Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: kc7LmnM4aUaK48glMXcmo1SGhp+SCMtk/dSgxnwl5vc=
Subject key identifier: CD:E6:47:C2:D3:98:70:31:ED:89:E2:FC:91:1C:38:AE:91:FD:C5:22
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 0199FC2175202FAC36E0B5FA823B9E0EB291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: I9SG9di8zgsl9ccvTef2a4uINykxXJznhV7eLO7unEg=)
2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=)
3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:75:20:2f:ac:36:e0:b5:fa:82:3b:9e:0e:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=cde647c2d3987031ed89e2fc911c38ae91fdc522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:e5:88:14:e2:16:e5:d7:58:f4:2a:8c:d1:
d7:da:cc:91:94:89:53:f6:95:d5:a4:c6:0e:7e:96:
dc:67:23:48:53:2a:00:db:44:5e:7b:de:f9:a6:11:
1d:42:0b:fa:b5:b7:b4:18:c2:e9:1e:a8:0a:68:85:
e0:c4:19:5a:72:62:cb:ac:40:8f:ff:81:0c:62:69:
fd:75:4d:f2:f7:1f:fa:88:48:01:32:94:b2:37:f8:
34:5c:3a:ef:95:38:56:03:8b:9d:8a:20:ca:4c:76:
6b:07:fc:40:f0:1c:c3:ae:aa:5b:b0:42:46:47:4c:
1b:a2:ee:64:da:99:c0:e6:3f:b3:12:77:d2:77:2d:
f5:f9:2b:7d:8a:d8:7c:9f:f6:4b:03:e9:83:63:f3:
c7:af:d7:46:0d:04:56:88:cf:7d:10:b8:dd:56:86:
7e:a0:86:39:c7:f7:9b:9b:9c:4e:93:31:48:26:80:
f3:84:23:0d:e8:70:7b:10:4e:56:52:50:de:0d:21:
73:cb:7f:c8:1f:7e:af:cb:ac:49:06:0e:9e:92:2b:
4c:0b:83:b0:9e:c6:9e:cd:5d:77:03:ec:54:b2:21:
4c:df:85:c5:1e:58:c2:4a:f0:04:14:31:b9:b2:ae:
25:39:6c:18:48:7a:3a:2d:fe:bf:a9:27:7c:fa:cb:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:47:C2:D3:98:70:31:ED:89:E2:FC:91:1C:38:AE:91:FD:C5:22
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:20:c0:73:d9:d8:ac:27:29:c7:3f:a7:29:57:f3:dd:49:
f2:3c:87:ca:5b:c8:5e:3b:51:bc:09:64:97:0e:99:b4:b9:d3:
7d:32:40:82:5e:9c:ae:ae:bd:2d:3a:75:c0:cb:c1:ec:8a:7b:
47:84:52:14:62:81:df:9a:74:f5:d5:47:47:12:c3:ab:3d:b1:
35:9e:53:a8:73:00:5c:2e:4c:a5:99:d0:4b:ac:55:82:5e:dd:
ba:5b:36:f0:89:7d:11:1e:81:69:c6:90:4b:b5:27:dd:d2:3f:
e8:67:fc:73:31:11:ed:48:ed:9d:63:e5:4f:57:3f:49:04:94:
cc:07:76:65:a6:a7:21:34:b5:9c:5b:6e:2b:a2:6e:3d:08:13:
26:0a:65:2c:11:22:24:d6:85:26:22:e3:9e:b4:88:76:0a:ab:
15:ff:4a:78:ad:d6:7e:96:5d:37:8f:89:bc:90:ab:10:62:4c:
e2:37:b3:fe:77:85:e1:b3:ef:69:eb:80:eb:90:57:16:b6:08:
48:08:b4:33:8f:ac:a7:46:a1:99:91:ff:e2:27:7c:33:ac:e6:
cb:5b:bd:49:54:57:01:49:19:9a:42:b3:e1:17:99:ff:a4:c5:
49:7b:c2:29:71:c4:bd:dd:44:b9:a0:88:69:24:fc:50:2f:df:
5c:76:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client