Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: itbQeZHuy3QvmgfV0nVcl9DbKo3I6TXHNJItdERFnDQ=
Subject key identifier: A7:6E:02:12:DA:B2:48:9D:0A:4A:10:06:FC:E1:DC:48:AE:19:94:8C
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 0199176443E236B6DFECC8EE549B7BF3EB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: C1
Signing time: Fri 05 Sep 2025 01:01:10 +0000
Manifest this update: Fri 05 Sep 2025 01:01:10 +0000
Manifest next update: Sat 06 Sep 2025 01:01:10 +0000
Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: bf29Ixkc6XWXWGlAt4E+1rYeZhNlKqi5BLhxkN6vOjE=)
2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:43:e2:36:b6:df:ec:c8:ee:54:9b:7b:f3:eb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Sep 5 01:01:10 2025 GMT
Not After : Sep 6 01:01:10 2025 GMT
Subject: CN=a76e0212dab2489d0a4a1006fce1dc48ae19948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:ec:88:28:67:37:e3:02:1d:60:09:7d:9e:
4f:0b:00:81:e2:b5:09:0b:c2:87:46:1b:07:12:be:
06:aa:97:07:76:d0:d9:72:8c:96:89:c4:d1:d4:71:
a8:e1:b9:4d:85:08:8f:e1:1e:04:df:01:34:ac:ca:
a9:76:77:77:cd:32:67:7c:d4:19:f2:b7:54:09:05:
da:d7:e7:3d:98:ef:fa:ae:82:9e:54:85:40:2a:6c:
c7:01:a7:24:b8:1e:2f:26:6f:51:2d:da:aa:c2:82:
db:9a:20:41:aa:01:b4:40:1d:03:14:54:3e:0a:58:
81:55:11:9f:b7:7c:e6:d9:02:f4:f8:96:5f:f7:a1:
26:2f:52:da:6c:06:88:ca:5e:80:71:7c:1a:bf:d8:
40:db:3a:31:db:88:64:5e:ab:0a:16:cd:cc:8d:0f:
6d:b8:5d:9c:f1:ea:ab:e9:8b:63:53:d5:1a:f1:ac:
23:f0:06:c6:8c:14:c3:54:ba:9f:fd:76:1d:1c:45:
51:63:03:91:40:af:c7:d5:02:be:e0:c3:31:8b:12:
c3:e3:70:6e:24:5e:f5:bc:ac:f8:65:4b:5f:35:75:
ed:f6:c0:86:9b:bf:cb:74:5f:86:6a:5c:ae:03:b5:
a6:4c:93:2f:b4:c9:95:e0:67:8e:f3:f8:e2:19:30:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:02:12:DA:B2:48:9D:0A:4A:10:06:FC:E1:DC:48:AE:19:94:8C
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:1a:4a:48:c3:26:3e:4b:da:da:17:3b:73:f2:9c:a8:2e:
6d:65:84:e3:42:eb:ca:d0:bc:f7:97:89:18:5e:c6:08:2e:16:
33:f8:f7:00:00:4e:35:63:23:b7:ca:e4:38:05:93:b8:01:6a:
0f:ee:50:47:3e:0f:11:22:bb:ed:22:a9:c1:41:ef:28:99:bc:
dc:f4:00:0c:9d:dc:a7:00:11:23:07:f7:52:b0:8d:8d:dc:11:
47:f3:90:9f:48:a0:99:cf:cf:ac:4f:2a:f3:de:b0:9b:55:51:
ba:d1:13:06:b7:77:7b:f2:87:55:c6:56:f5:81:e9:67:ab:cb:
a7:26:1e:b4:4b:8e:d8:07:92:59:c1:34:7a:f9:ac:f8:f7:97:
6a:14:e7:1d:54:9c:8c:f0:92:dd:66:1f:a4:f4:d7:3e:61:24:
e4:f9:29:31:a9:c3:f3:b3:73:7e:7c:df:04:11:aa:db:10:14:
79:d1:8a:7a:3e:0c:f1:eb:aa:d4:ca:3e:84:87:93:0a:53:b0:
69:bc:76:ab:3e:57:f2:0a:37:65:5d:b7:d1:9e:71:40:7d:b7:
09:e0:59:5e:67:d8:54:5f:4c:c1:b5:8e:81:ca:3d:ea:fa:f0:
e6:9d:5e:5c:a5:73:d4:d3:8c:d4:7e:b2:e1:96:61:fb:8d:59:
54:15:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:05 2025 by rpki-client