Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: vs0ps4KPRcVik6/E31CO9Vbx+OwlblwqFuqazejz6Os=
Subject key identifier: 9B:0A:8F:2A:9A:06:4E:91:AB:B7:73:16:60:0A:AC:E8:9F:24:12:BF
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019748FA863FE7BDDF9187F1C14703B1870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0EC3
Signing time: Sat 07 Jun 2025 06:01:07 +0000
Manifest this update: Sat 07 Jun 2025 06:01:07 +0000
Manifest next update: Sun 08 Jun 2025 06:01:07 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: 8HNd6mRkZcY72AqHE5IfzU9idUO1kRDEVq5fANmAXyQ=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:86:3f:e7:bd:df:91:87:f1:c1:47:03:b1:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 7 06:01:07 2025 GMT
Not After : Jun 8 06:01:07 2025 GMT
Subject: CN=9b0a8f2a9a064e91abb77316600aace89f2412bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:0b:cd:0e:55:c7:5e:77:a4:ac:94:aa:a4:
49:f6:5e:3c:76:ea:e3:56:6e:d1:16:bb:b1:2e:ba:
e2:f4:63:ea:95:e4:73:42:7a:0d:20:a8:7a:30:8e:
72:b7:15:0e:34:a2:12:7f:33:41:2c:81:fd:15:e6:
1e:f7:bb:c0:7d:16:a4:a3:00:ed:dd:e7:da:3b:71:
9e:97:7b:10:df:9b:ba:28:f2:b8:05:73:5f:04:a5:
61:94:d6:67:1b:c3:0b:9f:58:29:d9:10:b1:ad:13:
3a:29:e9:22:4d:65:db:ba:8d:cc:d6:0f:36:cc:94:
9e:1a:5b:91:af:6f:bb:1c:f9:b6:81:28:9d:3d:ab:
15:87:9f:7a:88:7d:eb:20:7c:4c:9d:b7:cb:ef:e3:
39:76:b1:e6:5a:88:ea:d2:98:e5:1f:f5:d3:41:e3:
74:93:63:40:05:85:b6:76:5e:d4:00:16:82:79:d6:
e5:a0:70:db:f5:9a:90:25:e3:fe:15:0c:1f:63:ea:
ff:73:6c:35:7f:8e:52:f4:9e:08:5a:fe:9f:fa:60:
56:94:8a:e6:74:75:b6:fd:f4:71:5f:99:f1:26:48:
2f:ba:4f:46:93:f1:09:20:24:7b:b3:d4:fa:fc:ce:
f5:f0:a8:4b:b3:3d:95:33:e4:0b:5c:a0:09:ac:49:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:8F:2A:9A:06:4E:91:AB:B7:73:16:60:0A:AC:E8:9F:24:12:BF
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:c4:85:21:84:14:8d:0e:f2:30:c5:b1:99:ae:3d:3c:2c:
de:cb:21:9f:c2:19:cc:db:eb:9b:66:be:09:44:21:43:95:50:
75:35:5e:ad:ce:7e:50:51:a4:db:af:36:b2:ac:db:6b:3d:c3:
0c:e7:0b:2c:90:ac:15:c5:69:2b:fc:95:cb:d7:b4:7d:a5:14:
39:ca:6d:e4:0e:9c:e2:71:b5:a0:1a:3a:28:aa:48:f0:c5:e9:
ae:60:9b:33:57:ee:3c:14:06:af:a0:28:25:59:3a:fe:91:98:
07:24:b1:1f:f8:37:ff:72:0b:04:07:28:58:0a:70:f7:d3:0e:
b2:9e:d8:71:df:8e:e3:5a:0b:46:15:27:da:30:7c:ae:88:16:
01:92:05:de:dc:2b:55:f3:a6:df:86:cc:fb:87:17:43:ef:92:
1a:a4:dd:7c:50:f3:97:0b:54:4f:e5:ca:5e:04:2f:fa:f5:73:
b3:10:80:0a:ce:05:21:03:ae:c9:72:0e:05:8e:d6:b1:76:a9:
aa:c1:b4:44:96:46:25:03:3a:4d:c4:65:e8:44:b1:a4:64:cb:
2b:83:72:fe:c6:15:10:6c:ba:a0:b9:8a:eb:bb:bb:52:0e:9b:
5d:cf:d8:da:af:b1:6a:0c:99:0d:72:eb:4c:40:25:2a:ba:6a:
33:b5:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:10 2025 by rpki-client