Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: QLa8i5sV1pDxdMXYhSl0RZ37qr12BslMPiuQaO7PFx0=
Subject key identifier: FB:4B:15:D2:35:B0:A3:93:CF:77:EE:8A:5B:09:F9:CD:C7:38:7B:A0
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019748C2F8CEDC1A364C318303F83CE734B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:26 +0000
Manifest this update: Sat 07 Jun 2025 05:00:26 +0000
Manifest next update: Sun 08 Jun 2025 05:00:26 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: WOY1XbiokRqcQ7iA9JzXHJJHF/HqSTASojydbTnb2Xs=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:f8:ce:dc:1a:36:4c:31:83:03:f8:3c:e7:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Jun 7 05:00:26 2025 GMT
Not After : Jun 8 05:00:26 2025 GMT
Subject: CN=fb4b15d235b0a393cf77ee8a5b09f9cdc7387ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:25:7d:1c:95:d1:6b:43:bc:f1:f5:b8:49:
d4:31:dd:f1:60:30:c3:03:79:8a:92:13:b9:64:4e:
a4:aa:b0:b8:3f:a9:52:d0:85:83:1b:32:d0:42:79:
d2:98:4e:67:70:da:87:a4:0e:11:de:c9:44:9e:64:
19:94:cc:8a:89:07:b0:27:d6:7b:8b:da:e2:cd:2d:
37:29:91:86:1d:e4:8e:77:7d:b5:0b:7a:bb:a2:a8:
60:2e:60:01:ac:fa:1d:71:b9:70:61:5c:cb:9d:0d:
88:9d:d8:24:e1:90:d3:cf:a4:57:b7:e6:38:6d:1b:
ce:ba:7c:d1:b9:ca:cf:eb:63:40:33:42:78:18:ff:
18:a0:46:87:41:6f:6e:89:22:51:a5:21:d5:0b:85:
a6:98:27:8a:40:e9:ee:bb:71:cf:9b:81:3b:62:2f:
c4:a3:82:a5:6d:87:71:48:b2:55:8d:33:fc:c8:cb:
e3:9b:34:79:ea:73:08:ee:98:ed:ea:72:f8:11:02:
f2:13:c3:e2:98:86:4b:61:18:24:cd:94:28:73:a9:
04:29:c7:7e:1e:27:59:26:06:88:1f:63:8b:8c:0c:
f7:63:8f:b7:04:9c:9b:c5:85:88:33:a9:7d:a6:7c:
dd:87:3a:95:98:27:5f:8b:e5:1b:49:ee:07:be:3b:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:15:D2:35:B0:A3:93:CF:77:EE:8A:5B:09:F9:CD:C7:38:7B:A0
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cb:8b:a4:82:ad:e8:15:e3:8b:35:43:12:aa:08:ec:b8:aa:
51:d1:8c:bc:47:e3:8b:c4:47:cf:99:a9:31:24:6a:95:f2:a7:
cd:d7:52:39:26:8a:77:e4:4b:85:04:e4:a9:4c:53:aa:a0:c7:
00:f6:f3:22:f5:d1:80:35:c3:5a:65:69:f4:a6:28:bf:f0:32:
91:08:26:14:7f:6e:da:26:97:e0:f4:1e:b5:cf:bc:d3:db:0b:
16:48:e0:2a:28:d6:2a:b5:d2:79:d9:06:9a:87:bb:0e:20:a9:
68:02:91:54:54:8e:6c:88:9f:80:fd:a5:22:06:5d:42:9c:cc:
e2:15:85:41:43:4f:58:0f:8d:f2:ba:08:85:1d:66:2b:ca:e8:
be:77:39:76:cc:0a:8c:41:d8:a1:f3:1d:44:fa:fc:01:65:5c:
d2:90:cc:4e:8b:bd:b5:17:11:cb:db:f5:b5:e9:40:40:78:4f:
33:de:fa:58:1b:68:b0:d2:03:c4:66:36:8f:ea:60:d3:a8:97:
ed:7c:42:f6:31:2d:d4:4a:88:6d:e0:49:9b:94:6a:72:8e:06:
3a:11:a8:72:a1:e1:48:f2:36:13:42:cb:b7:1f:44:4b:fe:72:
f8:6a:ec:21:12:05:72:f9:cd:f6:45:6f:2b:3c:09:0c:c4:54:
22:be:2f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwvjO3Bo2TDGDA/g85zSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5
OTc4OTgwHhcNMjUwNjA3MDUwMDI2WhcNMjUwNjA4MDUwMDI2WjAzMTEwLwYDVQQD
EyhmYjRiMTVkMjM1YjBhMzkzY2Y3N2VlOGE1YjA5ZjljZGM3Mzg3YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TElfRyV0WtDvPH1uEnUMd3xYDDD
A3mKkhO5ZE6kqrC4P6lS0IWDGzLQQnnSmE5ncNqHpA4R3slEnmQZlMyKiQewJ9Z7
i9rizS03KZGGHeSOd321C3q7oqhgLmABrPodcblwYVzLnQ2Indgk4ZDTz6RXt+Y4
bRvOunzRucrP62NAM0J4GP8YoEaHQW9uiSJRpSHVC4WmmCeKQOnuu3HPm4E7Yi/E
o4KlbYdxSLJVjTP8yMvjmzR56nMI7pjt6nL4EQLyE8PimIZLYRgkzZQoc6kEKcd+
HidZJgaIH2OLjAz3Y4+3BJybxYWIM6l9pnzdhzqVmCdfi+UbSe4HvjsdIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtLFdI1sKOTz3fuilsJ+c3HOHugMB8GA1UdIwQY
MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt
M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1
LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsuLpIKt
6BXjizVDEqoI7LiqUdGMvEfji8RHz5mpMSRqlfKnzddSOSaKd+RLhQTkqUxTqqDH
APbzIvXRgDXDWmVp9KYov/AykQgmFH9u2iaX4PQetc+809sLFkjgKijWKrXSedkG
moe7DiCpaAKRVFSObIifgP2lIgZdQpzM4hWFQUNPWA+N8roIhR1mK8rovnc5dswK
jEHYofMdRPr8AWVc0pDMTou9tRcRy9v1telAQHhPM976WBtosNIDxGY2j+pg06iX
7XxC9jEt1EqIbeBJm5Rqco4GOhGocqHhSPI2E0LLtx9ES/5y+GrsIRIFcvnN9kVv
KzwJDMRUIr4vuw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:05 2025 by rpki-client