Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: fv6+kj1+zOetsq8kmKh0vV5LpswRXRnysGRFcotUek8=
Subject key identifier: B6:AF:81:B1:F0:4D:BF:0A:F9:B0:EF:E1:DE:BF:3C:AA:3D:58:F6:76
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 01984A40D5C40FB08CD4464F11E5FB2AC4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0B5B
Signing time: Sun 27 Jul 2025 05:00:19 +0000
Manifest this update: Sun 27 Jul 2025 05:00:19 +0000
Manifest next update: Mon 28 Jul 2025 05:00:19 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: FZjwhHUhvmb/Qbvrp4UtoVFEb2B9Ue0TlsrLhkv5RKA=)
2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d5:c4:0f:b0:8c:d4:46:4f:11:e5:fb:2a:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Jul 27 05:00:19 2025 GMT
Not After : Jul 28 05:00:19 2025 GMT
Subject: CN=b6af81b1f04dbf0af9b0efe1debf3caa3d58f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:43:3a:2f:da:55:a7:71:85:66:cb:65:a4:
eb:1c:20:b1:7f:a3:a7:24:fb:49:f9:2f:77:27:b4:
1c:e9:89:e4:16:dd:2e:55:12:ff:89:03:e1:71:5c:
8a:88:fa:e7:b8:be:40:e3:32:2f:8a:ad:57:39:eb:
51:2c:2a:f9:8d:9f:fe:0d:6c:65:1f:d3:d2:d0:4f:
ee:95:fa:db:10:1a:9a:c4:f8:99:dc:1a:c8:92:e6:
5b:21:13:f4:bd:a7:73:c9:ba:02:89:10:4d:66:f9:
4c:11:d0:2b:92:c8:ae:72:7f:61:c8:37:1d:88:3c:
1d:8a:a9:e7:a2:67:88:80:53:4c:b3:30:a0:28:8c:
5f:6c:5c:6b:07:78:35:ca:60:68:b6:75:c2:da:91:
ba:ba:ec:ed:68:b2:93:49:fe:4d:48:1a:87:0f:2c:
62:e1:aa:20:d7:c9:98:95:dc:e4:dd:e0:0b:a0:6c:
8c:29:c4:dd:d1:60:24:56:81:77:7e:2a:fa:e4:81:
5d:dc:fd:fa:9b:77:64:43:3c:35:b2:4e:f1:bb:e1:
0a:08:58:b6:e1:26:b5:4a:dd:ad:de:45:c6:d4:6a:
f6:8e:3f:b1:29:70:57:db:57:44:d2:5b:37:af:65:
78:66:7a:47:fc:1a:d4:b0:3c:da:fa:f9:03:54:44:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:81:B1:F0:4D:BF:0A:F9:B0:EF:E1:DE:BF:3C:AA:3D:58:F6:76
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:93:9c:1b:17:fe:a4:07:b2:80:83:bc:a4:7a:73:0c:b6:c1:
2e:84:6c:ac:a5:f1:28:7c:96:e3:60:37:30:01:6b:3a:97:0c:
ef:a0:0e:aa:b9:b5:93:e4:f4:10:b5:8a:23:ee:73:74:a6:e6:
3c:3b:4e:d5:c4:8c:36:9e:af:f1:30:5d:22:df:9d:3e:63:23:
f8:9b:d5:74:14:62:70:96:33:5e:b9:bf:1e:6a:32:6b:12:e1:
a3:db:97:79:a3:b5:38:7e:62:41:22:f2:f0:cb:d1:47:c9:27:
84:0f:23:67:d5:20:47:1d:55:c8:2e:32:2c:db:d8:e9:4e:c5:
02:b1:37:51:4c:7b:6e:65:ae:c9:91:c3:5c:16:f0:29:26:fe:
ce:e7:ca:fc:8b:d4:21:68:04:aa:3a:83:fb:2e:7a:23:d2:00:
c5:53:7f:89:57:25:b2:d6:20:e3:93:8c:b7:d1:32:c9:e3:c5:
1f:0c:37:97:74:5e:0a:34:41:0f:bd:9c:01:fe:db:68:a2:3a:
f5:53:0a:4c:49:72:b2:de:ea:4a:33:08:b3:39:7d:aa:79:80:
21:72:6e:4b:fa:99:04:43:f8:69:ad:1c:00:47:b5:35:37:d9:
82:7f:9a:ba:25:1b:97:d5:11:74:a0:f5:b8:1c:9a:33:86:4d:
19:9e:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:23 2025 by rpki-client