Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: v8kAfhQ+Xg2o4lTw1QZd08DCmW86V8xhuHhcAThv8hA=
Subject key identifier: DF:A9:8B:17:6E:AB:22:FA:1E:8D:60:E4:E9:84:2D:F9:6D:88:7C:84
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 0199247A759A5B9D40D279CC9D4940FF50F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 03FA
Signing time: Sun 07 Sep 2025 14:00:29 +0000
Manifest this update: Sun 07 Sep 2025 14:00:29 +0000
Manifest next update: Mon 08 Sep 2025 14:00:29 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: LgaMricBezta1yJCnNRI1C/lH8tlnuHqY18cac9x948=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7a:75:9a:5b:9d:40:d2:79:cc:9d:49:40:ff:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Sep 7 14:00:29 2025 GMT
Not After : Sep 8 14:00:29 2025 GMT
Subject: CN=dfa98b176eab22fa1e8d60e4e9842df96d887c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:0a:33:a7:62:fe:18:58:15:e2:8c:62:05:
a1:cf:37:91:8c:27:0a:94:55:ed:2c:63:a1:ca:3d:
ff:c1:96:3d:96:a0:c1:0d:5b:6a:62:19:8f:28:09:
18:e3:9e:f3:87:00:14:86:57:82:a3:eb:2c:79:30:
e0:d0:fa:bc:b8:16:4b:8b:12:c6:12:22:49:8e:a6:
15:e4:6f:3a:c5:52:6f:01:4c:a5:23:fd:7e:d5:e7:
84:c3:90:d7:bd:24:2e:c7:76:8f:97:19:9a:55:ff:
c0:32:72:ac:b7:45:8a:bc:52:89:ec:ff:d4:f0:3f:
d6:52:de:27:20:62:75:52:62:e5:a6:89:6b:7a:a0:
46:d9:ea:b8:8c:13:b5:9c:23:5c:d1:96:7c:53:dd:
59:43:a3:1b:8b:21:e5:bd:19:32:59:5f:00:ce:35:
af:2c:99:1b:d2:5e:26:ab:d8:8a:bf:f9:a7:e3:87:
a3:4d:45:32:e7:f3:af:e1:de:44:57:1d:95:dd:30:
ec:ae:e5:c7:73:98:45:aa:7e:f3:08:76:91:dc:e2:
63:29:df:dd:62:88:4c:63:0c:49:28:86:2e:6a:e3:
41:5a:52:5a:2e:36:03:da:8b:9e:a1:c2:75:62:86:
55:65:2a:b1:d2:17:eb:0e:c8:c8:3d:07:ba:6f:01:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:8B:17:6E:AB:22:FA:1E:8D:60:E4:E9:84:2D:F9:6D:88:7C:84
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:fe:07:5e:c1:94:68:ec:77:54:df:a8:82:53:d5:12:e3:
47:39:55:0c:fe:b9:05:dc:02:c3:58:c3:dc:80:28:4b:f1:1e:
6d:58:7c:9a:28:e4:33:da:0c:60:b1:7e:51:4a:28:1b:cb:a1:
dd:65:c9:14:43:30:4b:1c:c4:74:6b:25:3d:c5:87:bd:4b:07:
fb:70:56:15:83:da:d9:86:4c:37:bf:fb:00:38:d0:78:98:84:
8a:34:1a:f0:71:8c:a9:b9:36:fb:75:fe:a5:e1:23:e5:ab:a1:
25:25:b7:97:12:51:8b:49:17:6d:8e:0a:cb:1f:bf:1f:a3:7f:
60:2a:27:ef:9c:a6:c3:fb:56:b8:86:db:f9:f1:7f:76:8f:98:
f5:0a:e0:8c:24:c2:11:c2:55:f2:f4:aa:d3:9a:bb:b6:0d:ea:
c4:ef:df:8b:b5:72:b2:1e:fc:9a:b0:5e:ad:ae:8a:44:ef:91:
04:6b:c1:84:bc:74:6c:1f:43:bf:3f:9d:41:55:28:da:52:a3:
0f:14:cd:8b:d2:0f:65:f8:62:68:60:de:14:cd:d2:41:3d:2f:
3a:c5:87:49:c0:c3:1b:af:f7:1b:9e:fa:13:49:c6:dd:5c:69:
6e:9d:a0:0e:fa:9d:44:03:43:c1:1e:a6:38:47:fa:1b:f9:97:
97:44:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:44 2025 by rpki-client