Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: oLZjFMauoIkGczpv6JN3epBoY/IurOL0JWlmOx0fPsY=
Subject key identifier: 28:6A:98:74:03:2A:1B:3E:7D:7A:3E:99:E5:83:E0:7D:D7:26:14:CD
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 0199258E474683CFD2ED5B525F59D58A35DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 12AB
Signing time: Sun 07 Sep 2025 19:01:45 +0000
Manifest this update: Sun 07 Sep 2025 19:01:45 +0000
Manifest next update: Mon 08 Sep 2025 19:01:45 +0000
Files and hashes: 1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: cBLclMxgm0mikJrVbmqLClJBEbAHWE1/157WBUmo194=)
3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8e:47:46:83:cf:d2:ed:5b:52:5f:59:d5:8a:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Sep 7 19:01:45 2025 GMT
Not After : Sep 8 19:01:45 2025 GMT
Subject: CN=286a9874032a1b3e7d7a3e99e583e07dd72614cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:12:85:fb:16:74:4c:89:82:bf:d1:17:a1:
12:68:ee:52:d9:7b:15:f7:82:d8:fe:f4:a7:06:30:
8e:39:f7:9b:ce:22:ab:55:ae:18:79:94:e6:25:5c:
54:0f:56:46:57:c3:9c:aa:d9:69:85:53:f9:45:2b:
0e:91:50:8e:a7:7a:e2:93:64:2b:9a:ff:d4:21:3d:
ba:97:75:89:30:ad:2d:05:82:aa:59:9b:bb:d2:de:
37:11:c7:a3:8d:56:c9:08:19:5c:95:b1:e7:80:24:
7a:fe:d9:d8:97:d3:45:03:54:60:c3:47:ee:a8:3b:
3a:3b:f5:bc:52:c7:04:7e:df:62:ca:75:30:83:95:
27:d6:f2:bb:83:e1:89:76:7a:dd:6b:ff:d6:dc:bf:
9c:83:1a:28:32:a7:0c:25:a4:93:e5:50:f8:c0:ae:
d6:fc:73:b6:a8:ec:99:06:fe:67:43:d3:61:32:52:
5e:e5:dc:af:04:c4:2d:1f:ca:4c:ac:1f:8c:61:c1:
c3:89:01:7f:a7:c7:2a:35:ab:ab:fe:e6:d6:f2:ff:
57:3e:10:f5:91:ec:1a:3d:7b:86:5e:df:c6:1f:b1:
38:1b:3c:89:7b:87:dc:ea:6e:71:6c:4b:5f:50:1b:
c8:46:e3:5a:63:86:08:58:b9:84:4b:78:c4:a4:b7:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:98:74:03:2A:1B:3E:7D:7A:3E:99:E5:83:E0:7D:D7:26:14:CD
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:f9:90:12:a3:58:dc:41:9c:8d:e9:dc:e1:9e:11:a9:2b:
22:51:da:5d:8e:f2:3b:bc:62:e3:b3:57:4f:b4:1f:2f:a1:4b:
b0:ae:a4:ea:84:99:75:71:72:a7:f7:f6:2f:10:f6:0a:55:b7:
87:ee:27:8c:c6:14:9f:5a:2e:92:00:b3:b3:bd:d8:f3:f2:b5:
dd:c4:ab:54:77:fb:e4:13:64:85:11:22:9f:27:a9:45:00:da:
74:51:c3:ff:78:e9:2a:50:26:fd:4a:8e:78:86:04:e1:bb:da:
5b:62:96:4a:14:27:a1:f6:b3:ed:24:a6:91:b8:a2:49:ea:21:
2f:7b:45:09:98:4c:6b:b2:06:b0:ad:65:bd:cd:63:98:e6:7d:
61:b7:63:73:1f:6d:d2:3f:34:1f:70:86:c0:34:5c:93:48:1e:
18:f1:50:19:40:77:63:a9:48:f5:d3:58:ce:0b:b5:ab:d9:60:
aa:d0:83:8d:d2:40:69:64:bd:32:5e:86:5e:1a:2a:8a:61:bc:
f0:de:08:9e:4d:42:57:92:b8:ff:66:0e:83:f4:3d:5f:37:07:
4b:72:61:7d:e5:cc:ae:5e:95:3b:6c:c8:3b:30:d5:d6:61:c7:
45:40:ee:5c:90:b8:2d:f0:5e:5a:67:dd:a5:e9:ad:03:1e:3d:
1d:d9:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:29:19 2025 by rpki-client