Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: Z+dsCzzaOXjVQ5wZnhnqt7lic+mLuAb5O59/UvusoZ8=
Subject key identifier: 0D:5E:92:B7:9F:52:19:AF:C9:46:2B:AD:CB:11:18:E2:B6:F4:1B:EE
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 01974DB2E85FDC5BEED4A7A289F37C12ADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 06EF
Signing time: Sun 08 Jun 2025 04:00:59 +0000
Manifest this update: Sun 08 Jun 2025 04:00:59 +0000
Manifest next update: Mon 09 Jun 2025 04:00:59 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: v/gdFmSnTzC8TpBnSuhWmMiPpmuhRI/seGB1/2VAseU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:e8:5f:dc:5b:ee:d4:a7:a2:89:f3:7c:12:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Jun 8 04:00:59 2025 GMT
Not After : Jun 9 04:00:59 2025 GMT
Subject: CN=0d5e92b79f5219afc9462badcb1118e2b6f41bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:5b:50:6b:d9:9a:4c:26:57:d4:88:83:a2:
61:9e:ca:85:ac:81:31:c4:9f:d8:f4:43:43:21:7f:
ff:83:d3:41:40:e9:1c:a3:7b:38:ee:a3:23:e5:33:
29:cb:c7:cb:0a:aa:c9:e6:f4:fe:52:ec:25:47:8b:
57:c4:75:87:32:ce:19:b7:9a:08:58:84:24:b8:39:
c9:be:b5:2f:12:eb:03:64:c0:99:79:16:55:60:62:
fb:5f:bf:9b:a0:eb:cf:d9:97:65:e4:c9:28:35:16:
08:d9:73:d5:e4:17:dd:e4:13:a3:18:3c:96:30:9f:
9e:f6:75:a7:8c:e7:20:f9:95:b5:e9:a7:2b:19:0c:
0b:c3:d7:94:cc:9b:88:6c:4b:eb:fd:91:64:da:e6:
b6:a8:b8:31:8e:77:14:b4:66:7d:a5:8e:00:2f:b2:
1a:7d:e2:da:ce:c6:52:1c:f8:02:0d:2f:8b:06:02:
87:42:42:3c:64:f2:25:af:ac:c9:c1:c5:77:b3:c9:
a8:6f:e4:e0:73:5e:1b:c8:ed:86:10:55:46:b5:39:
8f:13:73:db:20:3a:fc:4f:ab:59:a9:ad:f0:80:ea:
de:e0:dd:e5:89:a5:68:25:f8:70:18:2c:39:3a:a5:
5b:e5:9b:fe:a2:a5:34:3c:58:77:ff:ad:55:5a:86:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:92:B7:9F:52:19:AF:C9:46:2B:AD:CB:11:18:E2:B6:F4:1B:EE
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:fa:93:96:8d:b0:ee:03:5f:3e:40:c3:0a:fb:80:b8:43:
f9:20:c5:68:b7:6e:0b:56:0f:a3:e3:d0:0f:fe:df:2e:3e:94:
b0:fc:e2:d4:7b:89:14:cf:0d:6b:94:af:fa:b6:d3:4d:93:5d:
a7:95:dc:40:e5:04:21:17:54:0c:59:46:be:71:1b:ed:ad:82:
2b:8d:3f:6d:91:e4:3d:ab:c3:df:a1:40:1e:83:29:0d:d8:7c:
d0:40:d9:e9:0c:7c:6b:c1:02:92:90:33:9e:19:04:a7:da:6a:
fe:2c:f7:86:30:9d:70:0f:cb:cf:4d:02:08:10:db:2b:bd:0b:
2c:db:f5:44:3d:f4:3c:51:2d:ff:b0:b8:1b:c4:39:f6:09:98:
76:4d:0a:fb:b6:a2:eb:fd:df:57:54:85:59:e4:9a:cc:c2:ab:
e0:dd:9d:c4:c2:38:0f:62:81:a8:f0:9f:77:2f:da:1b:eb:7f:
a4:3f:9f:e5:03:20:af:12:0a:a0:f7:3a:5a:6c:17:9a:36:f7:
53:3a:07:64:5d:e5:f6:0c:9f:df:06:00:6f:7b:d6:5d:8e:15:
20:d7:51:26:b3:a8:43:43:35:59:12:60:0e:cb:62:c2:97:e4:
85:0e:cf:e9:e3:ff:89:54:8e:ec:c6:ed:b0:76:0e:fb:94:3e:
f4:62:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:56 2025 by rpki-client