Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: xfIo62pbWhXFFSIbIri+wPN1NgqRA685sqPe3Nof2v0=
Subject key identifier: 70:11:BA:36:A8:E5:06:AA:E7:94:E7:A6:44:45:FA:FF:11:9A:50:83
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 019748C330B9BD51F620EC9DE460125BCD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 1259
Signing time: Sat 07 Jun 2025 05:00:40 +0000
Manifest this update: Sat 07 Jun 2025 05:00:40 +0000
Manifest next update: Sun 08 Jun 2025 05:00:40 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: O1jFCUSec5Eh5p4eaL7wvIo8atq+nAa9ACZBJJwWk5I=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:30:b9:bd:51:f6:20:ec:9d:e4:60:12:5b:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jun 7 05:00:40 2025 GMT
Not After : Jun 8 05:00:40 2025 GMT
Subject: CN=7011ba36a8e506aae794e7a64445faff119a5083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:91:64:73:f6:3a:bc:36:90:e3:78:33:b4:
63:8d:ec:7d:26:e3:9d:fb:ba:e7:2a:1f:57:ae:3c:
de:f7:86:ee:18:93:a6:2c:05:d8:87:d7:35:70:b2:
5f:22:57:8b:dc:63:38:ec:2a:5f:20:77:df:7f:7c:
40:34:00:1b:37:c8:4c:e5:b8:5c:d6:02:77:8a:f9:
49:5a:b2:52:b9:cf:57:29:5e:3a:50:c0:88:72:da:
ff:42:9b:90:03:fe:26:c9:d9:cb:e6:58:c5:5c:b9:
1c:be:cd:70:a0:91:65:c2:d9:ff:83:8d:3a:1c:d0:
ba:68:49:ae:3c:86:6a:0a:5f:97:fd:2f:ca:a7:d1:
a4:ef:8a:6b:45:9d:58:2d:57:68:81:2b:bd:ad:c5:
80:09:f5:c0:83:7b:67:05:ec:24:52:37:28:57:7e:
2c:1b:57:15:20:c1:cb:24:a1:ee:a8:cb:ec:c0:73:
3e:ea:b3:6f:4e:74:87:5a:d0:cf:a3:40:db:22:f6:
62:95:bb:3f:90:e8:be:8f:64:76:77:24:bb:19:18:
b6:f0:7b:92:fb:4a:3d:b8:06:08:2d:de:a5:8b:76:
56:55:2f:b1:73:4a:81:1d:21:fa:04:be:71:39:99:
a2:5b:08:e8:7b:b0:6c:1f:65:d2:53:5f:a7:64:5a:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:BA:36:A8:E5:06:AA:E7:94:E7:A6:44:45:FA:FF:11:9A:50:83
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:31:bc:6c:88:19:ca:68:88:83:4e:b8:3a:a1:99:ed:d8:
ba:4c:aa:15:ff:90:91:7f:2e:12:e5:75:a7:ea:bc:09:23:d9:
d5:cb:c3:82:97:b1:57:bf:8b:f6:ab:d0:c4:fe:43:a1:3b:44:
82:d7:35:5f:87:c1:ec:56:3d:e4:1a:6f:66:72:c2:54:46:ae:
81:b5:79:97:ea:74:4e:67:e5:3c:ff:9d:c7:61:ff:f9:a4:84:
8a:dd:79:a1:02:18:e8:ab:7c:ba:67:8a:08:61:b3:f9:6d:ef:
07:5b:d8:d6:25:b4:09:14:cc:5a:46:00:8b:ce:29:cd:43:bd:
7a:2d:3b:50:67:25:27:45:72:47:24:b1:29:29:71:6a:08:50:
9b:1e:b1:a3:3e:d6:99:36:d5:df:03:22:d9:4d:15:3c:2e:cc:
7b:77:11:aa:ba:19:84:1c:fc:e3:b6:60:9f:d9:32:8b:f7:eb:
db:f4:ba:55:29:86:d6:e5:48:2d:c7:7f:4b:df:3a:7a:b0:51:
07:a9:26:3c:0a:d4:25:ab:d7:05:1f:a3:51:5a:a7:d3:4f:74:
59:84:7a:63:3e:8d:b2:2d:9b:12:a7:1a:4e:90:b7:2c:f8:de:
33:d3:b0:26:7e:51:18:be:6b:f0:50:a4:1d:ef:97:39:4b:b4:
e8:3f:2d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwzC5vVH2IOyd5GASW81/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz
ODBiMmIwHhcNMjUwNjA3MDUwMDQwWhcNMjUwNjA4MDUwMDQwWjAzMTEwLwYDVQQD
Eyg3MDExYmEzNmE4ZTUwNmFhZTc5NGU3YTY0NDQ1ZmFmZjExOWE1MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6RZHP2Orw2kON4M7Rjjex9JuOd
+7rnKh9Xrjze94buGJOmLAXYh9c1cLJfIleL3GM47CpfIHfff3xANAAbN8hM5bhc
1gJ3ivlJWrJSuc9XKV46UMCIctr/QpuQA/4mydnL5ljFXLkcvs1woJFlwtn/g406
HNC6aEmuPIZqCl+X/S/Kp9Gk74prRZ1YLVdogSu9rcWACfXAg3tnBewkUjcoV34s
G1cVIMHLJKHuqMvswHM+6rNvTnSHWtDPo0DbIvZilbs/kOi+j2R2dyS7GRi28HuS
+0o9uAYILd6li3ZWVS+xc0qBHSH6BL5xOZmiWwjoe7BsH2XSU1+nZFpLUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHARujao5Qaq55TnpkRF+v8RmlCDMB8GA1UdIwQY
MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt
NGJhM2ZjMzQ4NGNlLzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl
LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJukxvGyI
GcpoiINOuDqhme3YukyqFf+QkX8uEuV1p+q8CSPZ1cvDgpexV7+L9qvQxP5DoTtE
gtc1X4fB7FY95BpvZnLCVEaugbV5l+p0TmflPP+dx2H/+aSEit15oQIY6Kt8umeK
CGGz+W3vB1vY1iW0CRTMWkYAi84pzUO9ei07UGclJ0VyRySxKSlxaghQmx6xoz7W
mTbV3wMi2U0VPC7Me3cRqroZhBz847Zgn9kyi/fr2/S6VSmG1uVILcd/S986erBR
B6kmPArUJavXBR+jUVqn0090WYR6Yz6Nsi2bEqcaTpC3LPjeM9OwJn5RGL5r8FCk
He+XOUu06D8tgw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:51 2025 by rpki-client