Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: wTkKL6XJJEuqHMFDuAgNAjmQXJfrRg7DBNiAX6zwG6Y=
Subject key identifier: FD:84:FE:EE:2C:22:8A:A0:B9:6C:CF:A4:70:B7:CF:F7:FB:0E:B8:A0
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019745C234EF159AE17E71317871EA553850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 15:00:44 +0000
Manifest this update: Fri 06 Jun 2025 15:00:44 +0000
Manifest next update: Sat 07 Jun 2025 15:00:44 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: f02tuSJe7fvHdtcL8zVZuec7k92d4G0dMgn2/Werhzc=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:34:ef:15:9a:e1:7e:71:31:78:71:ea:55:38:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jun 6 15:00:44 2025 GMT
Not After : Jun 7 15:00:44 2025 GMT
Subject: CN=fd84feee2c228aa0b96ccfa470b7cff7fb0eb8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:24:52:79:0a:69:f9:40:69:08:c0:15:fd:
45:f7:5b:ae:63:c3:09:e0:4a:23:73:5a:cf:24:36:
c5:96:16:0a:a1:93:f0:8e:0e:1b:d4:8b:14:84:a1:
ea:b7:f1:4a:ff:6b:5d:00:11:6c:d6:53:05:f3:5d:
cd:03:08:fd:c7:72:4d:2d:7d:54:0c:43:bd:38:20:
9a:c4:3a:3e:3b:90:9a:28:55:20:55:fb:50:14:02:
30:a7:1d:e2:79:cd:7f:bc:13:9d:13:62:b2:da:59:
b8:68:2f:fc:77:0a:8a:bb:3e:e2:37:9c:1f:02:48:
82:7e:d2:bf:8c:b9:06:ef:7e:12:e2:62:c9:28:b9:
be:8a:4b:2d:8f:5c:92:98:32:9f:06:d6:58:22:57:
f5:b0:46:22:ab:7d:58:74:b7:5a:06:4f:b5:64:34:
64:67:70:a8:db:25:af:51:b5:10:32:b6:e6:ab:1e:
7a:04:68:c3:07:4c:5d:cf:95:00:a7:4e:b2:7c:2f:
48:03:8a:e3:a1:81:29:6f:9f:b9:b4:13:6f:b6:5f:
d7:1c:71:98:96:24:7e:72:2c:2d:38:56:2d:22:11:
d5:09:1d:dc:5c:8f:a6:da:54:1d:6c:f3:43:94:e9:
ca:25:57:77:d5:03:aa:ae:25:82:07:b9:1e:3e:91:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:FE:EE:2C:22:8A:A0:B9:6C:CF:A4:70:B7:CF:F7:FB:0E:B8:A0
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:0d:4c:f7:b2:6b:6e:f4:29:7a:77:40:0e:fd:de:6c:8c:
c9:36:59:0a:1d:00:7f:0a:80:23:d6:5c:f2:79:43:4d:c9:c5:
f4:02:df:76:85:75:6b:d1:ee:e8:52:d3:14:d0:f7:8c:0b:95:
51:18:c3:f8:39:ae:02:08:94:69:f0:cd:86:0b:04:6e:79:6e:
e7:c2:3a:07:08:2b:d5:f2:b1:0d:10:82:5d:89:2c:b7:5e:bf:
e2:6d:12:84:0b:6e:00:df:d6:1f:c8:c7:20:73:3b:84:b0:f6:
32:a3:b3:8c:9c:0c:49:be:17:e0:59:8c:c5:7c:b1:28:16:84:
5b:08:43:0f:5e:2d:04:79:6e:b6:39:32:ac:56:53:dc:d6:16:
a6:ca:a9:62:d4:f5:d7:2f:f3:78:23:72:a0:a6:31:d3:b8:e6:
2b:90:3c:0f:f3:d6:ca:66:78:5a:15:1e:63:bd:17:ec:16:d2:
a0:60:41:4b:5a:2b:3a:29:cf:ff:e0:ed:94:5a:d0:47:09:65:
5c:d1:a0:00:26:d3:18:80:ea:b4:d9:c2:31:c5:4b:e0:8f:94:
bf:95:de:17:27:11:15:93:f8:4a:53:27:ed:cb:f0:0e:14:fe:
06:ca:4a:22:48:2c:43:35:4a:4b:91:42:fc:78:35:08:fe:60:
74:7d:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:44 2025 by rpki-client