Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: M8FiMXcjg2YmJigfRCV9RSLcu08zM9nKKIQaOEm9q8o=
Subject key identifier: B9:00:FB:46:7D:33:D5:A2:CD:94:BF:83:56:7F:AC:FF:A3:2C:A2:D5
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 019A1F884675D034A0B78E1884F3DD3D7AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 047C
Signing time: Sun 26 Oct 2025 08:00:15 +0000
Manifest this update: Sun 26 Oct 2025 08:00:15 +0000
Manifest next update: Mon 27 Oct 2025 08:00:15 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: 316t8irJypdwo0KRH8mXgBHvkjrYN+anlikww6oyfuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:46:75:d0:34:a0:b7:8e:18:84:f3:dd:3d:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Oct 26 08:00:15 2025 GMT
Not After : Oct 27 08:00:15 2025 GMT
Subject: CN=b900fb467d33d5a2cd94bf83567facffa32ca2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:e8:c7:6f:36:94:60:2b:e7:6f:e0:07:4c:
92:d9:87:dc:2e:7f:2e:51:61:72:38:f9:24:bd:cf:
47:40:7b:00:9b:bf:ee:8c:da:06:b5:8e:e4:1f:1c:
64:bc:f7:30:50:f5:41:08:76:45:ea:ea:4c:a7:d7:
93:7f:6c:89:2b:2e:6e:a7:2d:dd:ab:71:78:41:2a:
85:fb:55:55:57:5a:80:ca:9e:26:84:8e:16:bb:bb:
f2:44:62:ad:9c:51:53:87:51:ac:a2:c3:9e:d2:83:
ff:63:5f:ec:24:0f:5d:b6:45:ab:0a:74:8a:8e:33:
e5:7e:87:d8:cf:02:d5:9c:b9:91:a4:76:b9:a9:6c:
62:1c:a7:0c:41:25:cf:af:95:11:4f:c2:41:fe:09:
8a:a1:a0:1b:96:e4:09:33:a6:71:f2:b5:76:e2:7b:
3f:0b:64:5c:c4:5e:03:3c:24:fe:09:1a:db:5d:03:
2e:3a:a5:90:2d:81:79:22:49:c3:90:c5:99:0e:c0:
c7:f8:b5:91:a8:47:1f:a0:28:52:99:87:a2:2e:7e:
6f:9a:e7:ed:f1:32:c2:54:9a:36:5a:ae:25:eb:0e:
4b:b1:e4:07:b8:bd:d0:cd:dd:76:a1:2a:2d:92:d1:
aa:44:6a:15:a5:3e:51:2e:0f:c0:91:56:c9:3e:ce:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:FB:46:7D:33:D5:A2:CD:94:BF:83:56:7F:AC:FF:A3:2C:A2:D5
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:e2:4e:14:79:ae:25:be:53:8c:01:0a:d5:90:5f:39:47:
5d:9e:a9:9a:77:90:19:f8:d7:f7:80:ef:60:19:e5:32:c4:7b:
09:e7:05:39:d2:b2:ab:4b:02:ca:01:e5:48:db:45:40:a0:4a:
78:7d:ff:92:06:c2:e0:1a:e9:96:05:e5:4c:22:fe:fe:c5:11:
12:43:69:8b:91:c3:66:df:8b:9c:1b:57:f9:80:82:d6:24:d2:
75:53:db:93:a7:04:f8:66:0a:85:30:05:d5:0d:2b:3d:f9:34:
ea:5b:bd:d5:01:63:6f:4b:ae:ef:47:ad:0c:fb:ce:4a:3f:68:
ad:b2:44:d0:ea:61:c8:bd:b3:12:23:b2:1e:4a:76:d2:9e:4b:
6b:9e:27:5e:0a:9b:4f:e9:ed:e3:39:9c:1d:d4:c7:b3:f8:d8:
b1:81:c4:4e:af:2d:cc:e0:ee:38:18:94:0c:e5:8f:0d:8c:b9:
23:4c:ce:cb:8c:56:88:66:6d:10:d9:d0:da:6d:6d:8a:41:cd:
0a:96:53:6e:bf:e5:6a:c5:79:4f:ec:75:a0:b8:fa:59:7e:55:
93:eb:c4:35:21:c1:68:2c:ba:98:04:b5:b3:30:69:b9:75:00:
b6:fe:c5:8a:d2:27:a9:1e:7a:d4:35:7f:85:8c:9f:71:d0:3f:
58:3e:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:35:22 2025 by rpki-client