Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: tudHhmyQ4oOSg94tkN3xniEpwMIYaUgDRbSZrTiyHBw=
Subject key identifier: E2:7D:BB:42:15:8F:F7:16:3C:92:99:BF:56:8D:CC:1B:87:5C:26:D5
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0199228D0EF539069129890414C7D8ADD74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 06E8
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: ssuQKKnnsXdthpVzumNb0pEXbBliea+5pUYAjJALyCY=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0e:f5:39:06:91:29:89:04:14:c7:d8:ad:d7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=e27dbb42158ff7163c9299bf568dcc1b875c26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:14:37:94:2d:f5:1c:5e:6d:9c:0c:23:19:
60:38:39:84:d3:03:32:7c:8b:02:36:e6:be:62:9c:
97:6d:08:66:e4:b6:57:a1:fa:99:96:b7:38:a0:89:
0b:05:a8:88:64:f0:70:fc:29:5e:cd:b8:45:d3:22:
94:7a:d0:94:9d:a0:6f:f5:bf:f8:47:09:ab:20:e0:
b8:5f:ab:ba:fb:eb:fb:1f:b3:24:32:45:80:8b:ff:
75:d3:ff:8c:05:59:6b:ca:8f:ed:7b:7e:f9:ad:9b:
c8:22:a6:02:4b:65:a1:d7:d0:b3:7e:df:93:58:c1:
c1:24:d8:d2:7f:c0:3e:4c:a9:cf:64:76:b4:aa:d5:
58:54:bb:1c:dd:3d:4c:0e:47:8e:1a:81:e3:2d:b5:
80:50:8d:86:6a:17:dc:be:57:ec:b3:92:94:60:a5:
67:aa:37:e1:c3:d3:9f:9f:5d:49:43:4b:4f:85:18:
35:a9:2c:c2:5a:9b:6b:68:55:ab:9d:95:ee:a5:7f:
e8:73:c4:e8:44:d6:08:93:fe:61:ff:8a:04:8b:70:
75:88:69:af:7c:bb:39:6a:97:46:62:4c:aa:11:72:
92:e7:2d:69:bd:bb:d3:8c:e3:50:c1:d3:03:f5:d8:
27:db:7d:af:36:e4:48:12:16:cb:e6:a5:72:3f:30:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:BB:42:15:8F:F7:16:3C:92:99:BF:56:8D:CC:1B:87:5C:26:D5
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:23:66:7a:c9:08:ba:e1:67:62:e3:82:84:3e:dd:5f:96:83:
27:76:b7:94:2e:c0:f6:10:03:d8:f2:72:cc:e0:34:21:48:1b:
b9:3a:9a:eb:a9:1f:e6:a8:ed:e2:5c:58:45:59:4c:72:8b:80:
70:6c:48:91:83:0d:60:96:31:0e:c4:28:33:e9:47:e3:25:f9:
a7:c3:68:de:5d:24:42:ac:c5:a5:bb:ef:64:d6:64:78:ae:2d:
76:e0:e6:91:35:34:94:ad:68:28:56:71:b9:38:95:ca:2d:4f:
4a:6b:ac:75:7a:e2:6e:6a:a9:29:2c:02:0a:02:fd:b8:2f:ad:
a8:70:92:03:a2:5d:66:f1:42:88:d1:16:1a:3f:d6:12:6d:4e:
89:75:97:24:c4:cc:d9:76:cb:19:43:0d:6c:c4:e9:9e:cb:e4:
2e:55:8b:0e:af:ae:ef:26:aa:f9:dd:21:41:90:a4:1e:27:6e:
5e:6e:4a:3d:e1:49:28:e3:d0:4e:65:e9:e0:80:38:db:09:a9:
9d:30:47:c9:8b:c7:b7:9b:47:98:ab:e5:4a:ed:42:b3:3c:9e:
86:af:21:e0:32:c6:d8:78:2a:79:8e:3e:d6:a5:f9:25:41:3d:
9d:88:70:a1:4a:b8:48:c1:5d:17:92:df:48:ee:53:db:fb:33:
e6:6f:0d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:05 2025 by rpki-client