Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: Dsq4UucW/Mzal4kEX2Ntyf3eGKIbUKivCvxDFM5mK2I=
Subject key identifier: 9A:94:65:1D:68:E3:E2:AB:0E:A7:B6:E9:35:23:DC:0C:8E:CD:7F:CC
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0197BAEAF736B701521A40A2ECDF2029D565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 09:00:50 +0000
Manifest this update: Sun 29 Jun 2025 09:00:50 +0000
Manifest next update: Mon 30 Jun 2025 09:00:50 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: GQ1jQ7XAapkgz6oheDRcJ+9ZEddzCSQ1L47X+RmGD3I=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ea:f7:36:b7:01:52:1a:40:a2:ec:df:20:29:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Jun 29 09:00:50 2025 GMT
Not After : Jun 30 09:00:50 2025 GMT
Subject: CN=9a94651d68e3e2ab0ea7b6e93523dc0c8ecd7fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:b7:45:d7:70:30:f9:f1:1a:1d:64:b9:c1:
68:68:86:86:86:f5:3f:64:0b:b9:00:a1:e5:bc:4c:
db:bc:64:8e:61:b1:3c:8f:81:2e:4a:03:be:c5:95:
d7:aa:5f:5c:1b:12:f4:7a:42:fc:fe:8a:d1:17:e9:
dd:f2:62:b4:d2:ac:46:2a:2c:e1:07:38:2a:4e:08:
9f:5a:68:cf:88:bb:22:2d:d2:e2:02:94:b9:07:05:
1b:85:37:26:c6:8b:e3:5c:80:50:b7:1b:e6:4e:67:
67:35:31:87:56:00:39:65:66:37:65:a4:b0:b0:c4:
7f:f9:c1:95:13:3a:19:b8:8f:c1:87:58:2d:83:36:
d2:ee:af:31:3d:c5:e2:d1:08:bf:1c:75:bb:b3:0e:
44:27:21:ba:52:11:87:bb:4b:2a:d0:57:17:c7:4f:
9a:44:2f:52:68:b1:a9:47:a2:67:90:34:09:a8:42:
b0:69:5f:ea:69:86:a4:e7:6c:4a:0c:a8:85:3f:c3:
f0:7f:3a:8d:c4:15:3c:ca:18:00:e4:dc:87:49:0c:
8d:13:54:69:0d:7c:c2:aa:b1:95:7d:b0:ca:b4:27:
d2:8c:62:b7:af:db:84:11:9d:54:8f:d7:46:52:ac:
65:09:57:e7:17:cb:d7:4e:bc:41:d4:4d:b4:cf:c0:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:65:1D:68:E3:E2:AB:0E:A7:B6:E9:35:23:DC:0C:8E:CD:7F:CC
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:27:52:09:60:76:b7:85:c9:62:f1:49:95:f8:3d:ab:a8:6b:
08:2e:b7:e1:d3:72:11:80:78:49:33:c3:8c:6d:d6:22:9f:43:
4c:93:ab:a3:15:02:a8:8f:86:18:e2:9c:d7:17:1e:51:1c:b0:
d8:24:0e:eb:a5:78:5f:05:c6:7c:dd:f6:3c:95:bc:88:1d:4b:
13:05:cb:3b:d3:b9:b6:bd:12:eb:4f:2b:40:44:42:ab:9b:a7:
a7:b2:85:ee:26:5e:b5:49:97:21:ec:84:2c:e0:ed:38:39:14:
6e:b2:22:fa:8c:87:b3:fc:d9:0d:05:8d:fa:78:f0:fa:c4:c4:
5f:de:b2:ae:c3:f9:33:20:82:8f:3c:73:d4:35:7f:a6:c0:8f:
e9:64:b8:29:ef:ee:3b:de:12:f7:da:84:c8:6b:1b:83:4b:6c:
7a:fb:15:4c:3e:70:96:6d:d1:b4:9b:5b:76:94:4f:db:79:e0:
e2:00:3f:e5:ca:96:5c:5e:42:01:fc:ac:d8:59:cb:19:34:6d:
cd:27:fd:e0:f6:a0:fa:33:25:33:13:8b:1b:f1:6b:76:25:b3:
fa:62:0b:f1:90:7f:1c:8d:5e:85:b5:d8:e9:2b:b5:02:72:27:
45:38:92:84:3e:6d:a5:d1:05:e4:4a:cc:e6:a5:61:b3:f7:a8:
73:24:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:22 2025 by rpki-client