Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: 0Pxd98GmwWv3REJ0Q+LjkhDW9wi8Cl1i6NW/iEhzz/0=
Subject key identifier: 28:88:FC:35:35:B4:2D:7F:0E:89:81:BB:DF:69:12:B3:59:EC:3B:50
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 01975E380AC7FDC944568967E1BCA2C5EA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 09:00:20 +0000
Manifest this update: Wed 11 Jun 2025 09:00:20 +0000
Manifest next update: Thu 12 Jun 2025 09:00:20 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: HlhaCE13oqoMJG06kHsVR3TDRIDyzlI1+d39wkS2by0=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:0a:c7:fd:c9:44:56:89:67:e1:bc:a2:c5:ea:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jun 11 09:00:20 2025 GMT
Not After : Jun 12 09:00:20 2025 GMT
Subject: CN=2888fc3535b42d7f0e8981bbdf6912b359ec3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:db:bd:76:d3:b1:0f:0b:da:a4:7d:47:a7:
f7:2e:8c:cc:e0:2f:2e:d8:12:df:42:19:1f:54:ef:
7d:fc:e5:31:35:57:a6:2a:10:a3:42:e3:9d:47:e7:
e2:fa:fd:33:e5:d8:7b:59:06:76:e8:90:9d:48:91:
8e:21:0b:69:51:fb:11:35:de:74:b9:e0:1e:af:2c:
22:6c:ad:4a:29:bd:b2:ae:cc:7d:a2:c8:78:6b:0e:
d9:04:3d:03:15:a2:d7:44:ed:ab:07:54:81:56:fa:
30:4f:e7:8f:09:db:22:48:f7:4c:33:06:c3:f4:f2:
9d:fd:d0:8a:7d:cb:31:8a:59:8e:10:4a:63:9c:30:
d9:c4:ef:5e:49:dc:f9:c4:2b:d7:4b:dc:60:3e:da:
6c:b4:d6:2c:d3:a3:bc:5f:08:8c:72:95:98:78:83:
6b:8a:59:a2:10:6c:bc:4d:92:48:34:18:68:46:ae:
10:73:2e:11:e2:4a:59:20:8a:5f:ea:a8:c7:f7:4f:
ea:49:7e:46:93:48:c4:8b:66:2b:36:8d:e2:dd:68:
fc:06:82:c3:e0:f6:df:7c:b9:c6:2d:f5:4c:f8:c5:
5c:c8:e2:75:81:61:99:c4:45:67:4e:01:5a:ba:56:
21:a0:12:bd:f2:0f:cc:93:dd:bd:dc:84:57:bb:bb:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:FC:35:35:B4:2D:7F:0E:89:81:BB:DF:69:12:B3:59:EC:3B:50
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a6:0a:8c:ec:65:22:7b:f2:cf:87:fe:46:2b:e0:af:b7:89:
63:83:37:b6:d5:4c:f8:0c:a2:c6:36:57:0f:d1:95:05:d8:8e:
6b:98:2c:79:d5:4b:c1:b9:0e:ed:e9:d3:fd:05:55:c3:9a:ac:
d8:57:66:b1:5f:51:e6:fe:2f:ae:07:96:b4:6a:91:1c:db:a6:
41:94:2a:b7:00:48:50:2d:0b:a8:fc:31:e3:3a:d7:37:dc:78:
74:e9:c2:32:58:97:b9:45:3d:12:4a:13:0f:16:d2:2b:44:da:
63:45:0f:9c:99:e9:41:0d:f1:0e:1b:71:65:5e:76:fd:a4:83:
11:d5:e7:6c:5e:04:5a:8b:b7:63:38:9b:27:34:49:b3:76:bc:
bc:9f:69:d8:e8:21:f0:c7:d7:fd:20:c1:2f:ef:2d:74:7b:bb:
16:41:3a:c7:18:4f:b2:ab:e8:a9:f1:56:64:ff:ca:e6:e9:42:
2f:de:3d:f7:f6:29:2c:b3:1c:50:df:d2:13:d6:ba:44:3d:ea:
7c:03:f9:54:08:70:a8:08:cd:70:6d:5f:c9:f9:bc:2a:a7:d3:
0a:b9:36:ad:e5:10:07:21:7e:f5:31:0b:f3:d4:33:62:fa:49:
12:71:c2:17:49:16:9b:03:d6:fc:7f:ba:94:a0:69:7b:ca:e8:
1f:ac:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:09:33 2025 by rpki-client