Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: zPEOTdFGxBeTxeD/CcLm7z0If7eIrL1dEMiw4+fiw2Y=
Subject key identifier: 71:8B:8F:68:7A:B0:B2:DB:93:93:B9:99:B5:1C:FF:EC:01:EF:E2:C4
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019A533F802CC4ADA5EF417CEAD095883B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:01:01 +0000
Manifest this update: Wed 05 Nov 2025 09:01:01 +0000
Manifest next update: Thu 06 Nov 2025 09:01:01 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: 5eNGBc+MIzus6uosv35gQ8jrvhuLjRABy9xSPKeou/w=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:80:2c:c4:ad:a5:ef:41:7c:ea:d0:95:88:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Nov 5 09:01:01 2025 GMT
Not After : Nov 6 09:01:01 2025 GMT
Subject: CN=718b8f687ab0b2db9393b999b51cffec01efe2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:66:ad:92:ea:8e:54:bc:fd:0e:8e:f6:4b:
43:69:bd:35:fe:4d:23:7e:57:ab:ef:46:67:04:26:
57:4d:db:09:3f:25:c7:dc:7e:03:8d:96:6b:03:79:
a8:b1:66:ca:26:4c:67:72:0c:2a:98:4f:3b:fc:73:
29:53:7b:85:b4:2a:48:b7:c3:4b:7e:8a:04:61:33:
09:13:d2:80:b1:7d:ac:65:78:3d:ff:02:a3:f2:33:
81:f5:c7:eb:3b:16:a6:e2:b5:79:5a:41:61:0e:6e:
cb:f4:1d:00:68:4e:3d:92:61:54:d0:3f:8b:e2:ba:
ab:d0:57:fb:e6:72:4f:1f:cc:32:f4:19:ef:d2:6a:
9d:60:bb:7e:06:fb:3c:11:30:fe:ef:36:4b:0f:9c:
10:23:96:13:54:69:55:c8:5c:9d:21:e6:c3:e1:bb:
b3:e1:6c:74:dc:9a:92:26:0e:13:51:34:ec:21:12:
ac:c9:f2:19:ec:41:43:c7:fe:d3:f9:90:12:e4:c6:
01:59:44:d1:d7:e9:29:7c:6a:ab:69:7b:77:65:b0:
f6:f1:11:f6:9b:da:a5:90:12:c8:89:16:60:9e:b0:
d9:99:d5:f2:5c:be:79:cd:95:d6:13:00:cb:d4:fa:
5c:d5:66:e9:c1:72:65:55:f5:1b:30:fd:28:cd:d0:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:8F:68:7A:B0:B2:DB:93:93:B9:99:B5:1C:FF:EC:01:EF:E2:C4
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:92:e0:af:d7:df:d0:d5:89:5f:fd:65:dc:37:2a:42:4b:
5b:6c:f1:16:17:4e:e4:4a:33:d0:d4:a1:d2:4e:47:91:94:bf:
ef:3b:f4:41:fc:8c:47:24:ea:48:e2:00:be:44:86:b6:31:14:
c0:93:97:cf:ed:25:26:b0:61:8a:a4:7b:78:40:bb:5e:44:be:
82:89:db:ef:91:50:c7:c3:b6:f9:16:60:c9:39:18:a5:98:a9:
f0:2a:1b:96:59:2a:81:2e:85:41:e4:89:c1:29:70:68:d5:1e:
90:58:85:08:94:ef:cb:96:f2:4d:80:67:e0:e0:06:2e:dc:7a:
7e:af:3f:68:92:dc:72:02:1c:d7:4d:69:ba:75:30:02:2b:36:
76:09:ca:4c:76:47:e3:0c:29:7a:62:41:09:24:50:3d:b1:71:
50:e3:80:29:ef:36:e2:52:95:0b:0f:40:d1:c1:3e:82:90:ce:
eb:3e:67:53:d0:a6:82:3a:e4:5e:fd:58:9d:f1:52:59:72:91:
4c:4e:7d:be:5c:fa:81:a2:d8:72:32:0d:3c:a4:6e:cc:2b:f4:
fe:e3:9b:9c:bd:8c:71:91:6a:8d:75:f6:e7:57:ea:05:df:49:
a7:6a:da:50:37:45:28:28:11:88:6a:4d:61:cc:65:98:d8:97:
fd:28:e5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP4AsxK2l70F86tCViDuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjUxMTA1MDkwMTAxWhcNMjUxMTA2MDkwMTAxWjAzMTEwLwYDVQQD
Eyg3MThiOGY2ODdhYjBiMmRiOTM5M2I5OTliNTFjZmZlYzAxZWZlMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qtmrZLqjlS8/Q6O9ktDab01/k0j
fler70ZnBCZXTdsJPyXH3H4DjZZrA3mosWbKJkxncgwqmE87/HMpU3uFtCpIt8NL
fooEYTMJE9KAsX2sZXg9/wKj8jOB9cfrOxam4rV5WkFhDm7L9B0AaE49kmFU0D+L
4rqr0Ff75nJPH8wy9Bnv0mqdYLt+Bvs8ETD+7zZLD5wQI5YTVGlVyFydIebD4buz
4Wx03JqSJg4TUTTsIRKsyfIZ7EFDx/7T+ZAS5MYBWUTR1+kpfGqraXt3ZbD28RH2
m9qlkBLIiRZgnrDZmdXyXL55zZXWEwDL1Ppc1WbpwXJlVfUbMP0ozdD2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGLj2h6sLLbk5O5mbUc/+wB7+LEMB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIWS4K/X
39DViV/9Zdw3KkJLW2zxFhdO5Eoz0NSh0k5HkZS/7zv0QfyMRyTqSOIAvkSGtjEU
wJOXz+0lJrBhiqR7eEC7XkS+gonb75FQx8O2+RZgyTkYpZip8CobllkqgS6FQeSJ
wSlwaNUekFiFCJTvy5byTYBn4OAGLtx6fq8/aJLccgIc101punUwAis2dgnKTHZH
4wwpemJBCSRQPbFxUOOAKe824lKVCw9A0cE+gpDO6z5nU9CmgjrkXv1YnfFSWXKR
TE59vlz6gaLYcjINPKRuzCv0/uObnL2McZFqjXX251fqBd9Jp2raUDdFKCgRiGpN
YcxlmNiX/Sjldw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:40 2025 by rpki-client