Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: vWKsnAQPvO1ZfmbM305RXGR81ziKFRmiyZHQEtPEmJY=
Subject key identifier: A6:A4:BA:F3:86:78:0A:5D:15:20:2A:B0:20:47:42:1D:B0:ED:58:E7
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019A7149B2CA94B269BE0CBF744568715364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0E1C
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: L2fauHiYGl1zRL0Yh7lns+ssNT63rpckLLgSiY32B40=)
2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b2:ca:94:b2:69:be:0c:bf:74:45:68:71:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=a6a4baf386780a5d15202ab02047421db0ed58e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:99:7c:27:f9:92:6d:38:88:1a:6d:63:62:
9b:bb:b8:e7:a7:95:48:46:31:cc:70:50:a8:64:58:
47:49:e4:fd:9d:fa:d7:c6:8b:18:66:15:9c:c8:b3:
dd:4a:4b:ac:80:2c:fd:67:7a:f2:a6:13:6c:73:f4:
6d:2b:7f:53:16:1e:34:c2:27:aa:18:1b:0b:76:60:
04:d0:60:75:c6:b3:a8:ee:07:bf:e2:a0:e0:6e:d5:
2e:da:f5:87:95:0d:e5:26:49:62:51:7f:59:de:65:
f2:a5:e4:dd:7c:bb:26:5d:96:70:4c:51:2c:5b:13:
48:ed:bc:90:2e:33:28:09:52:04:64:6f:4d:4c:83:
08:a4:84:46:cb:a8:47:17:e8:46:16:0c:7e:f1:84:
3f:0c:3d:08:3f:71:8f:25:35:a0:de:0b:af:36:74:
51:67:76:20:7e:ef:e9:cb:97:32:4a:a9:db:12:00:
1c:5d:d8:cd:a0:ab:76:1b:33:da:8f:cd:11:1a:99:
f8:7b:c3:26:fa:c5:81:cc:00:5b:20:cc:e1:9e:21:
6d:2d:10:49:8f:8c:e3:26:02:05:84:c6:85:ab:16:
0d:e5:8b:9a:f2:45:cc:5e:b7:84:49:d8:fc:dc:b6:
cc:49:31:4b:36:f2:cc:d0:de:18:61:74:29:a2:dc:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:BA:F3:86:78:0A:5D:15:20:2A:B0:20:47:42:1D:B0:ED:58:E7
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:36:8b:56:db:96:04:c5:cf:82:e8:33:18:23:ad:4b:b8:
8b:94:3c:c2:81:a1:fb:f9:87:83:a1:83:ce:b8:98:2e:3a:27:
84:84:c3:b7:b4:13:40:b0:f1:62:ca:72:e6:d9:39:24:0e:f7:
55:3e:40:23:de:5c:a4:e1:df:8f:7b:a3:ab:a7:21:e2:de:89:
ec:0e:89:a5:a7:0e:1a:5a:28:2a:60:3b:f0:2d:d6:a0:f4:3a:
3c:2e:52:2d:13:62:30:9a:1c:06:b7:14:be:2d:5a:c2:d3:c3:
67:16:d5:45:5e:08:60:03:96:af:a9:43:27:32:e6:f4:a1:ac:
91:11:c7:88:f4:67:01:74:b1:57:2a:71:8b:a2:8c:c2:89:ab:
a7:a8:52:94:93:8e:00:d0:30:85:f9:b1:63:83:64:b8:42:d1:
a7:2e:12:70:9e:2b:2b:db:ff:f5:d4:b5:db:06:57:85:69:12:
b6:92:8c:6a:64:48:0b:ad:fa:ee:3d:b5:2a:18:9d:e7:89:e3:
05:fd:9f:f3:12:a1:a2:f9:59:3f:37:06:79:7a:27:81:62:d8:
52:64:7a:c6:30:d6:1e:25:55:43:a9:1e:98:ad:85:aa:2c:36:
3c:1c:a0:a6:93:bd:21:dd:e0:c9:e2:b2:ad:7e:b5:a9:41:31:
5e:10:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:57 2025 by rpki-client