Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: JDsw5rSP91gL8PI9yu/IU5KsYv5Ulwv+amO0Cu7B7zQ=
Subject key identifier: 36:48:2F:72:7E:86:AF:12:A9:73:C6:38:32:56:82:B7:76:75:71:80
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0197D88786725ECD1B92CCE6FC5586905603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0A54
Signing time: Sat 05 Jul 2025 03:00:49 +0000
Manifest this update: Sat 05 Jul 2025 03:00:49 +0000
Manifest next update: Sun 06 Jul 2025 03:00:49 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: auMxrDdObYOuOj2iD70wCYh9S5bxntDo+sBLNKOJAzs=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:87:86:72:5e:cd:1b:92:cc:e6:fc:55:86:90:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Jul 5 03:00:49 2025 GMT
Not After : Jul 6 03:00:49 2025 GMT
Subject: CN=36482f727e86af12a973c638325682b776757180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:29:90:01:89:fd:01:00:97:15:4c:ad:9a:
e0:ff:8b:a1:7a:dc:a9:3d:30:5c:1c:10:fa:52:2c:
c9:2f:47:7d:5f:37:d2:bb:af:d5:41:9e:13:f5:8b:
63:ce:a0:4e:c1:a0:dc:37:49:87:9d:3c:bf:b6:3c:
bb:e2:35:ec:5e:7c:9a:53:18:ce:63:8f:5f:9b:6f:
08:fa:15:ee:48:50:df:0d:1a:e4:8c:20:cf:2a:8a:
53:9a:81:31:91:60:68:cd:6f:18:84:62:5c:52:e8:
eb:45:b9:6f:e2:85:db:14:40:93:f1:8a:e5:6e:a5:
c6:12:55:45:ce:a0:65:0b:41:5d:4e:12:e0:56:55:
43:ba:81:2f:42:02:01:12:18:24:a4:b7:7d:08:22:
be:a4:a1:98:cf:52:c7:e6:c8:09:ac:63:61:97:60:
00:da:da:9d:35:1e:da:7f:fe:cb:aa:c6:79:c4:dc:
b7:5c:a8:14:da:32:cd:49:b7:32:9e:71:79:1f:ea:
31:02:1e:08:a3:20:28:66:b0:9b:38:60:c0:03:30:
11:4f:a2:bf:7e:53:92:09:c5:00:53:91:06:e9:d4:
e0:37:2c:e0:6f:b2:e6:2c:c3:d1:36:32:41:dd:46:
ae:d1:c5:51:4e:88:05:b9:d3:e5:5c:8f:f4:30:da:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:2F:72:7E:86:AF:12:A9:73:C6:38:32:56:82:B7:76:75:71:80
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ab:0b:e6:29:13:72:4e:68:ab:c9:a3:83:6f:a8:ea:28:4a:
8d:c4:96:25:ad:d7:ad:12:17:b6:fd:7e:15:36:97:99:fd:ca:
c7:9f:6b:51:3a:03:a7:af:10:5f:ee:b3:c0:36:64:57:62:4f:
d2:8c:9a:db:50:12:30:a0:33:54:71:ce:07:ec:65:37:ee:8d:
08:9a:f4:eb:7b:2f:ba:ce:4e:af:33:05:79:6f:3b:27:43:8f:
84:f0:95:f6:5c:7f:bf:27:ed:cc:38:a4:92:12:f1:65:82:13:
2d:ff:e5:33:dc:80:1e:0b:09:a7:d2:83:e2:f4:60:c5:96:31:
05:1a:09:da:2e:6e:ab:cd:1e:ac:83:87:91:15:92:eb:a7:c2:
2e:71:81:a2:23:bf:87:4f:87:c1:67:69:74:c2:a4:25:3b:e4:
f0:14:73:4a:f2:f3:4b:df:95:a0:c0:a7:76:00:91:da:68:dc:
ce:62:18:cb:18:da:61:15:f4:33:f0:de:20:b0:75:25:12:6e:
9a:21:99:47:34:8e:ed:6e:4a:1d:35:90:c6:52:58:d5:b0:e7:
7d:00:e2:fb:12:28:03:05:6f:95:d3:51:2b:24:bc:4a:da:7a:
0b:fe:6a:87:a7:55:30:43:d0:74:6d:4f:57:b4:de:6b:18:57:
f1:e8:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:22:34 2025 by rpki-client