Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: NvzKP+3gXO+erd0jwt9ogW2hImG/yw43Xq0th6K/Ers=
Subject key identifier: 31:67:D0:BB:A6:C4:AB:61:86:F2:85:6E:15:BB:5A:ED:EB:65:19:C0
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019922C323F1B038AB94C384323EADECEBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: QW5PHNpKGMrSmSlnI8llx1BJmG5Kh7xUBKkmnYD4c9I=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:23:f1:b0:38:ab:94:c3:84:32:3e:ad:ec:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=3167d0bba6c4ab6186f2856e15bb5aedeb6519c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:17:e7:c7:dd:76:62:46:2c:d1:18:2f:79:
12:96:22:4a:4e:ce:23:64:5a:df:58:73:75:f6:3a:
40:d6:1c:ad:12:d1:d9:78:8e:3c:c5:5b:04:54:a6:
f6:39:2e:ad:88:78:c6:61:6c:87:9e:e8:c8:ec:5a:
d3:64:31:89:93:19:a8:3c:12:db:89:ba:c2:e7:75:
98:71:00:6a:24:11:e9:6b:57:30:64:f2:0b:7a:17:
ed:7e:8d:84:81:cb:db:83:7e:a7:d0:af:ae:0f:36:
ba:de:14:9e:03:12:65:22:4e:f0:e9:3d:88:d7:84:
08:99:52:81:28:4e:c1:cd:2a:81:df:c8:d2:14:ca:
d1:62:d9:37:de:d3:8a:13:7c:5e:b8:0c:b5:39:6a:
3a:54:2a:5c:8e:4d:4f:be:95:c6:2a:d2:e7:9f:38:
74:4b:1a:07:24:90:cc:15:8d:8e:ee:c3:4d:ca:0e:
9a:80:2b:63:31:d2:f8:ba:e0:99:87:47:d4:82:bd:
1a:84:62:4e:d4:9f:83:76:c3:d1:20:f3:b3:7f:88:
c5:f1:75:37:57:50:b4:32:e2:7d:c4:35:da:ff:b7:
97:2b:55:89:88:a6:51:40:19:f5:17:71:08:79:37:
5c:6a:c7:33:bb:4e:9f:01:9e:24:30:78:db:88:83:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:D0:BB:A6:C4:AB:61:86:F2:85:6E:15:BB:5A:ED:EB:65:19:C0
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:00:6a:5f:39:bd:58:07:a1:ed:a7:05:08:f6:3b:1f:e6:99:
97:6e:cf:1d:68:52:52:de:78:4b:e5:78:f0:75:9b:b5:55:4c:
f1:b3:86:72:1c:a7:45:ac:7c:d0:8d:6e:28:3a:e8:16:8a:bd:
f4:0d:53:21:56:e4:bc:79:7f:33:e3:de:3f:5c:11:99:b7:05:
41:50:ec:3f:48:8e:3f:9d:29:f3:f1:9c:40:de:60:53:9c:8d:
b8:47:14:04:3d:85:87:34:28:37:37:a9:41:b9:c7:8d:0d:4a:
f3:e7:e3:72:36:71:a4:3a:bb:81:1f:41:5b:45:a1:c1:fd:bf:
cb:39:f5:6a:bb:74:7a:e4:8b:0f:c0:c1:2c:cb:87:82:ed:d5:
23:ea:ba:b9:5a:c4:e0:ce:32:2e:98:7e:8a:eb:12:61:54:25:
8a:cc:c0:76:d1:78:7d:94:f9:7b:e7:92:e0:c0:b1:87:24:9b:
bb:21:57:e9:22:3c:45:53:0f:2a:33:7a:ea:62:6c:38:a0:dc:
ee:0c:df:7b:36:ca:02:59:1e:34:4a:cc:d1:03:da:7f:c9:a3:
4f:79:71:c6:cf:12:6c:5c:99:81:8b:3d:f4:60:ed:23:25:1c:
ef:c9:a1:7c:43:90:50:e1:40:e8:68:cf:41:fb:5a:44:2b:71:
3d:26:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:37 2025 by rpki-client