Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: /pdGOtvCr2rOUE4V2D0a4ith477jcciA2q+rOTZ/Kw8=
Subject key identifier: DC:36:52:4A:6C:7B:CD:F6:5B:AF:40:8B:5C:5D:37:6E:31:C7:2A:3F
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019A23D2DA564802960651ABD13585E381AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 014C
Signing time: Mon 27 Oct 2025 04:00:12 +0000
Manifest this update: Mon 27 Oct 2025 04:00:12 +0000
Manifest next update: Tue 28 Oct 2025 04:00:12 +0000
Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: LyB9dlFH08aEtgLCU79/Q7qdpNx3KfeBkk/FyuOC6P8=)
2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:da:56:48:02:96:06:51:ab:d1:35:85:e3:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Oct 27 04:00:12 2025 GMT
Not After : Oct 28 04:00:12 2025 GMT
Subject: CN=dc36524a6c7bcdf65baf408b5c5d376e31c72a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:31:f4:1b:ec:cc:65:2f:f9:d3:5c:d3:e9:
cb:c6:58:18:dc:cb:6e:44:38:3a:fd:6a:bd:94:70:
e4:3e:a1:22:29:ec:92:1c:e9:9d:f6:c1:7f:71:a6:
e4:0b:04:18:5f:b1:cd:a1:38:ee:80:8b:94:b6:d4:
0e:25:9e:eb:1c:54:98:8b:85:70:b9:68:81:05:46:
3d:3a:41:5c:47:0a:2d:21:80:a8:7a:a6:2c:a0:57:
68:87:ab:9a:1e:15:3f:20:23:8b:7f:b9:54:2f:6d:
94:83:88:f9:3e:2a:2e:90:c7:25:7d:d6:0d:2f:74:
62:58:85:26:09:fe:60:1e:7d:60:c2:cb:c4:8f:0f:
7f:4f:43:c7:d3:75:62:fd:df:51:6d:ba:ad:50:ba:
49:73:d2:ed:a6:09:51:35:ef:b2:1e:f8:e8:ec:12:
77:8d:9f:cc:dd:76:d9:d4:5e:43:96:a9:62:b1:1f:
ca:95:4d:0f:a9:31:88:c0:69:46:69:2b:e0:bf:13:
45:82:8e:91:04:f5:ad:14:f1:2f:21:8c:17:a4:af:
b3:ee:f5:9c:ce:62:cd:82:71:50:96:ec:ac:05:5e:
a7:a1:02:39:8f:c0:ea:56:d6:dd:46:29:19:79:be:
7e:0f:98:cb:ea:2e:49:65:7c:74:77:cb:41:16:e6:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:52:4A:6C:7B:CD:F6:5B:AF:40:8B:5C:5D:37:6E:31:C7:2A:3F
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:5d:78:ee:a1:ed:c0:ef:84:4c:d8:eb:c3:61:c0:b5:51:
49:18:7e:36:60:55:3d:22:49:11:b3:89:50:bd:db:9e:3d:57:
0c:92:5f:be:aa:8d:39:f1:16:4e:5f:04:2e:9e:18:74:0c:6c:
8e:57:10:c8:94:ca:56:70:17:d2:e1:a1:c3:f2:4b:8a:d5:c1:
79:ec:0f:70:e8:83:ee:75:59:0a:4b:20:d2:8e:85:74:8a:05:
6e:71:e2:17:a7:22:98:99:38:69:20:ee:dd:f8:d6:ad:93:07:
4f:9d:16:b5:48:67:7c:97:82:0d:80:24:5c:b5:ab:eb:e1:16:
57:87:c8:ad:11:97:92:ea:d2:97:ea:9d:50:01:8e:16:eb:bd:
d1:a8:34:8b:5d:7f:cf:11:c0:16:eb:2c:c1:80:66:2a:cb:a7:
5b:b4:40:93:54:45:17:29:de:e1:3b:7d:e7:d0:e2:48:ee:0a:
ea:87:23:f3:56:91:e6:f1:f4:b3:cd:b1:46:a9:b5:51:49:87:
ba:e4:63:01:1b:a9:a7:df:35:54:e5:d9:4e:59:3c:04:ef:03:
8b:67:89:5d:98:9f:38:e8:ad:dc:9a:68:cd:7f:95:ef:2c:ef:
d2:39:31:45:60:b5:d3:a6:c8:da:e0:a5:e3:34:84:22:fc:db:
4e:38:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:20 2025 by rpki-client