Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: A5WFjRS4l0aUCazsVb0QBfAKmope1x4cAwRIY9v7GIg=
Subject key identifier: 35:52:69:EF:DA:8A:16:19:AD:14:A8:1D:6F:4F:61:E2:3A:BE:CF:B6
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 019923A05C67ECD3D875E1D2DC03B5A6593A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:15 +0000
Manifest this update: Sun 07 Sep 2025 10:02:15 +0000
Manifest next update: Mon 08 Sep 2025 10:02:15 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: B2hXOLevfZV1m5xL+9C111epfAr64VDAxnJF1cxRnmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5c:67:ec:d3:d8:75:e1:d2:dc:03:b5:a6:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Sep 7 10:02:15 2025 GMT
Not After : Sep 8 10:02:15 2025 GMT
Subject: CN=355269efda8a1619ad14a81d6f4f61e23abecfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:d9:14:82:db:68:21:7e:b6:51:3d:42:ce:
e5:8e:00:b5:99:1a:3f:47:e4:1f:4a:b3:1f:d1:e7:
78:25:fa:cd:14:9a:89:a3:33:34:12:e4:4c:26:33:
8e:01:40:00:dc:8c:dd:3e:53:d0:dd:8f:a9:ea:48:
51:40:82:3f:5e:76:e7:09:3d:77:eb:4e:06:4e:14:
0a:90:ae:78:9b:11:e0:c2:11:72:ae:aa:87:61:8d:
dd:81:7a:81:02:eb:ca:da:8f:08:54:eb:71:c2:5c:
39:f0:6f:34:a8:26:da:5f:c0:66:d4:b1:18:1a:44:
a0:79:61:a9:11:27:c3:08:97:d7:d9:cc:a6:dc:82:
35:73:1f:42:25:67:c6:d2:36:68:47:ab:4d:ec:74:
af:f3:9e:dc:ae:c9:c8:51:5a:79:3f:99:cf:05:9f:
3f:5b:f9:d7:67:0d:88:70:04:49:fc:f8:33:c2:7f:
fa:83:b9:8d:95:fe:80:06:11:22:07:57:99:83:0d:
64:b7:98:a6:14:04:e5:28:ae:b5:06:bf:0e:59:69:
76:64:02:e5:cd:16:44:d3:82:74:d7:9a:14:7f:11:
98:55:af:f5:90:65:2e:3f:cc:ad:62:a1:fe:3a:48:
f7:06:ae:2d:51:c4:e1:07:92:14:e9:8c:a8:f4:47:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:69:EF:DA:8A:16:19:AD:14:A8:1D:6F:4F:61:E2:3A:BE:CF:B6
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:58:f8:af:a5:5c:c6:4b:70:68:ce:92:7f:52:ba:dc:1c:4d:
c7:c1:85:7a:b3:d5:a5:15:01:9e:02:53:a2:2c:89:d6:51:bb:
20:ba:f2:05:1d:c9:39:25:cb:67:31:9f:d1:70:ab:ed:a0:53:
fc:47:ec:38:55:e8:ba:c4:48:33:cc:30:ec:03:a6:43:8c:9f:
52:5f:24:0f:96:c9:36:b9:e3:e0:04:a4:30:a2:11:74:6f:2f:
55:b9:e3:0b:e6:a4:c0:30:44:33:f0:da:ad:ca:64:bb:ee:99:
99:c1:25:18:23:dd:0b:28:c0:de:f0:1b:8e:83:74:14:c6:45:
fd:64:d9:5f:ec:9d:2c:47:fd:93:1c:bc:77:4b:0a:2e:9f:47:
bb:7c:4b:c8:3a:d9:5e:ec:1f:27:18:df:e5:ae:80:8d:55:f1:
98:ae:70:a4:6e:24:cf:c9:8f:33:5c:e2:8f:ef:76:94:d0:6c:
a0:fa:01:0d:0b:c2:5e:e3:0c:01:3a:4d:a8:3b:7a:c4:b6:53:
05:b8:14:0e:e9:0a:7e:b3:b3:f2:19:39:1c:a4:30:aa:43:9d:
8f:a5:ff:f6:40:6a:1a:6f:b3:ed:2c:8f:59:38:be:7f:d7:3d:
81:4c:8a:5c:0e:96:a8:87:92:24:c8:a0:a7:f1:c0:4a:04:22:
75:1d:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:07 2025 by rpki-client