Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: k8/kLJV4QH5byYvtcImHMfRDRG/b/amhX310OP9abCM=
Subject key identifier: 81:87:47:78:20:AA:CF:DF:96:78:01:6A:82:6E:8A:41:90:67:83:64
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 01969ED1716E81EC55DAB0F30748683193B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 1201
Signing time: Mon 05 May 2025 05:00:48 +0000
Manifest this update: Mon 05 May 2025 05:00:48 +0000
Manifest next update: Tue 06 May 2025 05:00:48 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: wVfnfH3d/c8c5clltwTSo7zNr128x0tc6xNet6/NJw4=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:71:6e:81:ec:55:da:b0:f3:07:48:68:31:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: May 5 05:00:48 2025 GMT
Not After : May 6 05:00:48 2025 GMT
Subject: CN=8187477820aacfdf9678016a826e8a4190678364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:bb:27:f6:ce:83:46:d9:23:4c:6a:d5:9f:
b1:69:37:0e:3f:3f:a7:1b:9f:6d:6c:58:39:11:00:
e6:5d:23:25:15:b5:3d:2a:6d:dd:fc:96:25:ec:f9:
ca:78:86:5d:a8:1b:9a:00:1f:8d:07:36:8c:8e:85:
52:73:f5:3d:bb:1d:13:3f:2d:42:9f:b5:a2:76:33:
d1:0a:1e:e9:ad:4b:3d:8f:a2:c9:85:f6:ca:07:fd:
bb:cd:87:4d:ef:78:00:d6:7c:83:09:e2:f7:34:25:
6e:54:5f:00:1d:ac:1b:5d:d6:ee:71:7f:2b:3b:3d:
ed:a9:c9:54:a8:c9:83:fc:00:2a:47:6b:52:be:31:
33:e8:46:83:e9:df:1d:78:bd:8c:ab:1f:4f:ee:33:
e7:ea:18:2a:00:13:b6:77:07:ff:61:83:cb:79:1d:
b6:55:ff:2f:46:81:81:87:e5:64:16:5a:a7:ae:81:
a6:44:a5:bb:64:07:4b:01:53:a3:54:4f:46:b8:0c:
89:2a:b4:62:c9:c6:fd:e5:b2:14:23:dd:87:47:3c:
f1:4c:ef:b9:87:c7:dd:af:0a:3a:d2:56:a9:fe:37:
50:82:9e:51:ec:de:10:26:ec:84:56:77:cb:0b:90:
d8:38:58:f9:ea:fb:4a:a4:47:14:e4:a8:6f:04:df:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:87:47:78:20:AA:CF:DF:96:78:01:6A:82:6E:8A:41:90:67:83:64
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:d1:e7:68:b2:e4:97:4c:68:ed:1a:ef:30:8b:2f:cc:b7:
22:1f:59:f8:f7:a7:eb:c7:a1:07:d4:00:3e:3e:e8:e3:69:87:
f5:57:f6:aa:69:bd:04:8f:e4:01:7e:80:b5:0f:ea:58:cc:06:
d5:79:e8:92:d4:2f:40:d5:01:71:00:f0:5e:1c:78:57:1d:d0:
d7:0a:b5:50:bf:ab:65:5a:fe:d5:0d:79:9e:83:06:87:ba:6a:
0d:18:fd:47:bc:fd:6f:e5:11:35:c4:c6:83:e3:ba:0a:c4:a1:
0a:4a:84:ed:04:1f:9d:c6:ec:22:89:c1:75:be:66:61:72:27:
1f:c6:d3:1a:40:e0:f9:c0:c5:eb:80:e6:5f:65:5c:a9:28:20:
23:f9:60:99:54:6c:d0:b1:1b:32:68:50:0f:16:4b:71:f9:cc:
e4:ce:8a:ad:ab:b0:f0:77:d5:35:f8:f5:10:9d:ed:22:a7:6e:
f1:69:85:ff:0b:72:22:81:89:a5:b3:73:31:c9:00:19:77:9d:
7a:40:ab:3c:53:e5:70:dc:1d:34:bb:d9:85:1d:67:45:67:28:
dc:ab:ad:2e:a6:43:43:85:6f:aa:7b:eb:0c:0a:30:9f:b3:e7:
36:d0:0d:b7:5d:fe:bd:2a:a7:b0:21:a1:54:29:47:9d:95:0c:
e6:b5:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:12:48 2025 by rpki-client