Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: 2rk0D+RU4yxU/k0wAn6ADgPawlHp5p4319L8ZAapkmA=
Subject key identifier: 79:9B:9E:71:8F:A3:A6:8A:DE:FE:62:22:68:4D:5D:DB:07:72:AF:82
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 01993A26B584D374EDA248C1D0158FC948B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 19:00:39 +0000
Manifest this update: Thu 11 Sep 2025 19:00:39 +0000
Manifest next update: Fri 12 Sep 2025 19:00:39 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: Z63zfRUHGBumBaakBQtpHG3Z06p8aQjVErLlqw2SCuo=)
2: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:26:b5:84:d3:74:ed:a2:48:c1:d0:15:8f:c9:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Sep 11 19:00:39 2025 GMT
Not After : Sep 12 19:00:39 2025 GMT
Subject: CN=799b9e718fa3a68adefe6222684d5ddb0772af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:21:ac:5f:0e:96:ac:d4:cb:7c:26:a7:dc:
de:fb:15:cd:97:19:9e:48:23:5f:01:cf:32:c5:84:
5a:36:e2:34:32:3c:01:43:83:56:1f:78:91:98:25:
26:33:3d:46:c4:25:04:51:a0:c1:a9:6c:0b:b9:31:
f8:68:b9:98:1b:ab:72:5c:61:30:48:19:0d:eb:93:
f1:f9:70:db:79:32:3c:14:34:5d:66:ca:9d:cd:00:
4b:3d:0b:29:42:fb:7c:f2:8e:75:64:9a:c0:b1:56:
8f:db:2f:0c:f6:5c:b2:31:9d:56:e3:16:d1:87:74:
ce:e2:a5:60:bd:f5:c5:69:9e:d8:da:97:bd:3f:ec:
f9:9e:f0:00:be:c4:0a:2e:7f:f4:d2:2d:54:04:1b:
3b:24:e7:f5:a4:6c:fa:37:42:9f:19:e1:33:5f:c0:
6f:ea:85:84:fc:89:17:00:11:09:2a:6f:e3:85:34:
72:4d:3b:b4:7f:6f:fa:8d:b8:a2:c9:a7:b5:7b:08:
3c:5b:49:93:79:fd:2c:2a:b1:4e:c5:2a:50:bb:e8:
2a:8a:a0:5f:a8:ae:e9:f5:c1:61:4f:96:26:ba:45:
df:e2:a5:68:81:59:f7:7b:13:c3:96:48:6e:65:03:
76:6f:4d:25:2c:55:50:b2:b9:e1:73:b5:a8:c3:f2:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:9E:71:8F:A3:A6:8A:DE:FE:62:22:68:4D:5D:DB:07:72:AF:82
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:10:0d:f8:85:14:c8:21:58:5b:b4:0b:7c:a1:a2:81:aa:
0e:29:2e:19:71:86:0c:7c:96:0f:e4:49:ec:97:ba:7d:d4:42:
d8:4f:c8:ae:7b:e8:5f:ee:2c:6b:f0:9f:e0:2b:2a:f1:28:65:
cb:74:65:af:be:ae:4f:7b:4b:61:7c:bb:72:85:c7:cc:8f:25:
c7:d6:77:10:91:d3:e1:b2:5c:47:fc:46:62:41:af:ad:b2:03:
c3:34:b4:b4:6f:85:da:9b:55:f8:e9:07:82:f2:46:10:e4:91:
f7:34:97:09:3f:88:cf:40:31:33:fa:6f:7c:33:1b:f8:19:65:
4b:70:25:b2:f1:f9:b5:14:d2:26:cd:47:52:4a:ee:8e:45:30:
32:9b:0c:5a:d8:89:37:72:5d:13:55:7d:4d:3d:dc:75:44:66:
27:92:36:1f:ed:b5:33:73:9a:b5:74:36:4d:a8:4b:73:27:51:
40:b5:1b:39:aa:2b:ae:ec:35:e3:e6:44:f5:51:61:e7:c7:49:
e0:54:66:23:12:dc:e1:91:c0:80:6c:ca:ce:4a:8e:6c:65:1f:
d6:73:4a:50:71:18:f4:c3:2d:b1:66:d8:cc:91:dc:84:b9:33:
97:fc:93:bd:71:c4:91:ab:2c:34:2e:77:fa:f8:52:9e:ef:87:
b4:a1:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 22:47:41 2025 by rpki-client