Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: YmHDHQ6zYreUeVjNuHmddevTyk3Qh+tqajLQjm8t5HQ=
Subject key identifier: BB:79:88:27:C2:18:D8:5C:D3:68:14:C0:1C:02:26:3A:FC:AD:8C:76
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 01985569C089CF1061465FCC6FCAE5561ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 09:00:50 +0000
Manifest this update: Tue 29 Jul 2025 09:00:50 +0000
Manifest next update: Wed 30 Jul 2025 09:00:50 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: OdJ4iiiZ5Dwc0lMaABJ/zuqmbFf1rh2GJyExhBxy1nQ=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:c0:89:cf:10:61:46:5f:cc:6f:ca:e5:56:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jul 29 09:00:50 2025 GMT
Not After : Jul 30 09:00:50 2025 GMT
Subject: CN=bb798827c218d85cd36814c01c02263afcad8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:d9:f9:7a:2c:07:68:21:e0:f7:44:9d:66:
b7:8b:3c:e1:c8:00:ed:53:40:44:6d:96:f2:90:90:
a8:4f:23:a1:26:6f:03:d3:be:1a:3e:43:d4:76:53:
f3:2f:99:d2:5f:9d:46:83:d3:2b:ad:1a:06:e0:7a:
e5:69:96:bf:6c:4f:99:57:ae:3a:4f:bf:90:1c:35:
dc:fc:ae:80:76:1f:e7:63:32:f1:af:02:a4:88:34:
df:33:84:80:bd:8f:52:21:3c:52:a0:0f:6e:d1:37:
75:0a:8e:ea:b5:6f:40:b7:9b:8e:fb:d7:90:f0:35:
62:7d:dd:be:c5:49:d5:92:fe:94:69:7e:b2:02:ae:
2d:c1:e0:7b:15:75:a8:ed:53:c2:bc:34:d2:9d:6a:
f1:99:f1:1b:4f:6f:22:29:8f:25:92:4b:85:65:5e:
67:54:5e:c0:0f:67:2f:a2:79:a2:23:dc:0b:46:85:
b0:6b:85:ad:bb:5c:a8:ad:fe:a9:dc:4b:15:fb:36:
fa:31:ec:7b:a2:8f:ab:34:ce:aa:28:21:58:0b:0c:
b9:1e:46:99:c9:d2:21:88:b9:6b:4f:2f:c8:9d:32:
49:58:0d:b4:d3:81:f3:57:71:7e:4c:f2:9e:92:d5:
ef:5a:03:72:84:bb:5c:23:af:fa:4f:7e:74:5d:1b:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:88:27:C2:18:D8:5C:D3:68:14:C0:1C:02:26:3A:FC:AD:8C:76
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:12:93:07:92:02:c9:18:ec:4d:d7:94:65:e1:40:5b:7b:0c:
a7:3d:4a:0f:62:14:82:1e:e4:a8:3d:34:e2:d8:3e:c1:75:3d:
29:7c:9f:be:29:cb:7c:e0:20:20:50:26:ae:a1:d0:64:94:1e:
30:44:5d:f2:9a:9c:77:34:66:8d:ac:c5:9e:60:b2:c2:f0:f2:
23:6c:87:81:3b:66:5f:6c:83:e7:8a:60:91:92:98:17:13:73:
05:2b:0a:52:c3:cb:c3:65:01:6c:c4:9b:b9:67:66:7f:32:23:
c9:26:2a:1a:1a:53:aa:b7:a9:91:aa:b0:80:8f:8a:17:89:a3:
fd:d5:f3:7e:eb:91:98:53:e0:8f:18:c0:cc:60:d5:90:75:df:
de:55:72:96:45:e6:97:5b:90:ca:ce:55:ca:f0:b3:cc:98:bd:
25:64:8b:92:c6:36:17:4e:da:d0:db:6b:95:b0:30:a8:15:2b:
37:71:2b:98:86:8a:ad:5b:6d:92:e9:2d:d3:05:cf:cd:66:54:
12:24:9a:f4:05:b3:e7:92:16:5f:88:cc:12:f4:17:4a:ef:32:
f9:e7:92:0d:69:fb:5f:84:7b:f9:42:dc:20:a1:ba:47:d6:1f:
41:19:0e:7f:a0:3f:ee:93:e0:48:47:6c:f2:2d:c2:24:65:b9:
07:c9:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:14:51 2025 by rpki-client