Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: P94CFuLAaMPKGKWS4pk7RDWvvUHJi6PxbKM27Y2LPFM=
Subject key identifier: 8B:8D:AE:5C:81:D5:42:12:84:88:CC:A4:3A:A4:21:BE:1B:87:30:1D
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 01984589F70CC73672BA2D296D2AEF47C98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 1375
Signing time: Sat 26 Jul 2025 07:02:06 +0000
Manifest this update: Sat 26 Jul 2025 07:02:06 +0000
Manifest next update: Sun 27 Jul 2025 07:02:06 +0000
Files and hashes: 1: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (hash: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: VMKM/udZjXlPhXw6Wkzbi82P6jMGEVJb+HVxyq7gCnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:f7:0c:c7:36:72:ba:2d:29:6d:2a:ef:47:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jul 26 07:02:06 2025 GMT
Not After : Jul 27 07:02:06 2025 GMT
Subject: CN=8b8dae5c81d542128488cca43aa421be1b87301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:fd:8c:ae:a3:cb:b3:59:a7:93:12:6f:bd:
c9:f0:26:b3:6d:bd:08:72:de:72:a7:ab:be:80:4a:
ed:ab:3b:3d:60:9a:4a:01:a9:2d:af:eb:8e:82:ef:
2c:14:35:56:41:67:e3:11:20:8f:0a:de:56:b9:5d:
90:7e:0d:05:56:87:77:60:a6:f9:a6:50:9f:42:47:
d5:e1:d4:8e:e3:be:8a:60:0f:ad:3a:30:e2:1a:24:
7d:a4:8e:6e:d3:ef:24:b0:48:ea:36:bc:3f:a0:a5:
52:b8:10:9a:71:24:9d:73:f5:f1:9b:73:58:98:ce:
ba:9f:12:7a:1d:0c:95:a0:9b:34:d8:bf:69:c3:df:
77:c5:c6:2a:3d:0d:b9:c8:33:40:59:97:1e:20:57:
f0:3c:09:70:c0:8a:04:bd:4f:05:91:f9:82:db:6e:
3c:f2:b8:a2:68:a4:58:b9:c4:cf:fc:eb:71:ad:ee:
e8:6d:8e:1f:9e:ab:4c:3a:5d:13:29:67:b1:13:c6:
cb:bb:cb:3e:73:a2:8a:ac:44:bb:ea:da:30:cf:33:
16:bf:e2:d6:a9:17:6c:ee:6e:ce:c8:4c:a7:9e:96:
14:7a:09:a2:26:98:56:30:52:43:cc:3d:d3:ed:80:
97:ad:2b:38:33:10:24:a7:d2:21:d1:ab:76:b8:97:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:AE:5C:81:D5:42:12:84:88:CC:A4:3A:A4:21:BE:1B:87:30:1D
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:35:a6:b6:af:54:db:c2:10:37:a0:c9:bd:4d:cf:d7:fd:47:
90:90:93:4e:83:27:2d:5d:f1:14:bb:49:a5:93:9d:ac:a5:ee:
45:78:58:a9:52:14:8f:37:52:14:79:e2:62:af:fb:ba:cd:da:
4a:2f:99:94:18:13:47:51:09:54:b1:fd:3b:f2:3a:83:11:29:
65:80:92:e9:24:6b:3d:a0:77:67:db:da:b2:4d:b3:5e:01:e6:
49:8e:ed:2c:c2:fe:cd:f7:4f:91:fd:3e:78:07:9f:13:a8:c9:
8c:c3:f4:61:0a:84:bf:d5:90:a5:0b:27:25:ab:2f:35:ea:01:
0e:db:e8:5c:fb:bc:ee:08:41:93:33:d0:3f:42:3a:07:d7:b7:
8b:cf:04:5f:0a:ca:59:9a:1c:6f:c2:df:da:83:61:5d:fd:e7:
a5:cf:d7:8c:5b:59:ae:0b:89:b2:e2:0c:12:dd:93:6d:56:84:
de:49:17:e2:e8:d3:3a:30:7f:d7:4c:7a:92:14:68:93:ae:a5:
0a:61:92:7a:65:22:4a:9a:67:12:0e:49:03:e5:ed:3d:1f:04:
11:90:f8:c7:ac:56:85:82:0d:5a:08:4a:00:71:6e:b3:be:15:
4a:79:d1:2e:cb:9e:ab:3a:cb:ca:e5:4a:d7:07:0e:a7:69:44:
f9:ae:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:00:20 2025 by rpki-client