Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: 4udl5+PhrJoPvDF6hMQEThNUpFOTp+cTeBKLLT3hONY=
Subject key identifier: 2F:2A:C1:6E:1D:C9:FE:98:1F:75:93:66:BC:B7:53:17:71:A1:76:2E
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 0199FDD971532CD149002B644A086B07F840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:49 +0000
Manifest this update: Sun 19 Oct 2025 19:01:49 +0000
Manifest next update: Mon 20 Oct 2025 19:01:49 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: kISIT9f83azzvQHLGUskoXeex/zIw1ZCWonYvKwetsM=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:71:53:2c:d1:49:00:2b:64:4a:08:6b:07:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Oct 19 19:01:49 2025 GMT
Not After : Oct 20 19:01:49 2025 GMT
Subject: CN=2f2ac16e1dc9fe981f759366bcb7531771a1762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:34:52:6a:50:7f:9b:2c:3b:2b:6b:fd:70:
17:6f:79:e4:74:88:24:30:32:c3:8c:bd:48:e3:8e:
be:0c:92:70:e5:8e:d5:7a:d3:e7:0d:8b:d0:ad:58:
27:33:e6:92:49:64:65:65:78:d0:79:24:85:e0:e6:
4f:e3:96:6d:29:15:f5:ac:4b:73:a8:e8:96:d7:5c:
8e:11:81:cf:6e:be:b5:b9:cd:ea:04:93:59:7d:75:
e5:dc:f4:5c:c2:02:77:ea:6d:f7:bd:79:e3:40:96:
e1:be:95:19:e4:ab:4a:12:30:5c:cc:e8:62:01:54:
e5:27:ea:df:04:d3:ef:b6:36:4d:08:e3:4f:d6:8a:
ec:1a:81:42:dd:e0:ac:20:a2:8b:32:b9:90:5b:08:
5b:dd:70:8e:88:fa:d5:0d:85:fc:d6:b6:c0:92:f7:
8d:42:0d:8c:50:7f:af:0f:d2:82:43:84:71:68:ef:
9b:b2:42:cc:a4:72:65:13:a6:31:af:3d:d7:7b:a1:
bf:7c:55:d5:45:0b:c3:b2:40:ec:12:65:88:50:2d:
9e:9d:62:f4:49:71:05:df:81:91:92:7e:20:cc:33:
92:1a:ce:9c:1a:6a:a3:3e:af:95:a0:4c:12:8a:36:
49:56:84:d0:57:16:78:39:d2:4e:35:bd:6b:09:79:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:C1:6E:1D:C9:FE:98:1F:75:93:66:BC:B7:53:17:71:A1:76:2E
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:f5:3d:81:6c:f3:1d:18:31:fb:53:8c:c7:47:28:9a:a3:
3b:9c:63:b8:54:1e:ed:ae:1e:e1:29:01:f1:41:a5:27:fc:41:
ae:65:11:79:9a:8c:f5:56:63:4d:07:5e:ed:b4:b8:06:2f:a0:
7b:30:f6:83:c0:42:86:7d:62:5d:95:51:a0:76:18:36:df:7b:
5b:2d:67:de:ec:4a:57:42:87:8d:22:8b:2c:81:59:0f:56:c5:
5b:1b:1f:23:df:87:e0:4a:49:a9:c6:d8:36:51:94:64:58:ef:
80:a1:c4:5d:79:45:c1:c8:43:b4:9c:2f:9f:36:cf:19:35:6b:
75:ce:a5:b5:33:f0:e2:99:a6:8a:05:16:9c:77:62:94:4f:c7:
70:2c:48:3a:ab:1e:c2:17:27:e9:d3:58:b8:2b:63:cb:49:b1:
c7:4c:14:08:13:4e:64:b2:51:42:e0:7f:ba:48:f0:3f:7f:cf:
31:6e:74:18:5d:c1:70:ac:6f:96:74:84:1f:47:3e:61:1e:07:
cc:fc:4e:d1:a3:f2:51:6c:7f:f4:57:5f:b3:0a:db:4c:53:86:
30:55:1d:87:b6:d9:ce:18:f4:da:f7:17:e3:fc:11:e3:87:e6:
23:ac:2e:92:61:ce:2e:a3:7c:09:cf:d1:a0:81:dc:d8:74:6e:
6d:0e:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:38 2025 by rpki-client