Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: hycpoKJi13dsfOHXvdpaHVNWuRA8/3d19tIT0Evluhg=
Subject key identifier: 92:BF:7A:FA:A0:EC:5E:BC:A4:03:48:41:31:74:FA:08:42:7C:AD:61
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0199FE47664DBEA34DF5752FA629EBD6F21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 21:01:55 +0000
Manifest this update: Sun 19 Oct 2025 21:01:55 +0000
Manifest next update: Mon 20 Oct 2025 21:01:55 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 5P4hBIqtrj5TM1R856Hj4IuUHPiqn8yhR4BknQyqvPE=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:66:4d:be:a3:4d:f5:75:2f:a6:29:eb:d6:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Oct 19 21:01:55 2025 GMT
Not After : Oct 20 21:01:55 2025 GMT
Subject: CN=92bf7afaa0ec5ebca40348413174fa08427cad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:91:e8:da:fe:3f:75:40:d7:44:db:e8:19:
34:cf:fb:4a:1b:46:de:c9:d7:80:5a:4d:a7:79:1c:
3f:d3:c0:a9:dd:16:be:f8:66:95:2f:34:a6:8c:61:
a1:24:d2:88:9c:fa:0e:c8:47:0e:1e:02:a5:43:a2:
49:68:24:1c:69:f4:18:d0:7a:ee:51:80:a9:c7:a7:
13:0c:66:14:3b:31:7a:c8:06:2f:69:09:f6:cf:74:
4e:1c:7e:a0:e8:66:34:0f:fd:4d:81:2e:77:ac:8f:
bf:7b:f0:03:d4:13:51:b6:4e:5a:09:1c:50:2e:b1:
9f:e7:dd:b3:62:19:fc:8e:89:6e:74:02:47:d4:ee:
2f:da:95:e6:5f:5d:74:a5:4d:cd:a3:8e:e2:c4:fc:
21:e3:f2:67:b9:cc:04:5c:be:d1:1c:19:7b:8e:17:
9a:30:39:bf:5d:74:a4:b4:e7:b6:d4:a4:93:41:d5:
1f:a2:91:24:2b:a3:b4:ac:a0:12:07:eb:34:da:53:
d3:6b:1d:65:0c:0c:8b:ff:e0:4c:70:c7:60:04:30:
b5:e8:f6:a1:c6:14:ad:09:a8:68:92:62:4c:81:88:
39:1c:a1:8a:3a:cb:84:fa:24:f6:6b:c0:39:bb:27:
3e:f7:68:1d:54:b0:53:63:c8:54:3f:3a:15:6e:14:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:7A:FA:A0:EC:5E:BC:A4:03:48:41:31:74:FA:08:42:7C:AD:61
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:56:8d:ff:d4:72:3c:2b:d8:73:19:23:2a:23:9b:8f:93:56:
85:f2:8f:45:f0:84:08:4f:fc:09:d8:6e:6c:7c:69:75:e4:99:
ec:79:7c:b5:89:4f:1b:f7:a6:72:c4:9b:dd:dc:55:8b:0d:a3:
60:f5:88:3a:ea:a4:23:6b:22:57:76:a9:9e:e8:12:5a:bb:31:
f3:f8:85:93:d2:8b:24:4f:b0:a1:28:f7:e0:00:39:c9:e0:45:
7a:8b:62:a6:e7:25:5a:75:ee:fe:f5:be:f0:18:e5:ae:a2:4f:
88:3f:5b:98:b4:ad:67:6b:83:65:41:f1:ba:42:5c:95:a4:65:
3d:e3:19:8e:66:24:af:f7:04:ff:0e:a2:8b:24:50:ad:10:77:
d3:08:37:a1:4a:b7:f1:61:e4:24:f6:7d:f3:8f:ee:39:79:29:
c9:bf:15:dc:a4:26:87:fb:57:c0:3f:99:f6:e8:6d:2c:a4:6d:
03:a3:98:d7:c1:3b:b8:76:95:3b:83:41:56:ba:36:d1:51:30:
8e:b9:a7:93:fb:47:8c:b2:c1:c2:72:97:55:56:2a:7c:62:f8:
60:87:0c:c5:68:fa:ec:42:5e:07:14:d0:ed:f8:13:2e:2c:a6:
11:d7:b8:bd:30:9e:c4:f1:7f:73:c9:df:1b:cf:aa:68:9e:81:
8a:ae:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:25 2025 by rpki-client