Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: 34hrgVBFoD0SbfFpv6IYDJ1RSIi0YfQ6UY9XJvQ+Ib4=
Subject key identifier: D6:D9:EE:7B:71:08:9D:1E:3B:C7:B4:12:75:F0:5C:82:BB:66:32:C9
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019A71135BE518437EA3A033F805A5C52EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: yuzwSR/75YFcbEp1Yo/JbgUuxYNYMJBy46Tv5B/lgG8=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5b:e5:18:43:7e:a3:a0:33:f8:05:a5:c5:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=d6d9ee7b71089d1e3bc7b41275f05c82bb6632c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:43:a3:30:bd:ae:78:18:44:2a:fc:0f:48:
85:49:e3:fd:2e:bb:5c:f5:b6:d8:73:e8:67:86:84:
99:bc:32:86:d3:a2:43:02:fd:d7:74:84:49:36:2f:
5e:bc:b7:5c:a2:5a:b0:f6:01:49:ca:8d:2a:ce:dc:
ab:c4:bf:bc:ef:f2:5b:24:cf:16:2d:50:f2:5f:62:
4b:1d:58:20:b0:ec:fc:b1:23:a5:c8:ea:87:3f:10:
9b:aa:5c:45:48:29:02:7e:f4:fe:11:f0:f9:af:4e:
24:e0:f0:34:c5:bb:36:3b:a2:36:bc:5b:fe:8d:a8:
b5:c3:83:d2:7e:3e:de:4f:b1:0b:4b:7e:ec:2d:02:
4d:0b:1a:3b:d9:e7:42:6e:7a:04:75:81:af:3f:a2:
9b:df:86:0a:63:92:a9:3e:f1:15:64:da:06:de:3c:
10:13:6f:67:a8:f2:5c:90:5f:eb:e0:ce:87:66:86:
02:be:a3:0c:30:df:b5:8e:db:7b:02:bc:01:b3:5c:
ab:97:59:e9:39:18:03:bc:f0:15:d3:8e:2a:db:e7:
45:77:1c:0b:a9:12:bd:ee:39:2a:9f:bc:cc:7d:a8:
b1:51:68:76:bf:b6:b6:ee:eb:e0:c4:45:77:fd:50:
17:d1:f6:ad:b1:ec:f4:4e:b1:0a:8e:d6:02:ec:95:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:EE:7B:71:08:9D:1E:3B:C7:B4:12:75:F0:5C:82:BB:66:32:C9
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:67:b9:5c:49:ea:39:e4:8d:30:c5:67:83:15:90:5f:38:
c4:0c:08:15:dd:ad:ad:a8:59:f5:e1:e0:e2:81:9b:39:99:02:
85:4e:8a:80:55:91:06:3e:72:3f:c2:6a:0f:df:c9:54:fd:c4:
03:08:6e:d9:c7:24:a3:14:82:36:bd:6b:49:04:1f:a0:d7:15:
d1:74:3d:2d:0f:a1:5a:b0:68:06:bd:ab:f6:90:f5:04:dd:cd:
9c:12:ed:2e:2d:f6:6a:ce:17:22:74:3c:5a:0b:1b:d5:b4:ff:
c2:8a:0b:ee:51:0e:dc:54:d2:56:8c:a8:9e:94:1f:fa:df:ec:
75:b1:97:a3:d6:18:b6:31:36:14:68:1d:89:c5:d9:5b:ee:b5:
7f:b1:6f:f7:91:11:fa:48:89:66:95:38:80:41:ff:9e:c1:43:
1d:cc:0d:a2:5a:78:f1:c8:85:3b:aa:0e:85:66:62:b9:79:7f:
62:f6:45:18:b8:cf:d6:a1:85:f9:61:f2:57:23:76:f9:45:71:
28:28:9a:5d:f3:3e:d3:a0:65:89:97:54:7b:6d:91:df:a1:3d:
25:c0:90:0c:a3:9c:f0:55:33:a4:46:ff:15:18:63:74:f3:1c:
49:50:6d:65:44:a6:72:d1:5e:5d:8e:9c:23:fd:76:96:ff:c6:
fe:37:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:49 2025 by rpki-client