Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: OIJ5W1Ujgb4jvK3pDUabCtP1IP9nftCxR/0I/IkK1/A=
Subject key identifier: 4A:4E:AD:7F:9C:FA:FF:20:87:0B:75:78:3D:52:E8:EB:90:04:4F:0A
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0199221E2584A1A003A7EFFBBFCD0A2EA0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:00:24 +0000
Manifest this update: Sun 07 Sep 2025 03:00:24 +0000
Manifest next update: Mon 08 Sep 2025 03:00:24 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: YfH6sy9whjDzim4nS2cYuQOVnUd6ecuQFNvzIx2mdAk=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:25:84:a1:a0:03:a7:ef:fb:bf:cd:0a:2e:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Sep 7 03:00:24 2025 GMT
Not After : Sep 8 03:00:24 2025 GMT
Subject: CN=4a4ead7f9cfaff20870b75783d52e8eb90044f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:ba:c1:cc:75:a9:f1:a1:71:ea:c9:e5:d5:
56:fd:72:b5:23:9f:45:4a:d4:07:28:56:57:e3:ee:
96:32:44:cd:2e:18:2e:6c:89:f3:64:a1:d4:e5:21:
85:b0:fa:83:9e:a8:5d:9c:39:4b:f5:a5:c5:6a:03:
bc:ac:5e:a0:3d:df:2d:28:1f:71:bb:ad:99:08:c4:
b2:d9:97:16:7e:21:1c:b1:70:a5:5f:5f:4d:18:d6:
a9:b6:86:87:36:0e:68:17:09:91:5e:d7:48:14:c0:
ef:fb:fd:b7:e8:7d:89:ef:52:a1:ba:45:ea:72:5d:
40:3f:40:45:96:71:87:34:b8:a7:bb:dd:ce:10:b1:
9f:d3:da:94:cd:18:ac:47:01:3e:72:bb:70:03:bb:
95:82:f6:aa:f9:f4:98:b7:f8:c5:ee:6d:69:c3:c2:
90:c0:92:40:82:42:ba:dd:fd:7e:82:1f:e7:aa:83:
eb:7e:5e:86:05:04:25:3d:70:42:44:14:cb:b9:d9:
7c:47:53:f3:2b:cb:b4:3d:cf:39:48:1c:4a:a1:6c:
78:5d:70:bb:90:c3:73:39:ae:a8:02:97:1b:43:1c:
5c:9e:c6:a3:c6:47:fc:5a:21:8a:d7:e6:07:85:4f:
f1:0e:1a:c2:5a:30:4e:35:c6:2a:e5:d7:85:47:65:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:AD:7F:9C:FA:FF:20:87:0B:75:78:3D:52:E8:EB:90:04:4F:0A
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ee:0b:10:19:20:cf:b5:5c:a4:f1:85:e0:0c:aa:74:0a:6c:
43:04:c9:86:f8:c2:e8:ac:1d:7c:e7:0c:60:b6:b6:49:1e:b3:
6a:28:41:41:12:4d:23:dd:56:d8:2a:ed:46:ae:08:89:5b:d2:
95:40:75:be:e7:93:93:78:c9:39:07:fd:d3:d7:15:87:ba:49:
01:07:a0:04:66:b1:f9:11:f0:c1:aa:0d:4d:c1:52:52:4c:5e:
bb:9c:0a:d4:00:56:e3:bc:46:fa:cc:7d:74:69:9d:bf:89:c8:
99:1b:f0:3f:36:7f:d8:8c:76:3e:0f:bc:6b:d7:59:e7:cd:11:
36:8a:80:0c:8e:0a:53:e3:52:87:3f:06:3f:36:2a:d1:1c:b2:
da:cc:c7:43:79:2c:ad:c5:4e:36:29:e2:3c:dc:c9:a9:52:c5:
33:48:cd:62:aa:60:92:d9:1e:52:55:8b:1d:4b:00:8e:cc:cd:
13:1e:ab:e5:84:be:3b:72:c5:12:55:4b:b5:91:96:2d:4f:60:
3a:41:c3:c4:e1:5c:6e:03:93:55:f4:c5:4c:8b:ec:fb:54:c7:
27:8d:64:be:f0:eb:fd:10:46:48:c2:60:31:88:94:e0:25:3c:
55:5b:ee:77:3c:67:e2:da:72:72:a0:09:78:dd:a4:5b:ca:8f:
c4:3d:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:42 2025 by rpki-client