Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: 0zZ3Q5E7GhlCuIzdNVcFmDJc08eUwg3aAnFJ2rUxXmc=
Subject key identifier: 6D:99:82:0E:08:A7:E5:02:3D:4A:91:84:03:CF:A9:87:A3:08:6F:E8
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 0197B77C65150A0F640DDEFB512F8B4006CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 033D
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: zNScpmB9pxWXkbuVqmPZrL/tBiC1jTmeqb/Xjo7twFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:15:0a:0f:64:0d:de:fb:51:2f:8b:40:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=6d99820e08a7e5023d4a918403cfa987a3086fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:fc:e6:5c:38:39:9c:d2:56:1d:e5:e0:5c:
40:21:ba:ac:6b:f3:88:bc:dd:8b:9e:04:d7:23:45:
5b:8f:8f:57:b8:3b:03:1a:0c:26:b1:0f:01:b1:93:
6d:73:5e:3d:eb:d9:e3:07:42:38:22:e7:f2:59:ab:
04:65:7c:6f:dc:4f:22:6a:4a:88:9d:6c:19:7d:ec:
c9:b3:6e:2f:7d:85:4c:1e:aa:c5:2c:c1:fb:21:fe:
87:d6:e0:b8:d0:10:4f:aa:e7:4f:94:cc:40:95:da:
84:4b:18:11:00:9b:38:ba:80:c3:4a:6a:2d:83:e4:
1e:16:a4:bb:0b:fc:df:32:6d:47:5c:e4:e5:3c:86:
be:f0:7d:f3:2b:59:4f:34:d0:e5:30:c1:b2:94:cf:
da:92:05:66:f4:88:91:30:5e:8b:9f:2a:e5:71:3b:
77:ed:95:22:a6:3f:e9:8f:72:08:79:87:49:37:f4:
a9:c6:b5:4c:44:f4:37:1e:bb:36:b7:d9:81:ca:d2:
42:d3:92:d9:1e:34:ce:84:94:4a:a4:6c:b0:32:89:
15:9a:48:75:61:8c:e7:63:48:5d:c2:95:38:ce:22:
c9:ef:b6:e7:31:63:8e:d3:6e:f4:ab:59:8d:b9:fa:
4e:6e:b8:4e:0e:08:b3:5e:11:b7:70:38:3a:86:ae:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:82:0E:08:A7:E5:02:3D:4A:91:84:03:CF:A9:87:A3:08:6F:E8
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:b0:2b:9e:63:4a:40:43:e0:ea:13:58:37:93:d5:17:27:
ed:5c:55:6f:10:67:09:ba:50:88:92:6e:89:99:fa:41:de:50:
11:4c:f9:2a:ee:07:5e:3c:41:4c:91:79:f8:e4:98:19:bd:35:
e4:27:47:3d:eb:b6:93:e1:9c:50:2c:7f:05:c4:6e:9b:a3:38:
28:32:7e:dc:73:5a:bd:a1:c7:a9:fe:fe:87:2f:ea:ae:79:c1:
56:0a:c2:b9:dd:df:26:77:28:68:fc:be:25:7f:b1:ec:c2:f3:
89:c2:b3:80:f6:3f:d8:85:44:20:ce:a9:23:d1:50:19:fc:9f:
f8:2e:20:3a:fb:86:e4:97:2e:05:c8:8e:07:d2:86:84:17:2a:
4e:b0:5a:fa:ba:45:76:32:97:cd:c4:1a:92:63:f2:da:ae:8b:
88:49:b4:f7:7b:3f:ef:de:c1:21:3e:ae:00:f9:b4:b7:b8:bd:
e8:5a:b1:a9:27:bd:d0:5a:bd:a2:99:27:0e:2f:3c:1b:0e:a0:
1a:81:cf:dd:13:af:90:a6:9f:9d:71:b4:81:66:88:ea:74:b0:
08:e8:17:b7:3e:c1:30:c0:30:ed:6c:17:f5:e8:30:b1:19:6e:
e0:c5:a0:1e:92:c7:63:1f:23:cd:68:72:c1:f9:e0:89:c4:8e:
e4:8d:11:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGUVCg9kDd77US+LQAbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl
MTE3MmUwHhcNMjUwNjI4MTcwMTEyWhcNMjUwNjI5MTcwMTEyWjAzMTEwLwYDVQQD
Eyg2ZDk5ODIwZTA4YTdlNTAyM2Q0YTkxODQwM2NmYTk4N2EzMDg2ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsL85lw4OZzSVh3l4FxAIbqsa/OI
vN2LngTXI0Vbj49XuDsDGgwmsQ8BsZNtc14969njB0I4IufyWasEZXxv3E8iakqI
nWwZfezJs24vfYVMHqrFLMH7If6H1uC40BBPqudPlMxAldqESxgRAJs4uoDDSmot
g+QeFqS7C/zfMm1HXOTlPIa+8H3zK1lPNNDlMMGylM/akgVm9IiRMF6LnyrlcTt3
7ZUipj/pj3IIeYdJN/SpxrVMRPQ3Hrs2t9mBytJC05LZHjTOhJRKpGywMokVmkh1
YYznY0hdwpU4ziLJ77bnMWOO0270q1mNufpObrhODgizXhG3cDg6hq5WTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2Zgg4Ip+UCPUqRhAPPqYejCG/oMB8GA1UdIwQY
MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt
NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi
LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpKwK55j
SkBD4OoTWDeT1Rcn7VxVbxBnCbpQiJJuiZn6Qd5QEUz5Ku4HXjxBTJF5+OSYGb01
5CdHPeu2k+GcUCx/BcRum6M4KDJ+3HNavaHHqf7+hy/qrnnBVgrCud3fJncoaPy+
JX+x7MLzicKzgPY/2IVEIM6pI9FQGfyf+C4gOvuG5JcuBciOB9KGhBcqTrBa+rpF
djKXzcQakmPy2q6LiEm093s/797BIT6uAPm0t7i96FqxqSe90Fq9opknDi88Gw6g
GoHP3ROvkKafnXG0gWaI6nSwCOgXtz7BMMAw7WwX9egwsRlu4MWgHpLHYx8jzWhy
wfngicSO5I0RrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:33 2025 by rpki-client