Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: mkRGPBS/1m6gUDRk+sKlqXvD6ahWtGtd455bdMI978Y=
Subject key identifier: E7:61:A1:51:24:BC:48:0C:A4:C5:97:B9:E4:A8:4F:CC:04:F5:E5:ED
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019A326AF35DA05B29C5D2F0A357F7AA934C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 1046
Signing time: Thu 30 Oct 2025 00:01:01 +0000
Manifest this update: Thu 30 Oct 2025 00:01:01 +0000
Manifest next update: Fri 31 Oct 2025 00:01:01 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: Z7/yTpw0EHbjOI6GPwHhwhgvHWWF9lBisYpgWyXo6Wo=)
2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=)
3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:6a:f3:5d:a0:5b:29:c5:d2:f0:a3:57:f7:aa:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Oct 30 00:01:01 2025 GMT
Not After : Oct 31 00:01:01 2025 GMT
Subject: CN=e761a15124bc480ca4c597b9e4a84fcc04f5e5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:86:22:39:52:33:d7:13:6a:a2:63:61:25:
34:87:46:e9:2e:29:98:bd:6d:d4:79:dc:f6:82:52:
db:d5:5c:11:b5:5b:85:71:06:66:53:bf:92:e1:20:
67:eb:8c:3d:4e:38:b0:a5:06:29:09:e4:02:48:e1:
a6:5c:ac:df:a9:6c:a2:28:a4:8f:51:76:02:d0:b4:
2e:9a:d5:ce:61:55:e5:95:28:dd:7a:e5:22:19:75:
bc:b1:fb:34:5f:d1:1b:44:54:44:26:71:ce:cc:f0:
e2:f8:59:20:c0:30:f7:69:b3:99:42:da:0b:75:93:
45:b0:bd:bc:be:bd:be:b0:bf:5b:5a:19:ae:04:b2:
40:d8:6c:a8:5c:19:a7:55:aa:9d:72:23:31:1a:cd:
ab:23:e1:b9:d2:ed:de:98:ca:df:db:f2:d8:c0:ab:
09:2d:13:e0:12:ef:66:9d:45:a2:d9:b4:4e:de:25:
5f:0f:3e:d6:2f:21:d6:8e:83:ad:48:d3:1a:21:fd:
7a:12:45:4c:09:8c:9f:8c:44:bb:b4:bb:fe:f7:69:
fc:22:b9:a8:b1:1f:98:e4:3d:63:15:d1:54:6e:d0:
fb:06:79:76:a7:b8:4a:c3:7c:25:8b:eb:06:4e:7d:
3d:51:6a:69:f6:30:77:5d:b2:33:c6:a8:21:30:44:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:A1:51:24:BC:48:0C:A4:C5:97:B9:E4:A8:4F:CC:04:F5:E5:ED
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:16:eb:ae:d3:63:3e:90:00:1e:2e:93:56:ae:1a:65:9a:aa:
7f:a3:c0:13:7a:8a:76:53:ee:fa:6c:a4:e0:dc:cb:d6:fa:70:
c7:00:8e:c7:75:cc:06:d4:58:47:8e:3f:80:b9:a9:aa:43:00:
1b:d5:27:16:0d:49:51:49:08:9a:25:c4:39:6c:81:36:47:cf:
47:90:f0:7f:6a:8a:69:6c:0c:23:d7:8f:fe:94:42:43:5c:78:
c3:5c:0e:d8:91:f9:58:30:17:a5:b4:85:d8:f3:b2:e6:8b:0d:
2c:80:ea:ea:d1:c9:74:55:81:b4:f0:a6:83:fd:e8:e4:75:29:
a0:6f:7a:fe:26:77:83:01:45:39:c3:25:47:71:7c:fb:ec:50:
e4:bb:10:73:ce:17:5f:9f:90:0b:fc:ba:e6:e8:ee:c3:db:5e:
48:29:01:6d:a1:c8:b0:c4:94:93:04:3d:0e:89:f3:b8:9b:42:
01:23:cb:8a:7c:38:80:0c:38:6e:be:19:9b:9c:34:91:9b:e1:
05:76:4d:cc:66:9b:18:d2:74:e9:02:50:9e:9c:aa:25:b5:bc:
70:9a:73:ae:ec:2b:97:86:83:6c:f3:3e:2a:9d:99:91:0f:52:
31:9d:1d:4d:9d:c6:2b:7c:1c:23:14:21:9a:4f:1f:20:14:ad:
97:6e:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:27:55 2025 by rpki-client