Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: 5r2PlysqIsF1YMIxIv94nZ1J+c37xvK23YX+N97cpmg=
Subject key identifier: 70:1B:6F:7D:D0:F1:5A:5F:BC:0E:3B:EC:A0:C5:24:10:21:23:CC:03
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 0197B6D77C822E4FE177E48FFFA91188A7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: bBmYn4CdtnX6V62tPHzkm/iZdpB2dptnQD6RMt5pmFw=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7c:82:2e:4f:e1:77:e4:8f:ff:a9:11:88:a7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=701b6f7dd0f15a5fbc0e3beca0c524102123cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:5a:9f:a5:14:e8:c7:84:28:6e:60:e9:7e:
9b:4b:2b:72:b1:0d:a8:db:11:67:4b:10:fc:14:b2:
3d:30:dd:f7:47:5e:39:69:34:66:04:d1:15:bb:4b:
b3:6b:c4:39:62:e8:ca:ae:a6:60:d1:ad:9f:a3:8f:
c0:01:3b:4a:22:49:b5:5f:c4:13:64:c8:ad:2c:43:
ed:27:5e:44:94:fe:51:66:c4:9e:a4:31:64:96:86:
9b:55:ff:df:81:05:1b:95:4f:39:78:89:67:53:2a:
43:e1:0b:c1:d3:4b:b2:d6:67:dd:75:1c:8e:65:a9:
ee:2f:66:f9:3c:10:2d:62:16:40:1b:94:9e:f3:9a:
6b:ce:f1:ae:dc:a4:d0:1b:ec:1e:16:f4:94:b9:6c:
aa:3d:ce:3c:1f:98:63:4e:cd:b9:e4:e1:0e:b0:f5:
5b:bf:c7:17:58:8f:f7:55:76:85:a9:1d:a4:23:ee:
a1:0a:88:7f:6d:bc:6f:b7:f5:6f:06:e9:e2:af:86:
e7:7e:b2:a8:be:3d:23:5c:7a:fd:29:31:e5:50:5c:
79:72:02:1e:c8:25:6a:5f:c6:5c:7f:fe:95:75:a1:
e0:3d:42:f2:2c:33:97:3e:e4:0a:ff:ed:4a:4e:d6:
3f:20:82:5d:64:e1:2c:e4:23:33:63:bd:3c:39:56:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:6F:7D:D0:F1:5A:5F:BC:0E:3B:EC:A0:C5:24:10:21:23:CC:03
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:b9:87:d2:ab:72:4b:42:3c:a6:ea:b5:e8:9a:b5:2c:d7:
4c:4f:02:60:1e:3a:fd:62:9a:c0:88:b6:d6:28:48:2c:bd:78:
1c:87:7b:f6:ea:87:2f:fd:76:1b:06:5f:cd:76:ba:60:ee:f7:
cf:5c:c7:8e:95:cf:11:d5:bb:f5:a0:62:8d:27:4f:0d:d1:72:
26:6e:7c:b0:a7:14:3b:4c:a7:8a:d7:af:bc:6c:5f:4c:9d:83:
9c:6b:c9:57:5e:79:65:cd:e7:51:21:1e:7d:87:04:2f:de:e2:
2b:65:21:5e:39:c9:9a:55:1a:24:34:e3:23:ba:5d:d0:66:a4:
c0:b6:1a:b7:c5:ed:e3:4f:31:95:1f:d3:7f:af:1d:e3:54:db:
b4:d8:9b:b8:de:c6:da:bd:9b:b9:64:96:f1:3d:5c:d4:c2:3c:
47:18:1b:48:64:3d:7c:5f:bd:ce:dd:e0:68:e0:3e:c9:a3:9a:
0b:95:ad:15:69:89:fc:18:df:c6:dc:6a:d9:ae:ab:c5:5c:03:
76:bb:58:92:42:98:8b:10:ad:f8:16:75:45:78:1e:03:0e:54:
3e:02:19:d8:de:56:b2:85:4d:e9:31:13:96:f8:27:88:35:ee:
9e:fc:2a:b9:16:65:5f:0f:1d:58:73:48:7a:e0:4f:58:10:b1:
1a:07:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:34 2025 by rpki-client