Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: P4/MX2WX9yOcxhL6jxgjn64QS/tDwARn+fJVdgfUKR8=
Subject key identifier: 8C:A6:03:9A:5F:BC:D0:97:FA:24:9F:88:8C:D9:18:CD:D2:66:5C:B0
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0197B8C5B7CF2885AACDC272B511EEE2BEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 1293
Signing time: Sat 28 Jun 2025 23:00:54 +0000
Manifest this update: Sat 28 Jun 2025 23:00:54 +0000
Manifest next update: Sun 29 Jun 2025 23:00:54 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: Nxms62ssdJ1MH8HAdReBwino/R+RhHlQM0ki4Xg3nns=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b7:cf:28:85:aa:cd:c2:72:b5:11:ee:e2:be:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jun 28 23:00:54 2025 GMT
Not After : Jun 29 23:00:54 2025 GMT
Subject: CN=8ca6039a5fbcd097fa249f888cd918cdd2665cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:9a:7e:81:ce:97:b3:b7:d1:f2:69:09:e2:
91:25:6b:a7:95:ae:a7:3f:d9:73:73:87:65:4c:47:
2f:f0:5f:b6:59:8a:32:21:d6:2c:fc:d9:f3:f8:bb:
ea:b0:79:ad:18:5e:69:bb:b2:d3:fb:41:ad:a6:e6:
b1:b2:5a:31:fb:28:b3:a5:88:68:c9:58:94:35:2d:
01:d3:d6:43:55:e1:54:ab:3c:b7:57:e1:d1:be:49:
c8:a2:dd:6e:f0:2b:94:15:1e:54:42:e2:60:4c:d5:
13:a1:81:a1:1b:fd:22:7b:33:dc:1a:5f:a8:0e:4a:
87:e8:99:b1:92:7e:dd:ba:dc:7f:80:90:4f:3d:08:
70:0b:74:4c:0e:f1:4f:18:ee:d5:90:b4:29:98:23:
27:2b:a4:19:ee:75:52:5c:c4:82:77:97:dd:0d:eb:
e9:d4:79:d1:be:3a:f9:ab:c8:f1:01:07:fe:59:8d:
10:66:04:ee:a6:3d:15:1b:2e:37:0c:31:e9:f9:fc:
7e:61:0c:33:43:f5:45:79:9c:3b:57:5b:4f:61:8d:
58:a5:5b:82:b6:44:33:e9:93:02:55:b3:c6:a9:c8:
91:47:a9:ca:ee:01:57:d2:30:63:7d:96:6a:09:8e:
e0:97:08:e1:a3:0c:1f:2d:de:a3:25:f0:64:73:13:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:03:9A:5F:BC:D0:97:FA:24:9F:88:8C:D9:18:CD:D2:66:5C:B0
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:50:ef:96:8c:39:92:e5:b1:6a:7d:0b:9f:55:0f:97:7d:
7d:c9:60:9a:42:4c:7d:95:4f:97:ec:16:e5:4d:f0:ba:09:1f:
62:e4:85:48:82:91:67:53:c3:e7:ef:5f:51:9e:ba:26:5d:14:
15:8c:3d:c1:a3:38:ee:a1:f2:2a:84:2a:2b:e8:b0:7a:b2:d1:
4d:4d:6d:47:f1:fe:b8:6c:1a:79:42:f5:7e:41:af:e3:79:de:
22:7d:5e:ce:4f:93:14:68:a9:9e:4a:f7:c3:a4:53:07:57:75:
fb:61:e6:67:a8:cc:34:b3:fc:88:2f:f0:d4:ed:9d:aa:08:75:
cf:41:9a:ee:d7:2d:7b:87:17:b5:ef:f8:ba:64:f1:c2:8b:6d:
8d:eb:e4:c0:45:4c:79:17:f7:e4:64:f6:95:ac:5a:74:58:f3:
f2:52:ab:5b:6b:3d:6f:24:0a:f6:cd:5a:0c:7c:62:c7:99:03:
2d:42:26:75:7c:95:a7:ae:7d:b2:a0:92:24:f1:dd:a1:93:93:
ff:ea:b5:22:14:7a:6b:0c:ce:aa:b2:6c:49:fb:8e:4d:3f:98:
0f:de:7a:c4:4d:18:19:5c:7f:47:92:85:30:15:3d:31:f0:ec:
53:01:59:3e:66:57:66:a5:39:ed:5a:7f:8c:63:6a:11:b8:87:
ae:e2:f6:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xbfPKIWqzcJytRHu4r6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz
ODBiMmIwHhcNMjUwNjI4MjMwMDU0WhcNMjUwNjI5MjMwMDU0WjAzMTEwLwYDVQQD
Eyg4Y2E2MDM5YTVmYmNkMDk3ZmEyNDlmODg4Y2Q5MThjZGQyNjY1Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS6afoHOl7O30fJpCeKRJWunla6n
P9lzc4dlTEcv8F+2WYoyIdYs/Nnz+LvqsHmtGF5pu7LT+0Gtpuaxslox+yizpYho
yViUNS0B09ZDVeFUqzy3V+HRvknIot1u8CuUFR5UQuJgTNUToYGhG/0iezPcGl+o
DkqH6Jmxkn7dutx/gJBPPQhwC3RMDvFPGO7VkLQpmCMnK6QZ7nVSXMSCd5fdDevp
1HnRvjr5q8jxAQf+WY0QZgTupj0VGy43DDHp+fx+YQwzQ/VFeZw7V1tPYY1YpVuC
tkQz6ZMCVbPGqciRR6nK7gFX0jBjfZZqCY7glwjhowwfLd6jJfBkcxMWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIymA5pfvNCX+iSfiIzZGM3SZlywMB8GA1UdIwQY
MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt
NGJhM2ZjMzQ4NGNlLzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl
LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTVQ75aM
OZLlsWp9C59VD5d9fclgmkJMfZVPl+wW5U3wugkfYuSFSIKRZ1PD5+9fUZ66Jl0U
FYw9waM47qHyKoQqK+iwerLRTU1tR/H+uGwaeUL1fkGv43neIn1ezk+TFGipnkr3
w6RTB1d1+2HmZ6jMNLP8iC/w1O2dqgh1z0Ga7tcte4cXte/4umTxwottjevkwEVM
eRf35GT2laxadFjz8lKrW2s9byQK9s1aDHxix5kDLUImdXyVp659sqCSJPHdoZOT
/+q1IhR6awzOqrJsSfuOTT+YD956xE0YGVx/R5KFMBU9MfDsUwFZPmZXZqU57Vp/
jGNqEbiHruL2xA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:50 2025 by rpki-client