Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: YAixX5x3BIZ7d09CCMZ0I1IBV7NMuBV70FvmqziWpec=
Subject key identifier: D3:8F:F8:9B:4B:F7:3C:64:88:32:9E:C7:54:5D:E4:3F:17:51:E0:92
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019935379EE49BE559321DDE68FD126A423A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 1677
Signing time: Wed 10 Sep 2025 20:01:01 +0000
Manifest this update: Wed 10 Sep 2025 20:01:01 +0000
Manifest next update: Thu 11 Sep 2025 20:01:01 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: Nmg6EAQVxK6IuPo4H4ljXIdEDrSkGU9IFPR4y3OcRpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:9e:e4:9b:e5:59:32:1d:de:68:fd:12:6a:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Sep 10 20:01:01 2025 GMT
Not After : Sep 11 20:01:01 2025 GMT
Subject: CN=d38ff89b4bf73c6488329ec7545de43f1751e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:a6:e5:36:af:98:34:79:7f:91:43:6f:36:
48:f3:e5:04:a1:b4:ec:7e:1c:55:0b:52:0e:3e:b2:
c4:11:4a:e8:9a:0e:36:88:6d:e6:0c:76:d8:6d:f1:
f2:5d:0a:de:c0:3a:7b:60:ee:7b:35:3a:56:7e:5f:
47:96:20:15:9a:53:8f:09:93:86:63:95:e6:cd:1f:
a1:3b:68:6a:f1:af:55:ea:b4:ac:74:38:26:5e:71:
ab:48:eb:ef:ff:07:33:6b:f1:00:d4:02:9f:ba:b6:
26:fc:56:40:76:90:72:ba:8f:b9:42:e6:6e:b8:4f:
22:b8:fe:0a:e3:c2:af:06:15:44:7c:be:d3:0b:fa:
a2:95:b4:ed:1d:ae:bc:39:07:69:40:38:4a:59:65:
22:35:e9:cb:6f:27:13:43:05:e8:75:2c:32:70:df:
b6:05:e3:28:07:a4:4f:1a:59:65:d0:ef:fb:dd:b6:
0c:57:79:92:74:b8:e5:f4:c0:be:b5:4b:8c:49:d8:
8f:b0:b8:14:0e:ae:1a:5c:ca:df:a9:3d:c6:22:5e:
d9:8d:1c:15:73:09:28:b3:51:3f:84:70:ef:fd:e6:
a0:60:64:04:ed:21:35:e0:e3:4a:95:ad:45:f6:a4:
e0:73:54:3e:f8:2a:05:30:13:06:46:c6:ce:28:ae:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:F8:9B:4B:F7:3C:64:88:32:9E:C7:54:5D:E4:3F:17:51:E0:92
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:1c:d9:63:16:8a:5d:ec:85:18:a3:c3:0c:78:67:de:c3:
61:4b:2a:57:4c:a1:40:bc:47:de:76:81:fa:11:29:5d:75:8a:
cc:fb:7b:db:ff:b5:42:c0:4c:7b:92:dd:51:33:46:52:d4:75:
bd:84:80:d2:99:19:b4:ec:b6:19:a6:bf:c4:3a:98:9f:72:47:
1d:10:f8:2d:b1:6c:44:84:eb:69:8d:e1:64:ae:47:a7:a7:3f:
d8:be:39:2d:9f:62:c7:bc:fb:56:78:ae:d5:69:e5:bd:41:82:
e3:cf:5f:b4:c6:5d:5e:48:fb:4c:a2:4b:8f:8e:50:50:ef:a5:
72:0a:3c:7f:e6:06:f7:f3:23:c1:77:31:41:16:2e:60:49:55:
d5:29:d0:d3:1d:54:3b:44:21:8b:da:26:b1:6d:10:74:0a:ee:
aa:ed:d1:2f:27:d8:9f:f6:f5:da:5d:e9:4d:50:ad:e6:79:26:
08:b1:d1:01:26:1f:81:0d:60:b4:53:85:7d:df:2b:c8:b9:73:
31:80:f6:bf:6b:ae:41:33:6d:e9:3b:2d:57:78:e0:e3:39:2f:
d2:9b:e1:6f:71:96:07:4f:b1:42:05:52:67:28:58:45:7f:e1:
d4:83:cb:50:f9:44:ce:20:18:44:d3:a8:34:6a:d4:b2:a9:0f:
68:24:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:20:57 2025 by rpki-client