Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: +cdtqi8kQC1GyI/FBmLNGTP1v8geEsLVNug+060BRCo=
Subject key identifier: 60:9F:BE:F2:42:6E:74:8D:D2:D1:C4:95:C1:A9:42:54:E9:F9:9D:F8
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0199FC214AB153EF2D2816FE7C35DB87D038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 13BF
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: YseKTHDZg+kwt3sJVjBY0YuJ2IMTbxIQ3kXSrMAnp2M=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4a:b1:53:ef:2d:28:16:fe:7c:35:db:87:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=609fbef2426e748dd2d1c495c1a94254e9f99df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:b0:a1:18:6a:80:74:d4:b5:4f:d8:33:80:
5d:87:3c:d7:45:cb:17:15:08:4e:90:4f:93:f6:d2:
54:65:4e:90:97:fd:7e:a1:d3:af:c5:fe:61:fc:32:
33:75:ce:eb:92:b1:3d:d4:71:00:ba:9a:9f:d6:76:
b0:6b:c1:e8:10:30:55:e6:cf:63:b2:d8:c1:91:87:
1a:0f:da:76:3b:1b:3e:52:9b:d1:f2:c6:33:41:ea:
0e:f8:36:9d:70:52:41:31:d3:17:6e:78:b5:5f:3b:
f3:e2:ba:a2:8e:eb:40:66:9e:a5:69:4c:b6:fd:87:
86:b8:0c:81:a8:da:0d:93:cd:12:b3:7d:88:16:92:
30:2a:04:c6:4b:ce:2c:4a:0b:04:d9:53:ce:66:fe:
9d:36:00:33:fd:b0:ca:26:89:bc:6d:cd:7a:12:1f:
7e:bf:af:f3:2a:b6:ff:fe:45:79:40:b8:c7:11:da:
a7:f8:36:8d:80:c8:45:99:9a:f6:17:f7:04:31:c2:
a9:fd:3c:81:cd:b9:03:88:85:67:44:b9:17:8e:74:
1e:70:75:66:06:da:8d:64:e0:0a:52:41:ca:a7:0e:
1c:9a:54:7c:d7:cd:5f:46:e0:c4:f2:fa:cb:80:65:
6a:aa:12:ee:3d:91:a8:a8:23:53:6c:b9:58:96:1d:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:BE:F2:42:6E:74:8D:D2:D1:C4:95:C1:A9:42:54:E9:F9:9D:F8
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:63:7a:61:c1:8f:78:f6:85:9d:02:c5:f3:4c:0b:f1:84:d2:
65:e9:68:2c:54:a1:b4:61:e0:c2:bc:d2:f1:ea:c9:51:e4:a1:
4c:a4:98:2e:06:db:6e:a7:c7:5b:e8:b8:89:35:c8:c0:47:55:
3e:2a:bc:1e:b9:aa:04:49:91:15:9a:04:24:cd:00:69:cc:76:
66:c5:fe:f8:6b:fa:d2:fe:08:33:da:45:d6:02:90:07:c5:ad:
8f:5c:2f:8e:f8:fa:ef:3d:a2:32:30:57:cd:e2:81:49:92:47:
2a:63:bf:e8:65:5e:cc:25:9d:1c:6f:89:04:ff:f1:ec:d1:d1:
f1:c6:99:84:3c:72:44:49:32:d2:b6:a9:cc:8a:2e:b7:aa:c1:
ad:9f:ed:2e:29:41:e7:2e:78:af:4a:c2:7a:28:4a:eb:d9:57:
ab:ed:93:0f:4c:5d:4e:99:e4:f3:d9:a4:d1:b1:39:17:d7:46:
23:76:65:1d:6f:93:13:d5:fa:24:5f:74:f0:eb:22:4e:3d:c9:
c0:a1:eb:9a:cc:b6:9f:91:e7:af:81:85:bf:45:f8:1f:f5:78:
4a:a9:ae:02:ed:6d:b4:d8:50:5c:09:0b:cb:63:3a:e4:31:de:
d6:39:27:49:ab:d9:7d:70:be:f2:57:88:8c:ff:55:ea:02:46:
57:d2:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:06 2025 by rpki-client