Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: k5NrlzOCQmIZjNgxztbBCkKpldjMTS0Iz29Fz1OQ0xk=
Subject key identifier: DB:3E:DD:01:29:F3:9E:A3:17:D9:2E:E6:AC:4C:3C:B6:B4:69:01:2D
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0198D73BD7518AF21F42B92831AC4AC6EBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: 60HA+wMaq0iekZtWz7lmkBK+rd5Iw0xQJqWIKMjcj0E=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d7:51:8a:f2:1f:42:b9:28:31:ac:4a:c6:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=db3edd0129f39ea317d92ee6ac4c3cb6b469012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:cb:97:99:bc:a1:ef:e4:97:0c:cf:f8:fe:
ca:6a:d5:54:dc:4e:1d:e2:dd:88:df:ab:fd:40:54:
b2:48:f2:31:e7:54:6a:cc:44:2a:3d:54:2f:19:5f:
fe:17:d3:e7:3e:43:aa:d3:6c:dc:de:3f:dd:0a:62:
91:76:6d:ec:5f:90:02:55:b6:ba:b3:e1:ca:98:c6:
36:95:ec:fc:b9:c7:49:80:f1:25:c6:7e:88:b5:22:
c3:82:05:93:64:07:af:ee:8b:6f:ac:ef:9d:9d:36:
8d:75:81:3a:79:66:7a:c2:72:61:9c:7b:4e:d0:2b:
74:0e:33:9d:28:05:0a:55:74:49:b9:9c:56:54:a3:
9d:7e:d6:07:a9:6e:91:01:5a:f9:9c:26:82:cf:76:
ff:1f:d0:4f:83:25:8d:44:f4:c7:22:66:38:1c:f8:
f5:bc:7b:18:fb:3a:ad:c7:0b:26:61:af:58:00:55:
54:aa:33:e3:fc:10:7f:47:f4:73:fd:f7:7d:6c:48:
a8:fd:25:fd:8e:55:a3:f5:a7:ba:74:c5:ee:66:b1:
79:60:c7:00:b9:65:85:7d:5e:92:8c:6b:50:c8:d0:
c0:bb:3c:31:b4:81:e9:08:74:1a:1f:a9:ad:18:3a:
7b:44:21:16:92:73:61:d2:3f:fe:9f:46:41:ac:4d:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:DD:01:29:F3:9E:A3:17:D9:2E:E6:AC:4C:3C:B6:B4:69:01:2D
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:a6:e2:5c:5f:d4:08:11:88:44:91:3f:61:8a:b6:13:ea:
1b:99:a8:14:50:13:19:97:ae:2c:98:31:c7:7c:d3:64:02:40:
24:5f:35:7e:e1:c4:22:2c:03:51:e0:0a:70:22:8e:43:28:0b:
06:f2:54:85:bf:47:4e:8f:3c:2a:95:60:c2:ea:d9:8e:75:a6:
04:e0:48:8a:c1:9f:da:93:2b:35:36:8f:35:b6:52:92:cd:90:
fd:c8:b3:64:c3:60:47:c1:cf:89:55:26:c1:6e:49:5d:d0:23:
a8:70:7a:91:72:f8:4d:c1:f6:f8:74:8c:68:03:f3:74:1b:45:
a9:6f:d5:9e:34:be:17:18:37:a6:da:f3:5b:92:06:33:34:50:
4a:58:01:75:9a:a0:5d:47:14:39:39:06:6d:35:13:8a:62:32:
2e:31:48:96:5d:4d:0f:05:b2:c3:11:ee:18:46:1b:7b:8b:bd:
0f:4b:b0:d9:f0:a6:46:de:f0:90:71:78:7a:a6:8d:ce:15:8d:
ce:ce:f2:6a:2d:35:4e:ff:91:b0:63:25:15:39:85:d9:61:36:
06:5f:0b:11:c2:0c:99:46:f8:1f:be:5c:c2:08:5a:e1:d9:2f:
10:4e:f8:23:01:ae:31:36:9f:b7:68:62:66:ea:b8:39:a0:2b:
c9:e5:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:39 2025 by rpki-client