Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: yvDbLkv4rysG8WKyW0TG4oVlEk5RbF2ymEO+lRtX6fE=
Subject key identifier: 5F:75:E9:7F:46:B0:70:89:09:C0:F1:6B:CF:65:7A:BB:EF:B7:8E:EC
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01985569F65B5683D87B75B0374C4FAD91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0F4E
Signing time: Tue 29 Jul 2025 09:01:04 +0000
Manifest this update: Tue 29 Jul 2025 09:01:04 +0000
Manifest next update: Wed 30 Jul 2025 09:01:04 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: lKV3I9D1bjOBA36RmNFJjK2xE0D+UrWLSglGcoETpcA=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:f6:5b:56:83:d8:7b:75:b0:37:4c:4f:ad:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jul 29 09:01:04 2025 GMT
Not After : Jul 30 09:01:04 2025 GMT
Subject: CN=5f75e97f46b0708909c0f16bcf657abbefb78eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:94:60:c8:a4:e8:e1:52:8c:3e:11:cd:e9:
20:1f:1a:ac:c9:44:73:10:27:b1:89:df:56:08:3f:
3b:c0:47:50:86:00:16:78:6f:b3:33:aa:06:cf:01:
37:fe:b3:b5:9e:66:cb:7e:8b:8a:37:5b:a6:df:52:
cc:98:db:31:c4:28:17:aa:e0:e7:6a:80:62:e1:ae:
dd:95:b9:19:eb:6c:91:95:3c:ab:9f:4a:72:bc:d9:
4d:19:51:19:71:c3:43:13:68:a1:e0:3a:ed:bc:31:
6c:66:22:3d:c9:0a:c1:8a:b5:d8:56:ae:dc:aa:53:
6d:84:22:62:fc:b3:16:5f:1e:e6:e2:49:0f:fa:c2:
07:6b:a5:e6:22:48:48:52:9a:ff:48:65:39:d6:02:
70:0d:48:21:0d:84:99:c8:14:52:65:47:96:9c:3d:
b0:9b:ad:2d:18:61:65:48:40:f0:04:81:1e:e5:7e:
47:3a:f9:87:c6:5c:90:7f:d2:d6:3b:50:97:3b:d9:
8a:f8:80:09:61:66:96:1c:75:28:93:bb:5b:9c:1c:
42:f7:65:bd:59:05:65:36:b7:ef:1c:6b:b3:b4:b8:
65:db:54:b1:a8:f3:47:47:2d:a4:de:90:16:3e:f8:
66:5e:39:6c:87:e1:6f:9a:f4:36:f6:53:a3:a6:2c:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:E9:7F:46:B0:70:89:09:C0:F1:6B:CF:65:7A:BB:EF:B7:8E:EC
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:26:fa:d0:22:07:64:e1:4d:b3:1f:06:70:fe:5b:e3:c9:
33:69:f5:68:30:8a:c1:27:ef:b8:fc:22:7d:08:c1:ea:35:10:
30:d4:41:9d:e0:4d:44:5b:e3:5b:44:cf:55:05:2d:a7:2c:9e:
fd:55:7d:15:0f:21:a4:59:55:dc:b9:24:c6:c5:e1:2d:d1:95:
6c:2d:a7:02:44:ba:a4:dc:dd:66:2f:0e:ca:6b:69:22:ae:54:
ff:00:1c:b6:34:ba:75:d8:3b:39:13:ef:00:af:1c:ec:ec:75:
c3:8b:93:f2:43:5d:d1:00:df:d2:f0:00:1b:b4:69:11:e2:b8:
f4:a6:8e:15:b8:cd:63:60:10:fd:9b:fb:6f:af:22:05:32:0b:
dd:45:89:3e:0e:44:9b:c7:de:a4:60:bd:65:f1:c6:74:08:37:
35:7f:54:88:de:ea:af:b4:55:38:01:ab:9c:15:4b:0c:b7:9e:
a7:a0:5b:06:57:e7:8d:49:68:07:19:86:9a:83:c7:68:45:a5:
f6:16:83:df:8f:62:3b:b4:31:2d:85:67:67:27:c2:93:9a:50:
1b:ef:d6:2f:4f:e9:ed:9d:c9:e0:a0:17:b3:b0:aa:eb:26:0a:
7e:45:e4:da:98:43:bd:81:52:2d:98:e9:0b:0c:34:ed:a0:f7:
76:f0:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:17 2025 by rpki-client