Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: GTuRxzWDVaCwq1kYRUW4l8S7MrBqC6VsIk8Ft6z5hwE=
Subject key identifier: 92:F4:D8:27:64:04:A1:A7:7C:CA:C4:E0:8C:90:85:F2:09:89:B8:AB
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019923D636F484025580E1117CEABC3FED2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 11:01:05 +0000
Manifest this update: Sun 07 Sep 2025 11:01:05 +0000
Manifest next update: Mon 08 Sep 2025 11:01:05 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: wdyad+gz+Q+nlNsmWZyRuVTD5menofapMbZkVYFXw34=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:36:f4:84:02:55:80:e1:11:7c:ea:bc:3f:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Sep 7 11:01:05 2025 GMT
Not After : Sep 8 11:01:05 2025 GMT
Subject: CN=92f4d8276404a1a77ccac4e08c9085f20989b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:9c:d5:1d:0c:35:a5:12:97:77:7a:ee:00:
66:1a:e6:c1:50:6e:c5:92:40:c1:a4:ce:4c:b6:43:
ea:58:0e:3b:9f:52:15:ff:c6:2e:58:41:f2:5e:94:
89:b1:35:44:3a:2c:b2:76:8a:b4:56:08:69:aa:69:
15:37:7d:58:39:65:c7:2c:e6:b7:32:1b:93:b7:13:
f9:b2:a6:8f:61:66:7f:32:b2:de:e5:51:b6:f1:e2:
0c:e9:8e:7f:33:e7:a0:c5:18:38:60:9f:66:b3:20:
02:cf:ea:e5:48:48:3a:91:0e:19:8f:84:a9:fc:45:
52:2d:a8:3b:aa:0f:e4:5d:cd:50:45:04:82:21:6f:
39:e0:1b:ff:1f:72:94:43:37:d5:df:e7:2a:89:b4:
de:bd:af:8b:25:d2:9c:41:6d:3f:3a:31:59:7a:a3:
f9:87:8c:8b:d7:59:2c:0c:03:a5:23:d2:53:1e:87:
b9:e3:86:ad:51:e2:f1:b0:ad:15:b0:d4:4d:ea:8d:
95:5d:1d:a4:9d:ae:5e:b6:fb:64:04:a0:f9:af:46:
53:69:eb:28:11:78:79:5f:0c:95:a0:9b:5d:db:33:
db:63:85:61:89:fb:14:90:c8:ca:0b:d9:32:44:b1:
86:f2:da:ba:db:db:77:7e:76:98:fc:3b:0e:de:3d:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:D8:27:64:04:A1:A7:7C:CA:C4:E0:8C:90:85:F2:09:89:B8:AB
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:4c:8a:d9:cb:70:9c:47:5e:1f:81:f0:f3:a9:f8:e5:0c:
18:42:f5:78:5d:6c:56:08:35:be:7b:b1:6b:2b:ab:8f:5c:be:
24:01:d6:1e:5d:bf:cd:bd:bd:ce:39:2e:8a:1a:9f:55:26:30:
60:2d:7d:fb:a2:c7:a7:b1:e7:a7:f9:04:06:c1:56:80:a3:06:
93:3c:10:a2:98:3a:5f:36:a2:02:bd:c2:6f:f8:bc:81:c5:16:
5a:5e:e0:1c:41:d0:82:33:17:b9:b8:cb:d7:44:8e:06:e1:97:
0e:83:5c:88:5c:9d:bf:b6:cc:33:d7:65:d3:02:b5:69:54:0f:
ca:22:fc:41:93:c4:56:71:02:49:10:e6:6e:43:7a:48:0e:d4:
12:78:93:cc:36:f7:c9:1e:52:86:9f:f8:0a:a8:4d:9e:66:eb:
37:e0:73:12:76:3a:33:96:87:17:cc:0e:96:ac:66:86:80:f6:
a3:0f:92:96:b7:9c:75:b6:73:f8:ac:4a:0b:97:4f:5e:89:42:
29:22:59:49:11:96:8f:35:ac:c6:09:ae:ac:f9:0d:a3:ce:78:
91:b1:5f:d6:75:e9:d7:d9:82:fe:80:61:1b:d8:a5:54:3c:1d:
73:10:17:fe:29:51:61:63:13:fe:4b:6c:87:94:3d:5b:85:53:
46:db:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:41 2025 by rpki-client