Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File: BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier: LqGbFlEjPM81dVvKL/k3opFjGAOpahk8u4+dEzEG4qY=
Subject key identifier: 6F:4D:CC:3E:D1:81:C0:C4:BD:C2:84:AB:8A:39:B8:F9:9E:1B:41:6C
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 019A7225E7B90FFAB1C26F552407803D0E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: d+oUmtdzZRDl9sQQDqr1uamFa11z/7lScsWL2KgUIHw=)
2: LrxwZvPINeksQvETDOEipmKUBtE.roa (hash: mTC/swC0iM7xlEfSlqCGI1ogIVmyM2L2H3WafcUtAOE=)
3: vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa (hash: eCRwk/+JF3YykOACMbGT9h5ea0SspdLqSge077r4Iz0=)
4: vYyERfzMQqwkNDEj2uOXG_S6t8w.roa (hash: WXsRMU1133zUyQTKxrB9Bygige89E8eXSL5nflVhMAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:b9:0f:fa:b1:c2:6f:55:24:07:80:3d:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=6f4dcc3ed181c0c4bdc284ab8a39b8f99e1b416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:41:9b:55:93:1a:35:41:68:20:8f:b3:24:
2e:93:35:31:1e:95:d8:86:5f:05:51:53:31:c9:9d:
71:09:4e:6f:0a:46:ce:68:fc:7a:2d:e1:8b:a7:e7:
72:cf:03:8f:1d:3c:af:6d:0a:01:98:11:dd:3b:10:
f7:37:33:45:e3:b6:43:b6:1d:b7:b3:e3:ae:85:e6:
c4:aa:d7:5a:2c:88:63:b1:19:e8:e1:0c:8c:1c:7c:
02:19:0b:55:b0:54:98:38:a3:bd:9c:50:42:c6:ea:
ef:4d:17:a4:83:3d:e0:eb:50:2d:65:ab:76:db:96:
5f:c4:f9:02:f4:8e:0f:2e:6f:1b:9d:51:7a:1d:67:
f0:df:3c:0c:64:fb:48:5b:71:d5:67:62:31:3d:c3:
e2:84:55:9a:eb:21:16:d3:a6:e0:9c:ed:d1:f8:9f:
3b:b4:d7:52:39:12:31:90:c2:6f:57:c4:f5:a3:dc:
76:6a:3b:5e:6c:67:de:5d:9c:f4:85:95:be:9d:ba:
13:f6:f0:37:d4:66:b1:60:00:e6:b5:27:b3:6d:21:
67:a6:1f:31:3c:67:47:2a:c6:64:70:1c:fc:0b:b2:
09:78:16:4c:bd:9c:0f:a2:4c:e9:d6:f8:9a:ff:e5:
b0:25:03:c8:00:c8:3d:a8:94:b5:85:6d:88:de:c3:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:CC:3E:D1:81:C0:C4:BD:C2:84:AB:8A:39:B8:F9:9E:1B:41:6C
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:a2:08:4b:ba:37:ea:b9:5f:8f:42:d5:48:79:65:ab:c2:
1f:66:47:6f:e7:1b:6c:39:13:64:a3:48:37:e5:a8:36:99:22:
bd:57:99:c5:ed:56:d5:e7:b2:e1:5e:30:b8:f6:c7:8c:3b:49:
d5:c2:3b:a2:b9:d3:68:8b:f4:55:17:ac:ed:10:0a:44:eb:29:
2d:21:8f:c9:8e:01:33:8b:3d:ae:43:5a:d7:dd:76:60:fd:e7:
26:a5:e3:f9:89:d9:0f:09:d3:6e:96:f6:99:8c:c6:4d:bf:62:
8d:aa:84:21:2f:1d:64:47:68:d7:27:8c:dc:39:94:07:f4:8a:
3b:35:92:96:66:2b:8e:8c:2d:73:ff:7b:3c:d6:46:03:60:dd:
85:7a:4d:44:f9:bd:e4:c5:a5:c7:75:4d:e1:b3:7c:55:b9:90:
a1:98:ef:53:ac:3a:7e:a7:75:b7:a3:af:97:f4:a0:a5:24:20:
e8:9f:23:9a:ed:c1:d6:17:d9:df:d6:0d:31:20:d8:bb:ad:4d:
5f:d7:77:39:d8:80:b6:ad:47:fb:93:fb:0a:52:f8:0a:81:88:
2b:54:a4:58:36:9c:e8:2e:6c:a3:82:33:73:c0:4d:76:4e:cb:
59:b3:5f:3f:b0:45:5c:19:d7:a3:35:21:5c:f7:c4:3c:73:f6:
e9:ec:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:23 2025 by rpki-client