Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: pTuDhIIxRdjFfw5uT3HsfHjMNPAfb5kHJFw7MbypFds=
Subject key identifier: 05:54:35:18:83:43:02:37:78:AB:D9:9C:7A:5E:37:3B:B0:7C:9D:BD
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 0197518FC5C31026831EA091D6B76B9837A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 22:01:06 +0000
Manifest this update: Sun 08 Jun 2025 22:01:06 +0000
Manifest next update: Mon 09 Jun 2025 22:01:06 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: KSM9+y0/7SttjS26Kp/jarQJ6Tb0v+RNACrOw0wHg9o=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:c5:c3:10:26:83:1e:a0:91:d6:b7:6b:98:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jun 8 22:01:06 2025 GMT
Not After : Jun 9 22:01:06 2025 GMT
Subject: CN=055435188343023778abd99c7a5e373bb07c9dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:82:16:f0:60:68:e0:f3:58:b9:d1:1d:54:
2f:3e:3a:25:71:b3:a2:f5:da:1a:96:12:e4:e4:9b:
c5:a5:32:47:f7:f1:36:4e:07:34:a1:f4:25:c9:58:
a5:4f:2d:92:c5:a3:62:a2:b6:31:06:cc:3c:81:ef:
ac:56:7b:cc:4e:3d:a9:4b:dc:90:71:58:d7:ef:69:
42:6f:51:de:dd:b7:36:11:cc:c7:d2:2c:22:25:3b:
0b:35:df:5a:0c:54:22:89:db:87:50:d4:55:07:04:
5e:91:b8:28:6c:14:f3:86:47:2d:6f:4e:8a:8f:45:
fc:d1:37:80:ff:91:c4:92:25:bf:77:0d:12:d0:b2:
9a:49:db:39:3f:b4:ee:11:fa:1f:b2:b3:8a:81:36:
d0:cd:ee:5b:94:ac:67:a2:bf:ec:c5:2a:2b:69:8f:
29:ab:aa:6c:2c:5a:52:0a:39:6f:e9:10:41:76:cb:
a1:f2:4d:bb:22:d8:ab:0f:68:7a:3a:3a:84:29:d7:
2c:df:b4:f5:3b:be:a9:b6:c7:0e:63:cd:a8:e5:59:
5d:5d:69:82:9e:74:20:cc:43:23:21:4f:a4:02:ee:
78:12:29:cf:61:1b:17:47:49:81:fe:8c:cd:e3:0a:
37:1e:f8:9a:44:9b:68:4d:3c:3c:fb:33:aa:bb:76:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:54:35:18:83:43:02:37:78:AB:D9:9C:7A:5E:37:3B:B0:7C:9D:BD
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:6d:af:d9:b8:94:43:48:77:e7:ea:b9:5f:bb:b0:4d:42:
84:7a:3d:d2:15:28:a3:f3:a0:78:e3:ff:0d:a6:e2:4e:39:d1:
7b:37:dc:18:fb:aa:95:11:77:89:7d:ea:93:f2:21:38:ee:b2:
b0:b3:72:94:d9:0f:e2:84:73:e2:ff:6e:91:a0:aa:68:b2:c8:
70:55:6a:ca:17:e5:7d:7c:db:16:12:0c:30:d3:32:21:22:1e:
83:b8:53:cf:f6:40:7a:18:0b:80:25:83:af:fd:f4:69:78:49:
27:e1:20:3d:98:c6:3b:4b:42:8e:0e:6b:b0:fe:95:3c:0d:77:
87:3f:b3:8d:16:c0:90:e7:a3:ce:6a:ea:f3:f2:6e:4b:94:94:
40:d7:5c:50:2d:9b:89:0a:c7:2e:8a:8a:b4:81:5d:6f:09:af:
ac:58:b0:5b:b3:0b:6a:93:51:77:62:38:5d:ff:af:d1:c4:60:
61:af:56:09:21:9f:9a:71:64:5b:de:f7:10:ba:83:d1:94:14:
d9:4b:aa:27:19:8a:64:ab:c1:78:04:2e:94:71:ef:67:0d:b5:
79:35:47:1e:26:a2:7b:49:01:93:54:ae:9e:10:df:2f:f2:8c:
f1:0e:16:37:cf:e2:6a:53:f5:99:f1:7d:24:2d:97:65:83:73:
87:1d:ea:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRj8XDECaDHqCR1rdrmDenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjUwNjA4MjIwMTA2WhcNMjUwNjA5MjIwMTA2WjAzMTEwLwYDVQQD
EygwNTU0MzUxODgzNDMwMjM3NzhhYmQ5OWM3YTVlMzczYmIwN2M5ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFKCFvBgaODzWLnRHVQvPjolcbOi
9doalhLk5JvFpTJH9/E2Tgc0ofQlyVilTy2SxaNiorYxBsw8ge+sVnvMTj2pS9yQ
cVjX72lCb1He3bc2EczH0iwiJTsLNd9aDFQiiduHUNRVBwRekbgobBTzhkctb06K
j0X80TeA/5HEkiW/dw0S0LKaSds5P7TuEfofsrOKgTbQze5blKxnor/sxSoraY8p
q6psLFpSCjlv6RBBdsuh8k27ItirD2h6OjqEKdcs37T1O76ptscOY82o5VldXWmC
nnQgzEMjIU+kAu54EinPYRsXR0mB/ozN4wo3HviaRJtoTTw8+zOqu3aeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVUNRiDQwI3eKvZnHpeNzuwfJ29MB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrZtr9m4
lENId+fquV+7sE1ChHo90hUoo/OgeOP/DabiTjnRezfcGPuqlRF3iX3qk/IhOO6y
sLNylNkP4oRz4v9ukaCqaLLIcFVqyhflfXzbFhIMMNMyISIeg7hTz/ZAehgLgCWD
r/30aXhJJ+EgPZjGO0tCjg5rsP6VPA13hz+zjRbAkOejzmrq8/JuS5SUQNdcUC2b
iQrHLoqKtIFdbwmvrFiwW7MLapNRd2I4Xf+v0cRgYa9WCSGfmnFkW973ELqD0ZQU
2UuqJxmKZKvBeAQulHHvZw21eTVHHiaie0kBk1SunhDfL/KM8Q4WN8/ialP1mfF9
JC2XZYNzhx3qvA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:12:11 2025 by rpki-client