Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: EDVpypQ7QVb2k4TGnI1Lb0IFY2bdlRyWKp3IitvcST0=
Subject key identifier: 65:E6:A0:A2:05:5F:7F:DE:04:A2:90:F8:DF:6B:96:14:9A:F9:E7:35
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 01984A78270E7E9A767B90F5C613107F8AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0AE6
Signing time: Sun 27 Jul 2025 06:00:44 +0000
Manifest this update: Sun 27 Jul 2025 06:00:44 +0000
Manifest next update: Mon 28 Jul 2025 06:00:44 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: Zro/gWVHteXf5MYkhGzdtyiLtYUYm/KxCvZDN3JHYqw=)
2: dShe1ipT6-Y_-edVr4eNtxtPKAo.roa (hash: 34QucPlafnV+iMZk3j4FDiUJFtGuS1f17YL6xBvVoIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:27:0e:7e:9a:76:7b:90:f5:c6:13:10:7f:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jul 27 06:00:44 2025 GMT
Not After : Jul 28 06:00:44 2025 GMT
Subject: CN=65e6a0a2055f7fde04a290f8df6b96149af9e735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:7d:44:68:35:18:b0:51:21:f6:c9:20:7e:
b0:74:40:3b:49:5b:6b:2f:08:c4:b8:75:9e:51:8b:
4c:24:65:26:c8:1f:2d:e4:c7:aa:f9:ca:eb:10:da:
1a:16:1f:cc:e4:d0:5f:14:f9:6c:ab:32:16:eb:08:
0d:c2:9c:f3:5d:ec:35:d3:60:6d:17:fb:14:7b:ce:
22:c8:15:72:51:e7:2d:a2:be:83:37:8e:1c:8c:16:
96:94:49:cf:a2:20:c0:df:4d:2c:77:c0:9f:7a:eb:
f2:a8:af:c1:6d:c9:35:bf:ac:ca:51:43:f9:1c:f4:
29:ca:a4:ad:3b:3f:b7:ea:03:e9:c9:80:58:f2:0e:
14:a8:a6:4e:ad:e6:7a:68:70:d3:4c:49:8a:7b:df:
f2:e3:e2:d4:cf:87:21:b1:a3:51:5f:4d:db:df:14:
66:41:dd:8b:aa:b8:0e:2a:03:8c:c4:bd:29:6c:6f:
b2:f3:33:a4:ca:58:e9:24:b7:b4:06:57:d1:a4:e1:
ec:fb:e4:a8:d9:e8:b9:80:4f:45:09:0f:26:6e:61:
fd:0c:b0:a9:53:ba:10:2c:7b:47:6f:d2:79:b0:ea:
c2:b0:1c:1b:cf:8d:dd:28:41:dd:26:68:65:61:9e:
99:79:b9:49:38:18:73:c9:0d:5e:7d:cd:9a:bb:5f:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:A0:A2:05:5F:7F:DE:04:A2:90:F8:DF:6B:96:14:9A:F9:E7:35
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:44:03:93:d9:f1:c4:b7:0a:e6:54:44:0d:df:f4:e7:8c:
cd:a1:e4:49:d9:7c:ba:ed:74:89:a7:cf:a3:8f:c4:d9:25:89:
cb:84:a4:4a:ac:96:82:2a:ab:a8:c6:6a:d6:ee:84:38:ef:33:
e0:26:f8:79:5c:02:8a:ee:62:88:92:c2:9a:fa:ce:7c:84:7a:
00:c1:c8:76:25:fa:f7:ee:2e:35:d4:15:03:10:cf:2c:fa:36:
9b:f5:4f:f3:12:35:58:61:8f:f1:59:a7:8b:b2:48:e0:c7:fe:
c2:44:52:08:75:44:bd:b1:ef:9e:60:a0:4a:f9:18:16:99:34:
71:48:67:81:7b:73:21:07:af:f8:20:1e:d0:c2:8d:64:da:7b:
13:4b:de:ed:cd:22:67:c2:eb:bb:18:cd:45:31:50:46:2d:e3:
84:d4:ff:70:67:47:f1:e8:7a:f0:40:c0:c4:31:88:90:8e:7c:
e5:22:a6:3f:a3:2b:1c:47:f1:da:30:eb:9d:05:fa:12:46:3a:
4f:b7:07:09:a5:5d:96:f7:ea:69:9f:e2:ce:22:e5:ea:74:60:
f5:a1:6e:e6:05:b1:5f:97:73:32:69:d3:51:ef:38:b9:68:97:
de:d6:49:d0:04:9f:82:ec:ca:44:30:7a:e5:47:9b:f5:90:b0:
4d:02:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:32 2025 by rpki-client