Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: vyhBSqTekbfqcgbeUX0NRe4wmJ2Rf7T1PBIdF7ZY0Ug=
Subject key identifier: A2:E9:CD:0C:76:27:41:DC:72:26:ED:28:BE:55:E0:84:0D:99:94:C2
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0198D4E0712369849C9D3EC0C966CF686054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 60CDIC7h40XMAcZGsQY0WzqF2e7iKA9yinDljv0sflk=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:71:23:69:84:9c:9d:3e:c0:c9:66:cf:68:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=a2e9cd0c762741dc7226ed28be55e0840d9994c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:64:09:d1:a8:bd:39:2b:65:0a:d3:29:09:
f2:17:d2:72:ff:30:33:65:4b:5f:c8:cc:03:0d:1a:
39:1c:fa:f5:0e:6e:b2:94:2d:6f:88:fe:d4:8e:ed:
9a:dc:a5:b9:ff:25:04:8e:40:30:c4:79:d2:80:fc:
d8:22:70:7c:a8:19:a6:ea:a1:51:20:e4:56:e3:77:
40:a6:8a:59:e8:94:62:16:9f:43:f2:e7:20:87:7c:
06:17:df:5f:7b:ae:a4:f1:6b:59:75:37:62:82:0f:
11:3e:bd:ed:24:ac:a6:f0:9e:87:e8:c0:69:1d:fb:
39:3d:0d:f1:19:0e:1b:62:58:8c:64:41:a2:d7:94:
80:d6:33:23:8d:fb:3b:2d:49:1b:38:d8:e4:e7:47:
78:3a:06:03:6a:ec:6d:27:61:e0:ac:a0:a9:7f:0b:
dd:33:64:e9:87:8c:73:46:69:2c:38:d4:8a:62:e9:
a8:1c:c9:3d:9d:66:66:ac:d6:ff:e6:be:4f:a9:76:
09:81:e2:fc:62:64:45:b9:d0:5d:8f:1d:9b:11:f2:
d1:02:ef:5d:75:c6:05:e6:7f:2c:14:eb:a8:2e:82:
96:39:b3:c5:fa:67:50:64:82:ae:4e:06:d7:2c:e7:
0e:30:52:a1:98:15:c9:4a:be:04:ee:37:66:c8:39:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:CD:0C:76:27:41:DC:72:26:ED:28:BE:55:E0:84:0D:99:94:C2
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:36:a5:fb:0c:2d:51:0a:50:eb:18:4e:be:a6:92:19:52:
f5:0c:86:1c:76:c2:4b:ad:ee:67:42:bc:35:3b:f6:cd:eb:71:
c3:19:5f:08:72:c5:f9:2c:08:a1:4b:c9:b7:b2:3a:08:15:e7:
ee:43:77:c7:14:1d:6b:11:c3:1b:fa:ad:fe:7e:06:57:53:ec:
32:a5:29:51:6c:7d:96:71:70:22:8c:9d:7b:6b:4d:a7:f2:d2:
cb:0e:3a:dc:78:21:32:58:52:45:ed:85:19:cf:ab:13:42:92:
d0:13:c1:4d:79:ea:1c:21:00:3d:3f:25:9e:a6:7e:f5:1d:71:
bb:10:d4:5a:67:b5:19:ba:2c:86:52:75:5c:7d:94:30:67:0d:
a8:58:96:55:0a:53:f4:32:49:96:47:8b:62:6f:88:f6:7b:e2:
ac:4c:db:08:ea:5b:14:5e:0a:ee:f2:e0:07:71:b5:12:bb:42:
88:23:af:cd:6d:c6:69:e7:0c:95:d5:80:b3:90:de:76:68:99:
f5:aa:24:bb:79:58:c0:25:9c:2d:7b:d3:2d:4f:62:17:e6:85:
4b:16:bd:df:3a:33:4c:4b:ea:97:08:f2:87:18:b5:3a:e5:3c:
fb:bf:84:51:21:7f:75:dc:e0:3b:cc:c0:4e:70:dc:66:c2:51:
da:ed:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:27 2025 by rpki-client