Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: 0+0YXcWdrZ3lUckjm0Pj4ZNw0b4/R8e/XzZ77FDUQ6U=
Subject key identifier: 92:0F:8A:5B:F5:73:4A:EA:25:B4:E2:DC:A5:7C:CB:3C:A3:20:E8:B2
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 019747E73354618C385E41441A8B6AD0AE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 12A4
Signing time: Sat 07 Jun 2025 01:00:23 +0000
Manifest this update: Sat 07 Jun 2025 01:00:23 +0000
Manifest next update: Sun 08 Jun 2025 01:00:23 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: dzLmGFSQERXnTBP590W055Mn05fKprt1nngZA7z8a2Y=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:33:54:61:8c:38:5e:41:44:1a:8b:6a:d0:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jun 7 01:00:23 2025 GMT
Not After : Jun 8 01:00:23 2025 GMT
Subject: CN=920f8a5bf5734aea25b4e2dca57ccb3ca320e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:0c:84:59:64:31:87:05:b0:b0:8c:18:50:
64:62:9d:e2:fc:78:65:53:9a:25:8c:1d:f2:79:a9:
9f:68:4f:bf:68:f7:e1:5f:ec:2c:50:1d:22:c8:ac:
d9:46:bf:01:df:38:1b:26:e7:3a:66:e9:a1:2e:0d:
31:f4:95:e1:3c:87:99:51:48:0d:74:48:e6:01:c7:
84:f1:be:75:f5:3c:24:ca:35:1d:7d:f8:e8:80:54:
70:86:48:53:e1:d3:75:32:ab:a6:1d:9d:c3:8d:ee:
02:67:14:c7:f1:e6:ea:d6:7d:09:c5:a2:de:36:33:
ea:7d:68:31:4e:31:e6:67:ce:dc:47:9c:2e:0e:49:
b1:fb:da:30:76:81:08:43:27:8c:1e:e4:93:32:75:
98:6b:6e:f5:9c:87:1a:47:c7:3e:8e:46:5d:ad:83:
22:a9:76:d0:b2:cb:ea:7b:f1:0b:62:4a:d0:9c:b7:
f5:5d:48:e4:cf:ef:ca:a5:c0:44:9b:cb:fb:25:7e:
d4:78:e2:c1:fb:8c:95:87:c6:a8:66:54:17:47:3f:
9f:b8:98:68:20:82:29:c7:a9:2e:6a:a1:8a:72:e4:
c9:f4:6c:39:f6:12:78:24:f4:c9:5b:8b:32:ac:43:
91:46:b4:2e:8d:f3:4e:82:d3:7f:a8:75:a3:76:83:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:8A:5B:F5:73:4A:EA:25:B4:E2:DC:A5:7C:CB:3C:A3:20:E8:B2
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:85:a6:2c:29:69:ca:a1:1d:08:8a:a5:be:2b:be:33:54:
5d:bf:aa:8e:1c:f6:8c:6f:7b:35:9c:3e:32:93:6d:7d:61:a5:
b9:fd:2f:7e:92:f5:d4:18:5a:24:d3:8a:89:a6:e9:a7:1c:f1:
c8:5f:2f:50:77:63:ca:d3:6a:59:73:5a:c9:1f:b9:7f:8d:9c:
52:d8:5d:c6:ae:6d:2a:19:18:fb:95:2b:e8:32:3e:ca:9b:c7:
3d:82:ad:91:ab:f8:98:48:a3:8d:bb:8b:e0:41:96:19:30:55:
ef:df:2e:d6:f6:34:ea:46:2a:43:3a:7d:04:ba:65:30:11:8a:
5f:02:3a:23:72:de:dd:f5:ab:9e:5e:7b:7f:0d:69:f4:0e:84:
aa:78:59:18:0b:d5:aa:c0:a9:81:51:7c:82:bb:e0:8f:5c:cb:
ec:dd:04:6a:8e:87:01:ea:88:fc:3c:46:08:88:8d:c6:43:5a:
b1:d6:9a:d3:1a:cc:be:5d:4a:a5:39:47:88:b7:ea:0d:24:79:
7b:55:f5:7d:59:61:95:87:42:44:fc:7b:2b:1b:91:79:c3:dd:
63:1f:f9:68:77:52:74:e5:2a:90:57:54:8e:db:a4:00:62:f2:
94:a7:fc:55:aa:f4:74:bc:18:60:ec:1d:dc:c7:4a:e2:87:c7:
50:ad:e1:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH5zNUYYw4XkFEGotq0K5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTJiZTM3MzJmNmVmZDU5YzdkZTVhYjAzMDcyYTAxMmM3
MWI1ZWQwHhcNMjUwNjA3MDEwMDIzWhcNMjUwNjA4MDEwMDIzWjAzMTEwLwYDVQQD
Eyg5MjBmOGE1YmY1NzM0YWVhMjViNGUyZGNhNTdjY2IzY2EzMjBlOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A0MhFlkMYcFsLCMGFBkYp3i/Hhl
U5oljB3yeamfaE+/aPfhX+wsUB0iyKzZRr8B3zgbJuc6ZumhLg0x9JXhPIeZUUgN
dEjmAceE8b519TwkyjUdffjogFRwhkhT4dN1MqumHZ3Dje4CZxTH8ebq1n0JxaLe
NjPqfWgxTjHmZ87cR5wuDkmx+9owdoEIQyeMHuSTMnWYa271nIcaR8c+jkZdrYMi
qXbQssvqe/ELYkrQnLf1XUjkz+/KpcBEm8v7JX7UeOLB+4yVh8aoZlQXRz+fuJho
IIIpx6kuaqGKcuTJ9Gw59hJ4JPTJW4syrEORRrQujfNOgtN/qHWjdoPvjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIPilv1c0rqJbTi3KV8yzyjIOiyMB8GA1UdIwQY
MBaAFG6ivjcy9u/VnH3lqwMHKgEscbXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQt
MTMwODZlY2ZmOWQ1LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xNmJhMTEtNzczYi00ZTdlLWIwZGQtMTMwODZlY2ZmOWQ1
LzEvYnFLLU56TDI3OVdjZmVXckF3Y3FBU3h4dGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT+Fpiwp
acqhHQiKpb4rvjNUXb+qjhz2jG97NZw+MpNtfWGluf0vfpL11BhaJNOKiabppxzx
yF8vUHdjytNqWXNayR+5f42cUthdxq5tKhkY+5Ur6DI+ypvHPYKtkav4mEijjbuL
4EGWGTBV798u1vY06kYqQzp9BLplMBGKXwI6I3Le3fWrnl57fw1p9A6EqnhZGAvV
qsCpgVF8grvgj1zL7N0Eao6HAeqI/DxGCIiNxkNasdaa0xrMvl1KpTlHiLfqDSR5
e1X1fVlhlYdCRPx7KxuRecPdYx/5aHdSdOUqkFdUjtukAGLylKf8Var0dLwYYOwd
3MdK4ofHUK3hvw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:13 2025 by rpki-client