Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: 1gHIthX/j5LDEAZFXG0oHvmqxGv2FR+9bFE4OaQ3tfg=
Subject key identifier: E9:E6:71:B6:08:3E:A3:FB:22:D0:D2:7A:D8:50:01:F6:A4:86:9E:9A
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 01984A41AF4819FD4CD254B95E7C940F3BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:01:15 +0000
Manifest this update: Sun 27 Jul 2025 05:01:15 +0000
Manifest next update: Mon 28 Jul 2025 05:01:15 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: 0sY6r5EmzoyJvieLscpTCmpvLSU/6AB3yANQFr2yd7k=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:af:48:19:fd:4c:d2:54:b9:5e:7c:94:0f:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jul 27 05:01:15 2025 GMT
Not After : Jul 28 05:01:15 2025 GMT
Subject: CN=e9e671b6083ea3fb22d0d27ad85001f6a4869e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:82:7a:15:f3:fc:07:4e:06:dc:c3:2a:00:
b3:c2:0f:77:c3:43:49:d7:34:b7:ff:f8:c6:f1:af:
c9:00:3c:87:4b:84:e2:d6:9d:9c:4c:3a:9b:64:57:
24:94:17:1c:4d:e4:93:93:7f:fe:74:84:b7:38:c0:
af:c2:bb:8b:4f:b1:43:ff:09:ae:45:02:f4:1f:80:
24:0a:7d:db:db:60:32:a5:78:82:f0:a2:ee:62:21:
c3:16:95:88:8d:50:a6:bd:15:f4:27:5c:ed:79:9f:
da:9a:da:dc:2d:13:85:60:f3:09:b5:56:27:aa:83:
99:12:c3:5a:05:5d:31:f9:a2:79:4b:c3:02:bf:ad:
fc:ef:d8:75:0e:da:d7:42:37:61:11:de:15:2c:a3:
95:c7:27:62:12:9c:f4:c1:a0:11:a6:12:de:76:e3:
3b:7f:e6:0a:e0:03:3a:a1:4c:38:a2:cd:37:07:6e:
25:7a:30:69:d3:d7:6a:e1:4d:ce:71:ff:f5:ff:83:
e5:cb:10:97:7b:0d:0e:42:a9:b8:de:82:81:63:7c:
96:19:d5:d7:5f:12:5f:5f:48:e6:fd:7c:c0:2d:eb:
11:79:92:12:d8:e0:ff:3a:e6:67:44:4d:41:b1:71:
e5:0d:3d:89:76:52:cf:8e:d8:cd:35:97:fb:c5:03:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:71:B6:08:3E:A3:FB:22:D0:D2:7A:D8:50:01:F6:A4:86:9E:9A
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:cd:46:1a:9d:f8:be:47:ff:51:9a:38:85:ec:76:12:a2:
9f:b2:f1:91:56:95:ff:55:8d:59:3e:b3:5e:4f:a3:b9:03:04:
f8:ec:23:99:f7:4f:bc:97:fb:c8:45:15:43:90:e3:b8:8b:84:
43:81:6f:a4:71:51:56:a8:c6:1a:8e:7c:7b:d4:fa:23:4b:a9:
a0:3e:a7:af:59:61:e1:2a:2a:ee:60:e2:62:39:f4:ad:6d:a3:
1a:46:8f:96:ad:fa:64:8a:ab:5d:e9:aa:7f:a2:f3:4a:5f:54:
1a:19:c5:cf:e7:0a:f2:4c:44:ad:7b:27:33:f2:bf:f3:fe:39:
11:d2:05:8e:23:5a:3c:9d:c5:92:91:97:67:30:04:d5:4f:22:
43:44:26:93:db:4a:b9:c1:e9:fd:e7:2d:1d:a3:9f:96:1d:8d:
45:5b:35:aa:08:aa:a9:88:43:6c:6b:e8:2a:bc:7c:b7:83:ae:
9d:71:4a:d9:48:06:65:96:f6:1d:a3:36:18:3f:89:b4:56:f1:
18:07:ce:05:c6:11:6c:69:4c:44:fe:cb:8e:46:6c:1e:bd:50:
53:41:05:75:16:ba:33:d4:3b:50:5e:10:01:f7:10:d9:a4:af:
b3:1b:99:09:25:70:05:fc:51:f8:f0:20:fb:b8:24:34:e8:da:
a6:97:46:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQa9IGf1M0lS5XnyUDzvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTdmOTA3MmU4YjMwMDRiYTA4NjgxZmIxZWY4OGMwM2Y2
MjBhODgwHhcNMjUwNzI3MDUwMTE1WhcNMjUwNzI4MDUwMTE1WjAzMTEwLwYDVQQD
EyhlOWU2NzFiNjA4M2VhM2ZiMjJkMGQyN2FkODUwMDFmNmE0ODY5ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOyCehXz/AdOBtzDKgCzwg93w0NJ
1zS3//jG8a/JADyHS4Ti1p2cTDqbZFcklBccTeSTk3/+dIS3OMCvwruLT7FD/wmu
RQL0H4AkCn3b22AypXiC8KLuYiHDFpWIjVCmvRX0J1zteZ/amtrcLROFYPMJtVYn
qoOZEsNaBV0x+aJ5S8MCv63879h1DtrXQjdhEd4VLKOVxydiEpz0waARphLeduM7
f+YK4AM6oUw4os03B24lejBp09dq4U3Ocf/1/4PlyxCXew0OQqm43oKBY3yWGdXX
XxJfX0jm/XzALesReZIS2OD/OuZnRE1BsXHlDT2JdlLPjtjNNZf7xQNiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnmcbYIPqP7ItDSethQAfakhp6aMB8GA1UdIwQY
MBaAFASn+QcuizAEughoH7HviMA/YgqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYt
ZTA1YWE1MTNlNWRkLzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYtZTA1YWE1MTNlNWRk
LzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFrNRhqd
+L5H/1GaOIXsdhKin7LxkVaV/1WNWT6zXk+juQME+OwjmfdPvJf7yEUVQ5DjuIuE
Q4FvpHFRVqjGGo58e9T6I0upoD6nr1lh4Soq7mDiYjn0rW2jGkaPlq36ZIqrXemq
f6LzSl9UGhnFz+cK8kxErXsnM/K/8/45EdIFjiNaPJ3FkpGXZzAE1U8iQ0Qmk9tK
ucHp/ectHaOflh2NRVs1qgiqqYhDbGvoKrx8t4OunXFK2UgGZZb2HaM2GD+JtFbx
GAfOBcYRbGlMRP7LjkZsHr1QU0EFdRa6M9Q7UF4QAfcQ2aSvsxuZCSVwBfxR+PAg
+7gkNOjappdGjw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:49 2025 by rpki-client