
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: UrnWD6xSViz4cY3bSzIW8dqVcyej27/AMml3A//nzpg=
Subject key identifier: 4E:1D:6E:FF:3A:76:9D:15:4A:69:47:9D:D8:9C:01:AD:81:9A:83:EE
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0199FAD7D1E86739EBE5BEFA848C5DC9DA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:11 +0000
Manifest this update: Sun 19 Oct 2025 05:01:11 +0000
Manifest next update: Mon 20 Oct 2025 05:01:11 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: 6PLUS5AwNG0rw0RTBMf+230cu+hIsTBP5gN6uH0tLSQ=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d1:e8:67:39:eb:e5:be:fa:84:8c:5d:c9:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Oct 19 05:01:11 2025 GMT
Not After : Oct 20 05:01:11 2025 GMT
Subject: CN=4e1d6eff3a769d154a69479dd89c01ad819a83ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:5c:01:61:75:ac:ad:cf:3f:af:bb:12:69:
a8:6a:80:60:53:40:0b:66:d9:5c:73:c0:5a:30:ef:
3a:da:6c:ba:43:45:aa:77:b4:4f:68:bb:68:34:50:
0c:9e:68:08:c2:d3:56:d1:eb:0b:cd:c2:ec:4b:88:
d2:6e:61:5f:6e:38:6d:16:8b:46:4b:bb:c3:d2:66:
72:3f:83:b7:29:d3:65:f3:9c:c5:5a:37:0b:fa:cb:
96:6b:09:2a:17:fe:2e:d1:2f:f0:3a:3f:a1:8d:fc:
ff:80:68:92:74:07:db:ba:95:a3:ad:ac:0b:6d:4b:
68:0d:8c:49:19:bb:d7:69:94:84:45:e4:b2:b2:e9:
39:bf:78:c6:26:bb:98:1d:c1:a1:f0:57:1c:06:90:
a1:06:25:0d:ab:36:06:3a:c6:f5:e6:28:05:d9:b9:
1e:28:23:c3:43:57:20:01:ee:16:56:a4:df:c0:72:
fd:ac:41:aa:5b:45:03:5b:37:71:96:e3:b2:04:42:
94:06:4b:71:78:23:b1:6a:24:88:cd:8a:3b:76:d2:
be:58:51:36:f5:7b:47:75:9b:6f:54:22:67:28:3f:
ec:bf:cf:85:6c:ba:e5:be:fc:0b:17:29:f8:ff:b9:
8e:21:db:b3:bb:30:c0:f6:1f:30:97:7c:05:72:66:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:6E:FF:3A:76:9D:15:4A:69:47:9D:D8:9C:01:AD:81:9A:83:EE
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d1:53:2f:ed:ad:81:03:02:e0:cb:98:85:e6:31:56:42:ea:
4c:e1:bf:3d:e9:04:04:ff:14:55:ba:5d:ee:75:d4:bf:a6:3c:
bd:66:be:0d:6d:6c:5b:a4:6f:8e:a7:07:68:ea:cd:09:5b:6c:
ee:56:1a:60:dd:58:4c:75:80:23:c0:a9:d4:68:65:73:d6:a5:
19:29:7e:a5:f0:2f:8c:22:24:5e:3b:26:28:55:3c:ca:24:e0:
b2:80:78:f3:14:1a:80:60:3e:71:73:2d:86:e1:1d:57:5f:2a:
99:1e:a1:16:3a:6b:cc:38:d7:5b:a0:eb:2b:29:91:77:18:c5:
11:2c:c0:de:f0:01:85:7c:8a:02:7c:37:84:eb:8b:cd:ad:1d:
a0:f6:84:b5:60:f3:7e:27:17:60:55:1a:0b:63:c7:ba:bc:fd:
2c:5b:e3:2d:44:fa:37:23:c1:18:d3:3c:4c:6a:69:07:13:72:
85:d7:cb:53:75:6d:a8:e1:50:ae:aa:e1:ae:70:55:cd:10:b6:
ac:73:56:95:50:49:2a:3e:0c:e3:a0:99:80:c5:78:05:ea:8e:
26:d3:bd:32:0d:eb:1b:3a:6b:6c:7e:01:e7:39:80:5d:c1:c6:
f9:88:21:7d:33:54:55:6c:25:48:25:d7:bb:71:42:ef:e8:1d:
2a:c5:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:34 2025 by rpki-client