Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: jMk+sZCvYmIWhxj57E/PycyWUIinY8b8T4OMd3mCLU8=
Subject key identifier: 72:98:FB:B6:6B:DA:D7:CF:78:EA:D7:69:7E:2C:5C:A4:6B:D4:88:70
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 01983F1856D13B1A44D01C9C74ED22163D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 076C
Signing time: Fri 25 Jul 2025 01:00:16 +0000
Manifest this update: Fri 25 Jul 2025 01:00:16 +0000
Manifest next update: Sat 26 Jul 2025 01:00:16 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: CqoJVIX5PaK0nWyP4BBU18NF+glyD57ZBsP4kxGh2jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:18:56:d1:3b:1a:44:d0:1c:9c:74:ed:22:16:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Jul 25 01:00:16 2025 GMT
Not After : Jul 26 01:00:16 2025 GMT
Subject: CN=7298fbb66bdad7cf78ead7697e2c5ca46bd48870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:e1:ea:2a:5f:f6:bd:c7:13:c6:eb:c0:84:
40:4b:f8:04:d3:be:f5:86:d1:49:35:3f:d6:64:44:
84:fa:f5:32:f2:c4:10:83:51:1f:e6:b4:f4:d8:c8:
65:2a:23:d6:ed:80:c1:c3:cd:e0:b4:5e:a5:15:b4:
46:0e:90:33:13:e1:b4:16:70:b2:8a:3a:5b:bf:e6:
d7:31:61:4c:c0:23:53:b9:4b:21:4b:c3:56:33:06:
c8:5f:e8:01:d0:64:c6:a0:4f:2a:70:57:1f:a2:d4:
02:3f:2d:cc:0c:e3:b5:fb:df:69:fb:40:95:65:5a:
69:ac:89:7c:cb:3f:9e:72:5c:72:3b:bf:30:22:80:
14:44:a2:c2:d9:49:24:d8:b2:07:8c:dc:e7:bd:25:
a4:20:e7:e7:c9:bd:2d:1e:bd:ee:54:b3:af:fe:f6:
35:7b:73:1e:57:a7:f1:cf:da:67:5b:d7:1b:23:27:
b8:ae:05:fe:4c:3a:dc:e9:1d:41:20:50:27:18:e8:
57:e2:51:94:78:0e:b2:bc:f0:d8:b2:c9:f3:49:6b:
98:00:31:65:d1:d1:b7:b8:14:1d:b9:1a:17:20:8d:
62:14:1c:3d:23:93:63:e9:1e:d8:13:16:c1:a9:60:
6f:45:a0:6e:05:fb:fe:3c:30:39:49:98:d0:27:75:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:98:FB:B6:6B:DA:D7:CF:78:EA:D7:69:7E:2C:5C:A4:6B:D4:88:70
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1a:94:b5:df:a1:0a:b0:a1:90:b7:56:db:74:17:b2:75:21:
01:71:7a:53:df:80:56:e0:96:5d:59:22:70:98:be:6b:6f:51:
f0:7c:f7:cc:88:ff:1b:0a:ed:d4:ba:77:02:15:b3:19:68:29:
9c:3a:46:08:1b:95:b0:9c:35:f2:04:01:9c:fb:f4:d9:b9:c0:
e4:79:9d:bf:f7:ea:4b:c8:ed:4f:94:37:ab:21:8b:6e:a7:4c:
eb:23:05:65:73:55:de:ec:1a:f4:16:1d:03:ff:63:a4:fa:e0:
9a:a7:aa:28:24:2d:a4:dc:3b:e1:f4:be:1a:00:b1:29:42:b6:
10:e5:f3:51:cf:75:9b:ea:72:af:82:75:75:3b:df:14:8e:66:
c9:11:af:d5:1a:98:11:f3:a3:60:48:37:65:69:89:56:68:3e:
18:dc:86:45:ca:ce:d3:71:b0:db:ed:b3:31:1c:75:b2:08:6d:
76:48:7a:b7:12:ab:a9:4f:c8:d6:f4:d2:f5:22:c6:ac:dd:8d:
86:8d:e4:1d:59:f8:82:12:e1:13:d7:17:28:a6:eb:c5:d0:fc:
02:b2:c0:42:de:5e:9b:96:02:29:5a:6a:cf:85:12:1c:e4:78:
98:32:c1:11:0b:d9:e7:45:3e:3f:32:e7:91:a9:bc:cf:44:d0:
9b:70:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:57 2025 by rpki-client