Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: P1P/+OL+TtGk/9jxuwP+wf2lN43ZxD+owRVqrZkSc5s=
Subject key identifier: B8:E5:E5:E1:9C:1E:69:01:86:59:31:6E:3A:6F:28:D3:90:86:49:AA
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 019854568BC790B640581E8483B728F41A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 132F
Signing time: Tue 29 Jul 2025 04:00:14 +0000
Manifest this update: Tue 29 Jul 2025 04:00:14 +0000
Manifest next update: Wed 30 Jul 2025 04:00:14 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: sJuPsFEJpCxHiCIlKIpfBt57zc1M4/uHvi3RQdbws3Y=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:8b:c7:90:b6:40:58:1e:84:83:b7:28:f4:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jul 29 04:00:14 2025 GMT
Not After : Jul 30 04:00:14 2025 GMT
Subject: CN=b8e5e5e19c1e69018659316e3a6f28d3908649aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:a5:b6:c5:e5:81:ce:74:1e:53:18:c6:53:
14:cf:27:2b:a9:0c:16:03:f0:e7:21:0c:97:a1:bd:
df:89:cb:f9:50:e5:ba:d0:ba:34:b5:38:17:8b:2a:
69:e7:df:eb:ac:37:4c:ff:d0:27:85:9a:a1:38:e8:
8a:4a:c5:94:ec:c9:a9:13:56:7c:56:3b:29:28:0f:
a0:7f:7d:3e:32:ef:da:ab:65:05:b5:b1:bf:66:3e:
32:5f:12:71:ad:3c:49:fc:fc:4f:b9:7a:3c:8d:4e:
7d:7a:dd:25:a7:0f:4a:1e:4a:3c:6b:50:e1:94:d3:
de:e4:99:61:fb:04:69:18:6a:b1:54:76:9f:55:8d:
fc:0b:9c:00:fd:ef:f5:e5:c3:83:4d:73:87:db:3d:
d9:32:52:d7:94:e7:11:ab:43:4b:39:28:3b:4f:75:
b8:15:5e:46:89:f8:1b:cc:81:07:eb:8d:fd:02:dd:
df:8e:04:69:be:3b:bc:31:9e:3d:93:80:af:7c:e5:
98:9f:05:6e:4b:ed:7a:e3:9b:3a:f0:61:83:94:f6:
f2:f3:f6:2b:1d:9b:49:de:6f:3a:6c:c2:cc:4d:ac:
93:4e:03:e0:85:48:35:01:22:2c:4b:11:7a:a6:c4:
6d:fc:9f:59:54:75:ff:17:2b:e2:c8:fe:e5:20:49:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:E5:E1:9C:1E:69:01:86:59:31:6E:3A:6F:28:D3:90:86:49:AA
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:34:30:9a:52:cd:ba:2f:53:14:a3:95:90:e4:48:94:35:
7a:f0:47:2b:9d:9c:a5:6b:43:5a:cc:d5:c1:a1:eb:48:8d:a9:
e2:74:25:9e:33:df:16:ac:bb:25:31:9c:6d:42:63:4e:71:eb:
6a:62:96:26:94:36:96:cd:e0:7b:95:b8:53:7d:19:b7:58:27:
d0:96:a2:36:2c:4e:3c:f9:e0:55:33:6b:6d:67:aa:4d:cc:70:
20:61:92:aa:4e:7b:6e:2d:3f:98:0f:74:5c:3c:94:4d:0e:bc:
de:5d:35:3c:57:ac:8e:02:6a:31:02:16:fc:e0:5b:ae:b5:c7:
d8:bb:9c:52:98:f8:31:6c:6f:14:ee:7b:39:20:2d:9f:bb:3b:
7b:39:a2:bc:b2:81:46:d5:46:28:c3:8f:fe:9e:57:22:66:6d:
97:f8:7b:46:d7:fd:be:aa:17:b3:4e:46:b9:ec:e5:31:9a:08:
f4:7b:c8:96:33:5b:e9:bf:98:86:6a:89:a7:9b:71:a6:b4:6f:
34:b9:82:7f:7d:be:65:77:5e:9c:c9:4c:06:89:0b:b1:f3:56:
5f:56:82:60:c3:70:7f:06:09:c5:17:82:65:0e:ae:4f:d4:b9:
91:82:2a:a5:e6:72:01:47:e9:99:a0:3a:db:a3:69:67:a0:8e:
b6:5b:51:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVovHkLZAWB6Eg7co9Bo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTJiZTM3MzJmNmVmZDU5YzdkZTVhYjAzMDcyYTAxMmM3
MWI1ZWQwHhcNMjUwNzI5MDQwMDE0WhcNMjUwNzMwMDQwMDE0WjAzMTEwLwYDVQQD
EyhiOGU1ZTVlMTljMWU2OTAxODY1OTMxNmUzYTZmMjhkMzkwODY0OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTWltsXlgc50HlMYxlMUzycrqQwW
A/DnIQyXob3ficv5UOW60Lo0tTgXiypp59/rrDdM/9AnhZqhOOiKSsWU7MmpE1Z8
VjspKA+gf30+Mu/aq2UFtbG/Zj4yXxJxrTxJ/PxPuXo8jU59et0lpw9KHko8a1Dh
lNPe5Jlh+wRpGGqxVHafVY38C5wA/e/15cODTXOH2z3ZMlLXlOcRq0NLOSg7T3W4
FV5GifgbzIEH6439At3fjgRpvju8MZ49k4CvfOWYnwVuS+1645s68GGDlPby8/Yr
HZtJ3m86bMLMTayTTgPghUg1ASIsSxF6psRt/J9ZVHX/FyviyP7lIEnmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjl5eGcHmkBhlkxbjpvKNOQhkmqMB8GA1UdIwQY
MBaAFG6ivjcy9u/VnH3lqwMHKgEscbXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQt
MTMwODZlY2ZmOWQ1LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQtMTMwODZlY2ZmOWQ1
LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa940MJpS
zbovUxSjlZDkSJQ1evBHK52cpWtDWszVwaHrSI2p4nQlnjPfFqy7JTGcbUJjTnHr
amKWJpQ2ls3ge5W4U30Zt1gn0JaiNixOPPngVTNrbWeqTcxwIGGSqk57bi0/mA90
XDyUTQ683l01PFesjgJqMQIW/OBbrrXH2LucUpj4MWxvFO57OSAtn7s7ezmivLKB
RtVGKMOP/p5XImZtl/h7Rtf9vqoXs05GuezlMZoI9HvIljNb6b+YhmqJp5txprRv
NLmCf32+ZXdenMlMBokLsfNWX1aCYMNwfwYJxReCZQ6uT9S5kYIqpeZyAUfpmaA6
26NpZ6COtltR/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:56 2025 by rpki-client