Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: CKJlsQY+BA0gYlTdee8mZ6jC60Ti/E0ZrmC2UHAVk+o=
Subject key identifier: 93:33:15:8E:FF:99:7B:B5:A5:71:6E:BD:BE:37:DD:24:B0:F3:84:26
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 0197B77C85025F31576B51E1FD26E34F96CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 1294
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: vPlCw1cIMJKKn0oCCZyrGmswq1or/VEeFh8G+IMwpgg=)
2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:85:02:5f:31:57:6b:51:e1:fd:26:e3:4f:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=9333158eff997bb5a5716ebdbe37dd24b0f38426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:de:06:99:c4:3d:38:a3:3c:21:59:ff:20:
25:e4:92:cb:d7:4e:a8:1d:b8:d0:7c:a7:d8:cc:1e:
7b:78:8a:84:73:19:36:54:66:d1:d4:ef:21:7b:32:
e2:8e:d1:2f:32:1a:09:f8:58:d3:e7:bf:5d:f4:ce:
e0:b3:f5:82:67:d3:9e:3f:fe:d6:3c:47:69:b1:b5:
92:39:44:ce:e3:f5:60:5a:62:a6:b7:a1:a7:dc:10:
2b:17:07:4d:5b:38:2a:5f:e4:ce:0f:d2:32:9a:f2:
25:74:9e:d1:31:cf:35:4c:90:fd:63:49:68:38:1c:
6b:d4:35:ea:55:6e:45:35:51:35:e6:be:57:be:d0:
f2:53:70:cf:52:e5:bf:8d:8e:e4:32:43:13:b4:21:
d4:3f:87:83:d2:1f:24:78:96:ed:26:14:18:e7:81:
41:d3:8f:b5:2d:ab:f4:cf:fc:ce:2f:53:b9:ab:79:
6e:14:23:12:4b:7e:5b:44:bf:c1:ff:3a:95:8a:14:
83:da:5c:a7:46:ea:c9:17:01:7a:b4:59:4b:b0:00:
98:d6:e0:55:25:01:f9:4b:c9:a3:63:85:d2:a7:1e:
e1:e0:5c:d9:35:eb:c1:29:b6:0a:a3:ac:99:20:1d:
25:fc:bf:ab:85:fd:6e:f8:1b:f9:8d:97:94:be:1f:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:15:8E:FF:99:7B:B5:A5:71:6E:BD:BE:37:DD:24:B0:F3:84:26
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:18:3e:fe:db:1f:d6:52:cc:36:6e:b3:b9:67:30:43:9e:
2e:9e:a4:44:a1:2d:ae:5f:0d:c9:0e:e9:fb:8e:a7:f7:41:e3:
30:35:15:44:e0:fd:96:1f:5f:59:df:9b:56:fc:70:04:b9:29:
f8:6a:df:b0:34:dc:14:7d:f6:40:0b:78:a7:6c:02:b3:3b:f6:
8e:0d:8a:ac:86:12:ac:c1:e8:57:f5:cd:f7:d5:25:8e:2c:bd:
94:7f:86:9d:ba:12:4c:2f:7a:bf:80:84:7b:43:f5:8f:42:88:
13:7c:31:c8:f3:7a:4f:72:35:2f:ea:a8:72:f8:f2:69:93:72:
96:d7:11:91:0c:45:9c:6b:b1:de:41:76:f1:f1:0b:b0:a8:67:
66:d8:ef:fd:b0:11:fe:38:cd:0f:17:ca:33:b7:4b:ad:67:5c:
c0:de:18:f5:8c:3f:9d:72:46:24:42:c1:51:5e:4a:83:ef:db:
73:e9:8a:90:23:54:96:24:91:91:68:b1:8a:d3:ba:29:7e:a9:
b7:dd:81:0e:f4:5e:56:46:b7:99:ff:3e:38:63:af:64:d3:c9:
fc:aa:16:d4:d3:3d:da:99:77:46:80:d7:44:d7:1b:50:78:73:
22:59:53:90:77:8b:1e:4f:aa:bf:64:a4:50:cb:a3:63:c1:e5:
e5:ad:38:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIUCXzFXa1Hh/SbjT5bPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh
MTY2MWMwHhcNMjUwNjI4MTcwMTIwWhcNMjUwNjI5MTcwMTIwWjAzMTEwLwYDVQQD
Eyg5MzMzMTU4ZWZmOTk3YmI1YTU3MTZlYmRiZTM3ZGQyNGIwZjM4NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JPeBpnEPTijPCFZ/yAl5JLL106o
HbjQfKfYzB57eIqEcxk2VGbR1O8hezLijtEvMhoJ+FjT579d9M7gs/WCZ9OeP/7W
PEdpsbWSOUTO4/VgWmKmt6Gn3BArFwdNWzgqX+TOD9IymvIldJ7RMc81TJD9Y0lo
OBxr1DXqVW5FNVE15r5XvtDyU3DPUuW/jY7kMkMTtCHUP4eD0h8keJbtJhQY54FB
04+1Lav0z/zOL1O5q3luFCMSS35bRL/B/zqVihSD2lynRurJFwF6tFlLsACY1uBV
JQH5S8mjY4XSpx7h4FzZNevBKbYKo6yZIB0l/L+rhf1u+Bv5jZeUvh+7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMzFY7/mXu1pXFuvb433SSw84QmMB8GA1UdIwQY
MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt
OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1
LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkIYPv7b
H9ZSzDZus7lnMEOeLp6kRKEtrl8NyQ7p+46n90HjMDUVROD9lh9fWd+bVvxwBLkp
+GrfsDTcFH32QAt4p2wCszv2jg2KrIYSrMHoV/XN99Uljiy9lH+GnboSTC96v4CE
e0P1j0KIE3wxyPN6T3I1L+qocvjyaZNyltcRkQxFnGux3kF28fELsKhnZtjv/bAR
/jjNDxfKM7dLrWdcwN4Y9Yw/nXJGJELBUV5Kg+/bc+mKkCNUliSRkWixitO6KX6p
t92BDvReVka3mf8+OGOvZNPJ/KoW1NM92pl3RoDXRNcbUHhzIllTkHeLHk+qv2Sk
UMujY8Hl5a046g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:54 2025 by rpki-client