Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: JN3Vdje468ce770jKfb8sZhqp2Ij3LT64z0AlVxhGns=
Subject key identifier: EE:CE:40:95:1C:B5:87:4A:01:1A:9A:76:27:F4:C5:A2:BA:E2:89:B5
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 0198D5BBC3AD03AAA5496C22C36833E3F625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: wSeopHVszwLTbWUZgL3oXRCJH/tycEJyrmUlXHoOdmU=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c3:ad:03:aa:a5:49:6c:22:c3:68:33:e3:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=eece40951cb5874a011a9a7627f4c5a2bae289b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:1f:68:6e:dc:7d:df:9f:8d:b8:b4:99:2f:
59:9a:fc:a7:8d:05:98:5a:60:5c:9f:ec:4c:9f:d3:
1c:87:93:10:b7:23:b1:c2:c6:3e:51:f8:0c:80:7f:
fb:4e:65:fe:d1:c2:7f:de:b0:2b:eb:b8:96:8b:40:
2f:1f:2a:ff:77:3a:c7:2e:25:85:79:16:23:06:1b:
e2:1c:2b:70:48:f2:11:d5:21:2a:34:c6:71:ea:c6:
f7:1d:e0:c7:8b:20:30:23:10:15:59:a6:1d:31:5f:
1c:fc:15:b3:e1:c3:eb:e0:32:89:b8:65:da:48:32:
00:5a:9f:3d:6e:5f:f8:49:7c:30:30:c7:70:80:38:
3f:18:ba:c5:a0:83:98:59:68:04:62:2d:3c:75:51:
3b:0d:a8:74:22:52:e4:4e:ce:19:64:e7:d9:72:d5:
fb:c9:aa:3b:08:db:72:d6:e7:50:02:dd:b5:23:80:
46:50:68:b1:73:b0:b3:8a:dc:87:6e:db:c3:b8:9a:
d6:d0:d1:df:4a:56:f9:0d:65:b0:d3:6e:2e:8f:61:
dd:3f:e5:3b:19:39:d7:5e:d0:f6:00:03:db:66:0c:
9e:0b:ab:ee:3e:fc:13:d9:d5:36:0c:37:c6:e3:68:
c9:0a:b8:f6:87:70:d6:1f:65:b1:0a:df:80:ca:81:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:40:95:1C:B5:87:4A:01:1A:9A:76:27:F4:C5:A2:BA:E2:89:B5
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:1a:0a:be:9a:22:6e:78:dd:c2:55:96:bb:d4:1f:03:76:
07:63:fa:da:cb:0f:24:dd:63:c9:24:fa:be:2d:28:57:a1:54:
be:6b:7f:9d:86:7e:5b:2c:f4:9e:c9:06:9b:b7:af:81:80:b7:
dc:9e:48:41:4f:d1:55:2c:8a:13:68:ea:65:22:3f:b0:5f:0b:
73:8a:68:99:88:ee:1c:6d:df:e5:4e:8a:05:32:e4:ac:e6:0b:
4b:9d:9f:9c:24:51:1f:2e:b5:24:3c:e1:4c:68:87:4e:c7:0f:
a2:3e:9b:17:52:92:b9:b9:21:cd:99:4c:76:0d:52:b8:c5:6a:
7d:95:23:40:ed:7b:80:0d:09:33:1f:59:b5:bb:64:e6:e2:cc:
e7:f3:b4:44:79:7d:15:e0:cb:77:c8:61:1a:63:0c:8f:dd:fb:
4c:58:b6:80:cb:5b:47:6e:69:c4:37:f9:51:2f:4b:1d:51:41:
6b:a8:a7:5b:c9:37:fb:fe:98:ff:c8:25:a9:ec:8e:ed:b8:2d:
3b:35:93:93:43:b4:c2:79:0b:7d:8a:10:da:1d:98:d3:5c:1e:
08:45:ff:10:71:9a:ed:53:6c:90:6d:ea:9f:80:0c:a1:8d:65:
6c:b3:8e:66:c6:6e:6b:19:4e:2c:2a:58:eb:94:95:bf:1e:0b:
23:7c:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:31 2025 by rpki-client