Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: VuHmkxFFY8H6U+Sw5LURot6my9tT1P8Se6MyP61MkAo=
Subject key identifier: 66:0E:88:87:13:6F:1A:A5:71:36:09:2A:A8:CC:DE:F4:A6:14:0C:2E
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 01992BFD86C43146DCF2B4B2876E01FBA089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 01:00:59 +0000
Manifest this update: Tue 09 Sep 2025 01:00:59 +0000
Manifest next update: Wed 10 Sep 2025 01:00:59 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: EFkNiYHtH60NBcxeap3f0CoVXuYYkE6ayZPjq74leko=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:86:c4:31:46:dc:f2:b4:b2:87:6e:01:fb:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Sep 9 01:00:59 2025 GMT
Not After : Sep 10 01:00:59 2025 GMT
Subject: CN=660e8887136f1aa57136092aa8ccdef4a6140c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:70:85:56:0d:53:19:22:ed:7f:eb:61:44:
63:97:d1:ab:7c:c5:ee:80:6d:d2:46:ef:65:36:e1:
2d:ce:0d:ec:29:05:ff:cd:47:84:4c:ee:4a:18:4a:
ba:60:0a:75:9b:1e:71:fe:f1:02:7e:ca:1b:30:24:
89:c9:87:df:96:d1:66:8e:82:df:e7:fd:43:51:a8:
ad:76:50:b1:4b:55:35:96:ac:ef:9b:e4:cf:dc:98:
04:e1:49:22:24:01:8c:ec:cb:34:c9:dd:e2:0c:30:
1f:c1:4f:e1:f7:1e:e3:ee:b4:43:be:d5:4d:47:a5:
86:65:a6:fc:a5:8e:c2:8f:2b:81:8f:1a:d2:08:6a:
1b:08:a7:9f:7c:17:86:c0:01:26:a8:21:7d:4a:e2:
40:50:1e:be:d4:25:30:f3:28:c1:23:de:a4:c8:42:
e3:58:29:3a:72:01:01:4e:71:0c:7a:90:bc:37:4e:
74:5c:d3:6d:d2:e7:18:d5:ff:05:be:e5:7f:82:d2:
2f:ad:7c:c2:ba:01:44:5e:68:22:6d:a5:c7:4f:31:
19:e2:1d:f7:8c:58:3e:9d:e8:72:23:3a:75:83:81:
d6:1b:29:b4:96:fe:3f:87:86:52:84:b5:f0:c1:e1:
57:91:ef:60:a6:ae:14:1b:3a:9e:2a:ec:31:a5:67:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:88:87:13:6F:1A:A5:71:36:09:2A:A8:CC:DE:F4:A6:14:0C:2E
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:36:d7:7f:cd:e1:03:d8:c0:48:70:64:93:47:c5:ef:93:
ab:cd:a9:ba:3b:06:7d:ea:11:e8:f6:aa:70:b0:26:23:65:19:
13:c3:f6:95:e3:86:9b:0f:e7:97:4d:3c:1c:b0:1b:27:58:a6:
db:82:f7:eb:08:d3:b2:22:2c:3e:2a:ca:03:2f:77:45:fc:98:
97:6e:f1:bb:4b:60:0d:19:3c:d8:85:34:80:b2:12:bf:c2:19:
9b:a5:b9:62:0e:4a:1c:5f:ae:66:81:51:23:06:d8:1a:91:34:
4b:c0:f0:4f:19:d8:02:95:9f:ab:16:60:fd:8f:b4:67:b3:23:
cb:60:85:0b:6e:a1:bb:81:c1:31:00:b7:64:06:66:a6:17:92:
ba:a3:08:3e:c1:6d:aa:b9:c3:57:28:07:02:8c:7b:ef:2c:08:
59:2a:e8:a2:84:98:5c:78:27:56:c5:79:80:0e:57:ff:71:09:
99:da:d9:ac:19:eb:07:8f:75:91:e8:d8:fb:3c:2c:00:08:19:
f2:15:4a:d7:b5:f5:5a:b9:97:e7:e9:3c:df:22:2a:f9:39:dc:
be:f0:a5:73:28:07:75:d0:1a:bc:67:57:67:d0:f6:14:92:e0:
6a:e2:b3:cc:1b:86:1f:50:50:0d:bb:4a:a8:26:6a:ae:19:ee:
d7:6a:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:13:38 2025 by rpki-client