0:5c:13:8b:da:b6:23:
ca:4a:a0:ba:cf:b3:f4:00:ac:59:d8:86:a2:91:06:10:6b:14:
43:15:3e:bc:c3:34:4e:93:cb:88:fe:3a:64:9d:d5:aa:e7:4b:
0b:ec:52:08:07:4a:39:31:ec:45:d3:66:58:f6:67:c3:ca:67:
3f:43:cf:24:c9:c5:0b:69:74:49:9a:52:b2:ad:ff:38:bf:70:
cf:67:0f:6b:b0:f3:06:e0:d0:83:1b:3b:14:ad:44:e7:e9:6f:
53:aa:27:49:6f:7e:af:ab:a2:97:71:21:25:c6:59:4b:a5:76:
93:52:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:51 2025 by rpki-client