Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: 7SqFMu9OEX+GERYKYgzO3N4mfrmjRYIy6vOVoloCiDw=
Subject key identifier: D6:10:26:1D:29:96:64:C8:64:7F:40:D0:F8:65:D2:F7:82:F9:6B:40
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019922C349F9DB6B02F689DE12BE850E331A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0AFF
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 3An4eIXiAuGA5y1EJuSXqP8lD27zrY71BAVtKIrtw6U=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:49:f9:db:6b:02:f6:89:de:12:be:85:0e:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=d610261d299664c8647f40d0f865d2f782f96b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:72:e3:80:64:30:c8:fd:10:7d:a6:16:3c:
d9:45:fd:36:25:df:5a:92:b6:f8:2c:86:f8:6d:89:
fb:99:5b:e9:7f:7f:2a:28:e6:a5:ff:4b:60:fc:b5:
07:d7:df:3b:de:3f:49:56:d7:67:46:bf:3d:51:18:
9e:b6:76:66:70:b1:52:f5:5a:86:2a:e5:cf:d0:f4:
ce:28:d3:3d:00:11:c5:4b:dc:63:58:70:45:7a:c1:
80:e2:ed:61:19:48:10:a7:ba:dd:ab:f1:a8:ce:83:
dc:1f:2c:c5:8c:7a:b5:42:ff:be:64:64:ae:9b:59:
0f:e2:d4:f7:c3:12:26:70:70:3e:66:d6:e1:c9:72:
ab:2c:d3:a1:94:16:a4:9a:76:5a:ed:4d:2a:41:ee:
d8:38:78:e1:8b:69:78:a2:9f:2e:55:ec:b6:89:73:
d1:b7:97:43:47:fb:9f:d9:9c:10:19:2c:23:4f:8a:
e5:d6:5e:f1:31:83:97:c3:4b:6e:44:3a:fc:b2:4e:
6d:14:a7:da:b0:3c:91:a0:8f:d1:fe:ba:05:e3:40:
27:6c:b3:8a:83:75:00:08:08:cb:36:14:11:44:1a:
f0:ee:5f:90:c3:1b:99:32:b5:3c:ff:9b:06:6d:07:
38:9e:16:a5:73:ba:f0:14:d5:49:d9:84:28:ac:06:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:26:1D:29:96:64:C8:64:7F:40:D0:F8:65:D2:F7:82:F9:6B:40
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:66:8e:fa:e0:3d:c5:76:29:ee:45:32:0f:dd:80:ab:bc:a9:
f5:09:40:a0:78:d4:84:e1:f4:a5:d7:1f:bc:05:17:1c:64:41:
94:2d:82:1b:3b:74:0a:47:0b:e7:7d:5b:49:ed:58:1e:98:13:
b4:23:5f:55:8c:b4:da:a9:1a:79:7b:e2:be:41:ac:fe:fd:e1:
2a:4c:2f:3b:1c:5e:31:86:df:d8:f7:cd:29:3f:8d:5d:44:f5:
fe:f9:30:b3:3e:45:d0:f3:ca:9e:79:a5:60:78:76:b3:d6:dc:
97:9a:ab:ea:18:c2:70:1a:a9:af:a7:e4:a8:81:8c:54:9a:8e:
8a:42:55:9f:55:d1:4b:e2:bb:69:59:3d:b9:f1:61:e7:64:e0:
28:0a:2d:6c:0b:7f:ec:52:87:a6:b7:7e:51:46:9c:98:8f:ff:
55:3f:33:56:71:0f:4a:6f:69:8f:00:36:80:54:3d:a5:fe:3d:
dc:8f:bb:90:7f:5a:f1:86:34:1e:da:65:6e:29:9c:d8:7a:93:
50:5a:de:c9:c3:23:b1:2f:07:77:10:59:c2:ff:f6:3c:fe:f0:
3a:a1:54:05:97:02:2f:81:1b:58:01:7c:6d:21:c1:e7:b5:6f:
7a:8e:51:25:71:da:de:66:c5:d8:67:40:19:5c:01:3c:de:2f:
55:d3:65:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw0n522sC9oneEr6FDjMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk
ZGI0OTYwHhcNMjUwOTA3MDYwMDQ3WhcNMjUwOTA4MDYwMDQ3WjAzMTEwLwYDVQQD
EyhkNjEwMjYxZDI5OTY2NGM4NjQ3ZjQwZDBmODY1ZDJmNzgyZjk2YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqRy44BkMMj9EH2mFjzZRf02Jd9a
krb4LIb4bYn7mVvpf38qKOal/0tg/LUH19873j9JVtdnRr89URietnZmcLFS9VqG
KuXP0PTOKNM9ABHFS9xjWHBFesGA4u1hGUgQp7rdq/GozoPcHyzFjHq1Qv++ZGSu
m1kP4tT3wxImcHA+ZtbhyXKrLNOhlBakmnZa7U0qQe7YOHjhi2l4op8uVey2iXPR
t5dDR/uf2ZwQGSwjT4rl1l7xMYOXw0tuRDr8sk5tFKfasDyRoI/R/roF40AnbLOK
g3UACAjLNhQRRBrw7l+QwxuZMrU8/5sGbQc4nhalc7rwFNVJ2YQorAbGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYQJh0plmTIZH9A0Phl0veC+WtAMB8GA1UdIwQY
MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt
NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4
LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWaO+uA9
xXYp7kUyD92Aq7yp9QlAoHjUhOH0pdcfvAUXHGRBlC2CGzt0CkcL531bSe1YHpgT
tCNfVYy02qkaeXvivkGs/v3hKkwvOxxeMYbf2PfNKT+NXUT1/vkwsz5F0PPKnnml
YHh2s9bcl5qr6hjCcBqpr6fkqIGMVJqOikJVn1XRS+K7aVk9ufFh52TgKAotbAt/
7FKHprd+UUacmI//VT8zVnEPSm9pjwA2gFQ9pf493I+7kH9a8YY0Htplbimc2HqT
UFreycMjsS8HdxBZwv/2PP7wOqFUBZcCL4EbWAF8bSHB57Vveo5RJXHa3mbF2GdA
GVwBPN4vVdNlqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:49 2025 by rpki-client