Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: lr6rpRKKMUsgshD/i+vEhhxDi/lSZF5zVzu0ywxEgv8=
Subject key identifier: 51:67:4B:E4:BF:25:43:9B:07:72:49:C2:C1:03:BD:36:0D:8B:FB:29
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0199353766C2D4DDBBF853301E8BAC2174DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 1358
Signing time: Wed 10 Sep 2025 20:00:47 +0000
Manifest this update: Wed 10 Sep 2025 20:00:47 +0000
Manifest next update: Thu 11 Sep 2025 20:00:47 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: 27bcAYCRxFXBjzoXwNx6HMiRes7ropgPeMc2BCZWzRw=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:66:c2:d4:dd:bb:f8:53:30:1e:8b:ac:21:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Sep 10 20:00:47 2025 GMT
Not After : Sep 11 20:00:47 2025 GMT
Subject: CN=51674be4bf25439b077249c2c103bd360d8bfb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:e5:a6:1b:37:3c:27:0f:34:cc:9d:42:7b:
60:9d:ef:b6:bc:77:42:ff:2f:9b:23:12:f0:ae:5b:
75:bd:50:9e:75:24:dc:a5:91:e3:f5:8c:e5:10:98:
42:c0:f7:f4:c4:05:ec:0a:e2:70:d1:1d:63:46:59:
6c:5a:81:89:15:da:52:5d:13:1f:00:15:92:31:e8:
58:19:72:44:51:63:b3:ed:70:ce:38:ec:3a:29:b7:
98:09:cf:83:ee:74:22:8e:8d:ab:61:b3:bf:d1:29:
64:52:78:9c:86:68:5d:78:d6:81:8f:41:cc:5b:1c:
d2:2a:e5:aa:2f:81:b9:38:0d:56:47:b7:a6:c1:c4:
1a:87:43:8f:0c:76:59:b5:93:c6:ad:1d:7c:c9:5b:
d9:22:dd:44:a0:9b:bd:fe:c4:f0:82:c1:3a:a7:d5:
67:d8:dd:6f:7f:48:21:b3:ea:81:3a:25:0d:b1:65:
90:5d:a3:30:f5:df:8b:fe:00:cb:ad:a5:e3:87:11:
b7:e6:5d:0c:3a:2d:c3:ca:45:a2:ce:89:a4:4c:9e:
48:13:8a:3b:c4:a1:7f:94:08:e4:ac:6a:85:25:b1:
77:b7:bb:79:53:35:c1:eb:d9:5b:88:f5:96:ee:27:
81:b0:ec:03:1a:27:bd:ce:ef:a5:10:90:c9:90:72:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:4B:E4:BF:25:43:9B:07:72:49:C2:C1:03:BD:36:0D:8B:FB:29
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:d0:0f:94:44:9f:9f:5b:74:ab:fa:fe:d7:d4:68:1f:5b:
a5:b4:6a:33:59:4b:56:6c:60:67:04:86:0c:d9:45:54:30:c9:
b8:12:5c:14:07:3b:30:87:fb:5b:65:c8:96:84:32:f6:9c:2d:
e5:bc:a1:56:dd:1c:94:11:97:9a:0a:24:77:0e:25:bf:83:0c:
e2:5d:e6:87:28:36:77:6d:af:fa:c4:0e:ef:48:f2:ed:19:25:
41:c3:d6:81:74:27:ea:34:28:ea:65:79:59:44:e9:22:0d:c4:
8e:14:79:80:81:b7:a1:54:89:54:77:65:95:e3:5c:0e:80:9d:
88:1d:97:44:e9:6b:8c:d5:31:74:02:a7:07:e9:9d:7b:0a:8e:
46:89:52:bb:78:e8:0c:58:e8:9b:d4:d7:90:1a:b7:61:5c:73:
a9:f9:b6:d4:4b:ad:33:65:39:2d:34:23:47:49:4c:88:e8:4f:
af:7a:35:71:40:dd:ed:1d:a6:77:87:4c:f3:94:51:d8:4c:0d:
65:6d:b2:62:18:a8:45:ab:12:ac:16:c1:cf:f8:cf:08:29:cc:
86:a6:d1:05:71:73:e2:a5:63:26:9d:99:d7:bc:0e:ae:af:46:
92:16:a5:ac:7f:86:1c:ad:fe:b5:a1:3f:72:44:1d:4e:98:bb:
47:7b:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:57:57 2025 by rpki-client