Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: 2WZpW3Z/vu+iCaVN8EyGD8y9Aoy9Kcw3Z6BvyJLOx/c=
Subject key identifier: D6:B7:AB:AF:28:D8:75:3B:1B:C1:9E:F7:AC:05:70:7B:1E:F2:0A:0A
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019922FA1F30B627830256A79B2A96F44EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 154A
Signing time: Sun 07 Sep 2025 07:00:41 +0000
Manifest this update: Sun 07 Sep 2025 07:00:41 +0000
Manifest next update: Mon 08 Sep 2025 07:00:41 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: ZeU2R531f/CCj+lvJCcuIEav6MxGgXdwHreGTk0z4ak=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1f:30:b6:27:83:02:56:a7:9b:2a:96:f4:4e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Sep 7 07:00:41 2025 GMT
Not After : Sep 8 07:00:41 2025 GMT
Subject: CN=d6b7abaf28d8753b1bc19ef7ac05707b1ef20a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:31:f8:eb:fc:ef:01:2d:8d:0f:b1:be:1f:
31:a3:23:a0:c8:b6:ef:0b:b6:52:d8:85:0c:d4:02:
04:c1:1b:e8:4b:d1:dd:ab:47:5a:ef:4f:01:e6:10:
d8:3b:80:85:f9:51:fe:57:ea:f6:ac:84:d1:15:15:
d9:85:31:25:df:5a:57:d6:8c:57:73:82:d2:d1:dd:
48:70:3e:57:03:dc:2e:0b:3d:2c:a4:29:7f:b2:ae:
26:31:d1:73:66:d3:e0:f8:32:41:13:ad:9a:b2:18:
60:7f:68:4c:3d:ae:4c:48:54:eb:4d:51:4d:d6:ac:
a6:cb:82:71:15:59:4e:83:64:2d:32:13:99:5f:28:
9e:31:4b:7e:fc:fe:b7:5d:bb:63:13:2a:db:14:9e:
e1:a1:7e:88:1b:94:bf:bd:79:ed:d6:dd:5d:13:2a:
ca:08:9f:e6:3d:17:5b:a4:58:29:4d:ca:65:4e:63:
49:c2:0b:03:45:9e:bc:40:de:0e:0b:49:c3:77:af:
84:fd:60:df:76:48:91:b0:46:e6:66:19:82:95:20:
99:1f:2d:ed:49:b0:5b:d3:f9:1a:d4:e7:a0:8b:cc:
f8:a1:e6:de:cc:f4:ce:4b:dd:e7:3a:82:15:9a:57:
ec:af:d6:9e:b6:f2:c2:c2:da:d7:3f:70:3c:b9:3d:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:AB:AF:28:D8:75:3B:1B:C1:9E:F7:AC:05:70:7B:1E:F2:0A:0A
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5f:1a:b2:ea:66:6e:11:f6:f5:ee:1a:b1:0d:d0:2c:14:4b:
73:0a:b9:ea:cb:81:1c:d0:ea:dc:4f:cf:57:ba:db:86:9e:c0:
58:46:77:27:e1:48:9d:99:22:e5:7a:b1:ab:bd:cb:99:44:3d:
43:f2:f1:57:80:4a:57:77:a8:65:be:db:7d:76:bf:b0:cf:e2:
af:63:35:8f:ec:2d:d2:8d:d9:5d:33:2a:53:7a:1e:18:99:88:
2a:b4:bc:79:6d:36:d6:cd:1e:84:fb:18:f5:d2:51:38:ef:25:
e1:b0:a1:01:f2:04:d4:49:46:04:3f:49:b4:fa:05:26:68:2e:
88:a2:36:dc:9c:a4:7f:ce:6b:47:52:f0:b3:60:b6:ac:6c:bd:
87:5c:1d:31:c5:bb:78:fd:7b:fc:18:1c:49:49:78:90:96:d1:
35:4c:1d:c9:e7:25:09:b7:a4:fc:a3:cd:95:ac:bf:93:fc:f2:
8d:75:3f:90:89:98:04:70:05:f6:20:59:58:ac:1f:79:b6:23:
b8:28:df:dc:f8:31:a9:42:18:e4:14:59:d3:b9:fb:30:ba:44:
23:5f:fe:00:f2:f4:59:d3:6c:07:6f:ff:b0:ea:09:2d:5e:60:
11:3f:34:aa:78:f4:81:4d:48:05:93:40:ea:41:e0:25:d5:3b:
d1:53:7b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+h8wtieDAlanmyqW9E6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTNiNTAyOGNlMzY0ZjUxMDJjMWFlYzI3NzM2YjdjMzNi
YzA0OTMwHhcNMjUwOTA3MDcwMDQxWhcNMjUwOTA4MDcwMDQxWjAzMTEwLwYDVQQD
EyhkNmI3YWJhZjI4ZDg3NTNiMWJjMTllZjdhYzA1NzA3YjFlZjIwYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1sx+Ov87wEtjQ+xvh8xoyOgyLbv
C7ZS2IUM1AIEwRvoS9Hdq0da708B5hDYO4CF+VH+V+r2rITRFRXZhTEl31pX1oxX
c4LS0d1IcD5XA9wuCz0spCl/sq4mMdFzZtPg+DJBE62ashhgf2hMPa5MSFTrTVFN
1qymy4JxFVlOg2QtMhOZXyieMUt+/P63XbtjEyrbFJ7hoX6IG5S/vXnt1t1dEyrK
CJ/mPRdbpFgpTcplTmNJwgsDRZ68QN4OC0nDd6+E/WDfdkiRsEbmZhmClSCZHy3t
SbBb0/ka1Oegi8z4oebezPTOS93nOoIVmlfsr9aetvLCwtrXP3A8uT2MeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa3q68o2HU7G8Ge96wFcHse8goKMB8GA1UdIwQY
MBaAFG6jtQKM42T1ECwa7Cdza3wzvASTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAt
NjEyYTc2MjAwN2VjLzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAtNjEyYTc2MjAwN2Vj
LzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjF8asupm
bhH29e4asQ3QLBRLcwq56suBHNDq3E/PV7rbhp7AWEZ3J+FInZki5Xqxq73LmUQ9
Q/LxV4BKV3eoZb7bfXa/sM/ir2M1j+wt0o3ZXTMqU3oeGJmIKrS8eW021s0ehPsY
9dJROO8l4bChAfIE1ElGBD9JtPoFJmguiKI23Jykf85rR1Lws2C2rGy9h1wdMcW7
eP17/BgcSUl4kJbRNUwdyeclCbek/KPNlay/k/zyjXU/kImYBHAF9iBZWKwfebYj
uCjf3PgxqUIY5BRZ07n7MLpEI1/+APL0WdNsB2//sOoJLV5gET80qnj0gU1IBZNA
6kHgJdU70VN7KA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:14 2025 by rpki-client