Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: vFtBNHO/HSDnyEIkQxeQqk+WlqgMFjdf+8aG48CcgiY=
Subject key identifier: 0A:A1:7C:FA:23:B9:89:4B:83:2B:F5:A3:96:33:84:BD:BF:39:3D:76
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019A70DC546475866E48F50744F7F14BAD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: Z3PEx0rcky/lI9X7Taz7d2xSGttseC1PS7AucnZv4TU=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:54:64:75:86:6e:48:f5:07:44:f7:f1:4b:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=0aa17cfa23b9894b832bf5a3963384bdbf393d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:b5:b4:13:3c:3f:44:56:e6:f2:49:ad:6c:
ca:0f:9b:3b:e4:e5:11:c3:cb:f4:09:41:4d:f5:b4:
03:91:a7:1e:57:04:2c:de:fa:17:62:45:8b:4e:0e:
d6:95:60:5c:64:a1:c3:d0:97:ed:7d:e9:0a:c9:0a:
94:7a:19:d2:16:e9:00:eb:ed:47:e1:f2:98:81:69:
9e:0a:ba:de:b2:0e:87:46:20:a8:5e:f3:58:2c:52:
20:c0:46:5b:75:d5:69:00:22:be:06:26:68:ba:1b:
68:14:ba:e4:38:47:a2:98:b1:44:e5:a1:cc:76:4a:
04:3e:f1:00:df:ba:bc:b7:4e:40:d9:6c:7c:25:f4:
48:67:9d:5f:99:20:84:71:53:e3:8a:a1:aa:55:e4:
59:a3:c2:e5:6d:54:10:ba:ed:87:04:d8:78:bb:42:
e6:d8:af:cb:29:61:e9:ad:3b:b7:1f:c6:4e:7b:1d:
6a:32:0c:de:72:d4:97:e3:0f:b7:59:bd:26:9f:dc:
45:f6:e5:30:6a:15:c3:7d:70:8b:00:00:02:1b:4d:
55:67:32:e5:d7:88:83:70:f1:c9:38:58:9d:28:70:
48:5e:c5:ef:58:50:52:59:8f:77:15:55:bc:2f:74:
7f:cd:72:b4:12:b6:41:99:a1:2b:e0:e6:ae:ba:8b:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:7C:FA:23:B9:89:4B:83:2B:F5:A3:96:33:84:BD:BF:39:3D:76
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:c6:07:0f:6d:ce:c9:06:2d:f4:19:b4:01:68:a8:e9:88:
9e:51:4b:30:4a:0d:96:9e:e7:04:59:a6:f7:ac:83:5a:13:ce:
21:a9:47:ba:dc:70:9a:b7:b5:9b:bc:d5:ab:58:8e:0b:da:8f:
9f:03:60:92:d8:a1:62:4f:ea:ba:e3:c3:2d:66:37:74:72:54:
44:f4:c8:95:b9:f1:7e:f7:cf:b7:17:b0:0e:52:9b:03:ec:49:
19:d9:ec:0e:b9:9e:67:3c:5e:5e:f7:0f:c1:9e:cd:11:aa:82:
68:bb:11:a7:0b:c2:df:c1:56:c4:a6:21:2e:a7:d2:79:bc:08:
a5:e8:7a:cc:d3:6b:e1:77:5e:4a:93:7d:aa:fa:24:f7:de:b2:
94:37:0f:0a:e4:ea:f5:b9:d2:43:bd:81:40:d8:0e:99:d7:fc:
f4:f0:6b:61:f3:82:2d:49:9f:25:a8:93:ec:5d:e9:3b:34:2f:
f4:16:c0:5d:c1:65:9c:26:cb:88:7f:67:fd:e2:29:82:4d:29:
7c:b1:bd:d4:22:0a:34:cc:be:5e:e7:a7:99:63:ed:e4:5e:be:
72:e3:c2:b0:0c:8d:73:45:ce:27:5d:68:88:20:52:12:88:47:
9b:32:59:f9:22:ee:2e:d3:c4:a5:6a:87:77:a1:ef:18:ad:29:
78:f4:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client