Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: Nqw6COOR/i36lpkQBK1/9U+3Af7GWc128EHqwMiSJIc=
Subject key identifier: 34:CD:83:28:FB:80:5C:EB:29:53:EB:0F:35:A0:55:D1:D5:FD:7D:1F
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 01976403E82B6A9F1EB952626A059D64CB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 12:01:06 +0000
Manifest this update: Thu 12 Jun 2025 12:01:06 +0000
Manifest next update: Fri 13 Jun 2025 12:01:06 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: i0VTVzwG4utk1HUYpe/zIbJHpUDswkcWcQv8mgyGrMM=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:e8:2b:6a:9f:1e:b9:52:62:6a:05:9d:64:cb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jun 12 12:01:06 2025 GMT
Not After : Jun 13 12:01:06 2025 GMT
Subject: CN=34cd8328fb805ceb2953eb0f35a055d1d5fd7d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:61:5f:c1:71:21:a8:22:fd:21:9f:cc:4e:
79:bf:42:b1:50:c5:ac:1b:44:11:43:02:b7:ac:2f:
dc:12:cc:f5:61:12:05:c7:5a:6f:56:04:a9:95:5f:
c5:32:f9:3a:25:27:14:50:ad:6f:53:f0:9f:42:92:
06:96:7f:4c:64:7b:f5:c5:4c:39:82:6f:60:60:81:
37:7a:d8:b6:3e:35:ea:29:ab:01:9e:10:54:03:55:
0f:b6:60:26:d8:d6:4f:4a:c5:58:48:0a:d0:a4:83:
cc:02:fa:34:9c:88:38:b0:09:59:35:68:90:fb:13:
6f:fc:0f:d7:0e:aa:e5:3a:09:4b:65:d3:8a:ec:40:
18:67:5a:99:a5:0b:83:3f:32:6a:c8:e8:6c:b6:09:
2e:5b:38:76:48:d4:ae:36:6e:a1:4a:f1:15:fa:6f:
33:de:bb:74:0c:23:53:a9:c8:68:39:c4:bf:6f:df:
5b:9e:f4:2c:47:d6:32:ab:bc:c8:d0:00:0e:c1:51:
27:04:be:a8:05:eb:29:a6:f9:7b:50:7f:d4:d1:53:
29:29:20:68:5c:17:a9:0c:df:a5:cb:24:6d:d4:27:
81:63:15:f9:a8:a0:3d:cf:a6:51:a9:b6:df:b9:a8:
58:3e:c6:bc:5b:f2:6f:9f:67:bc:eb:21:67:2e:cf:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:83:28:FB:80:5C:EB:29:53:EB:0F:35:A0:55:D1:D5:FD:7D:1F
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:9d:7f:a6:4f:2c:07:3b:28:78:be:8b:7d:76:08:8b:e4:
de:68:1b:26:5a:08:be:1e:be:1b:43:86:f6:ae:37:3d:14:27:
36:2a:46:90:11:d8:10:ba:25:f5:f4:50:d6:f8:17:c8:39:ec:
95:e2:9a:61:1d:0d:d9:41:39:89:a1:66:4a:11:67:4a:5e:65:
c7:52:45:ee:e0:47:78:67:b4:cf:85:c4:51:50:b6:e1:a9:b4:
5c:3d:12:95:2a:dc:f8:e7:d7:52:22:12:4c:84:b3:bd:ca:d8:
42:43:13:f1:dc:34:f7:a5:b3:36:f4:03:bb:f9:3f:70:7f:9c:
a7:e4:44:41:e8:be:bc:5b:d7:64:76:09:49:79:d9:d8:8f:f7:
52:ea:09:fb:9c:07:ab:96:e5:16:4e:74:c4:a2:e9:d6:b0:d1:
2e:8d:39:dc:f7:d6:e7:50:47:b6:a1:4f:18:1b:18:b5:26:9d:
0a:3e:45:fa:ad:e2:11:23:b0:a3:19:b3:f1:64:07:99:01:66:
4b:5c:45:2d:90:b9:6f:e9:de:b8:51:6c:77:b7:3e:cf:2a:37:
0d:b7:4e:45:15:8c:a1:fa:2f:eb:e6:0a:70:2b:02:45:a0:71:
9d:ec:f8:4d:ad:2e:43:18:00:3f:d4:ed:a0:98:1e:6d:eb:c6:
07:e4:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:03:32 2025 by rpki-client