Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: 41AR7fHXRviRbZdS0PfP8DnNqBaXEuWrSuWggMHuqok=
Subject key identifier: 4A:42:B1:91:A5:14:0A:CB:E7:20:6E:42:FE:E9:DD:34:CD:A7:6C:EF
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019A0110F1191167D31B0E67EE85895E0E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 10:01:18 +0000
Manifest this update: Mon 20 Oct 2025 10:01:18 +0000
Manifest next update: Tue 21 Oct 2025 10:01:18 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: fqQefp2GWHlkgx1AfKnzKgbECoU81TKlo1T7h5AwmkU=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f1:19:11:67:d3:1b:0e:67:ee:85:89:5e:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Oct 20 10:01:18 2025 GMT
Not After : Oct 21 10:01:18 2025 GMT
Subject: CN=4a42b191a5140acbe7206e42fee9dd34cda76cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:e7:cb:fd:b2:3f:36:73:2e:b1:3b:07:f8:
86:74:7b:87:5d:c6:3d:b8:62:f6:98:fa:a6:09:a3:
b5:59:55:ad:c4:96:44:8f:7e:9a:2a:58:7b:de:7f:
66:29:f1:6e:41:00:35:9e:24:a4:7b:08:1a:f9:1b:
70:e3:22:4e:97:ab:78:0d:eb:3f:03:49:d0:99:f4:
a2:b6:73:81:90:fb:4e:d6:b4:cb:e6:35:4c:4d:7b:
20:9d:49:2a:97:51:6a:fe:af:14:de:cd:c4:37:9b:
10:de:7f:80:5e:82:a3:49:67:1f:d3:4a:18:ff:2e:
67:47:2c:2e:0c:de:af:41:9c:0f:91:dc:63:46:80:
bb:d7:26:ab:20:37:aa:8b:72:d6:4a:96:c9:4d:fa:
6a:51:97:74:8a:40:0d:ed:c3:8b:29:90:95:51:1d:
06:53:82:7e:9d:0f:61:52:a0:51:42:3e:16:54:40:
1d:e5:a2:c4:e8:75:8f:e2:dd:63:6d:3c:d1:1d:fa:
b5:07:91:77:2b:bf:12:fa:43:06:30:39:a7:f0:b2:
eb:17:e6:a6:ad:44:ba:7a:d3:3a:ab:7f:5b:56:ad:
5b:c6:d3:0e:8b:c0:b9:42:86:ba:e8:cf:eb:77:ad:
34:29:ea:87:ce:f3:9c:a8:78:2d:9f:a8:e6:46:db:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:B1:91:A5:14:0A:CB:E7:20:6E:42:FE:E9:DD:34:CD:A7:6C:EF
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ae:61:01:1a:b7:52:70:d3:70:b0:b6:78:06:06:33:42:6a:
90:bd:8a:39:f1:41:ea:84:1e:70:ce:fb:d1:c8:72:14:ca:ab:
21:52:90:8c:db:b4:c4:1c:25:e8:05:52:e0:fb:4a:8b:24:e1:
f5:f4:23:ff:72:c9:ed:ca:fd:a4:99:3b:e1:73:40:7f:a5:52:
1c:92:9f:f6:5d:0b:00:fd:5e:0d:74:e1:bc:f9:51:71:3f:29:
48:0e:59:8c:11:61:60:28:fa:b6:db:b0:a3:6d:54:5f:85:fb:
0f:4e:76:b1:77:88:4e:de:18:39:63:61:57:83:2a:22:e7:95:
d3:96:5d:c3:b7:38:22:27:4b:df:1d:72:85:71:60:b6:11:46:
02:aa:6f:89:6b:87:c8:8d:36:87:a7:d3:80:2b:76:3b:1d:90:
af:50:dc:07:1e:c4:8f:70:33:27:ec:b6:73:2f:25:ab:f6:22:
5c:a0:36:0b:a8:fa:80:85:63:2a:be:5a:6d:6d:ac:77:f2:4b:
31:35:11:66:4e:48:ee:79:30:f7:63:6d:de:d1:18:26:f0:93:
d2:7c:29:62:ab:3d:a7:28:2b:64:ff:85:12:b3:ef:bc:63:76:
78:57:1d:51:7c:9c:3a:c3:d3:e9:fe:a6:b6:77:0a:f5:b4:d1:
3d:fb:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:03 2025 by rpki-client