Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: IVvv3Cw5vVmj4BdQEn3s52S/S0iMSAn/02bXh5vzstk=
Subject key identifier: D6:E8:C7:16:FF:E1:95:C8:45:05:F5:24:02:C8:2B:48:75:BD:B3:86
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 01974A7B1759459E9C82020BB9ACA0B90034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:10 +0000
Manifest this update: Sat 07 Jun 2025 13:01:10 +0000
Manifest next update: Sun 08 Jun 2025 13:01:10 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: wX+Xv7Q+ovDTJqoIDwR6c3X1i7vhc4w5jocFAlDJLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:17:59:45:9e:9c:82:02:0b:b9:ac:a0:b9:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Jun 7 13:01:10 2025 GMT
Not After : Jun 8 13:01:10 2025 GMT
Subject: CN=d6e8c716ffe195c84505f52402c82b4875bdb386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:da:6f:dd:d5:7b:bf:5d:48:6e:7b:bf:0c:
ed:6a:f5:df:4a:c9:3e:0c:72:16:dd:9e:1c:d3:27:
61:16:23:07:31:51:a6:95:14:e9:53:ec:98:d4:ba:
ac:73:15:c7:47:f5:c8:43:fd:4e:a0:75:54:50:d6:
1e:65:7e:40:dc:6d:7e:70:d5:e6:65:24:ac:c6:aa:
84:a7:65:ac:cf:3f:a0:9e:64:c6:db:3c:d8:97:cb:
d2:de:30:b4:52:ec:0c:74:76:8d:64:3f:89:54:8a:
97:82:b0:fc:d9:49:6f:c5:ad:cb:3d:19:7a:c3:6d:
5f:98:c2:0a:7a:e2:ad:46:d4:39:53:46:89:e3:cf:
7d:24:9e:31:1d:c0:17:ae:78:eb:68:57:79:38:bc:
f0:89:7a:83:de:d2:dc:eb:d1:13:9a:d6:e1:34:88:
58:80:00:d7:4d:63:59:ae:c3:58:68:3b:88:0f:b2:
ed:c6:42:92:2a:a7:85:34:f3:0e:17:c2:78:d6:60:
10:2c:9d:81:37:e3:0b:6b:49:88:f8:6a:6e:64:20:
94:e4:45:60:13:b9:7e:f0:bb:e1:f6:08:b6:81:80:
b0:20:0f:50:5d:33:ab:54:26:72:6a:49:8c:4e:0b:
30:bf:29:68:9f:6c:be:69:1e:bc:85:c5:ad:55:44:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E8:C7:16:FF:E1:95:C8:45:05:F5:24:02:C8:2B:48:75:BD:B3:86
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:99:ac:4a:86:c8:53:a7:4f:23:d9:6e:6d:13:5e:ff:0a:04:
a0:c8:25:32:9f:b4:29:09:11:2e:31:5a:1a:48:3d:18:77:a5:
47:4d:0b:d1:12:9f:b1:3b:f4:15:a8:fe:56:8b:c3:0f:70:ef:
20:68:f2:7a:40:70:9a:06:4d:43:7e:64:fc:0b:bd:a0:79:55:
61:8c:33:41:ec:2e:5c:55:a7:ea:a2:32:b0:86:82:ea:10:36:
db:8e:ec:c2:b0:b3:12:bf:46:c5:a3:e6:ee:f7:27:c7:76:93:
02:cb:48:2f:01:5e:b9:48:c6:03:ef:3d:91:09:18:dd:5f:39:
a2:7f:2c:a2:cd:31:14:80:57:1e:7a:13:bc:6c:dd:20:d6:7b:
2e:3d:8c:76:69:72:95:5a:ce:00:92:ca:35:31:ba:5d:b4:19:
5c:aa:99:d7:0c:33:d8:2d:16:96:d4:e8:d7:ff:af:a0:0b:83:
e2:6d:a8:71:fa:a9:c1:94:ed:c9:1a:5e:0a:d1:f3:57:a3:d8:
ee:de:3b:47:56:a1:cd:ee:9b:90:b4:5e:ce:51:21:2d:f8:f5:
df:5b:d9:19:29:83:0b:c6:88:73:1e:84:8e:7f:ae:cd:ef:64:
75:cb:6f:26:6f:89:03:74:7a:f7:f6:7f:4a:87:38:4f:46:2b:
f1:b9:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:39 2025 by rpki-client