Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: 9roUIeWpZQkMkcbPyI0/4R35b2EoucgSSh9aIEc/M0M=
Subject key identifier: 13:03:29:E4:E5:16:AB:A6:3C:88:DA:1B:10:33:5F:8A:44:ED:63:56
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0199FC5858A75A86E4A3E0B12F140F1FB6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 102A
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: wbYn749wgu7lGlRrIGWqv6oDLsLqMPWu5tzXxn4BiVM=)
2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=)
3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:a7:5a:86:e4:a3:e0:b1:2f:14:0f:1f:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=130329e4e516aba63c88da1b10335f8a44ed6356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:0c:ce:af:44:df:b1:9d:d8:34:5a:30:06:
63:30:e6:e1:c0:78:68:ae:78:a4:55:0b:c0:a6:da:
b8:c9:1e:22:36:62:21:57:ea:d1:83:89:1a:2d:cb:
cd:c9:4a:9f:48:ae:5a:c3:79:88:53:f8:aa:19:36:
49:ce:7b:c1:bc:50:2a:fb:5d:c2:d9:d5:57:16:d7:
2b:8d:e7:ec:2d:cd:8a:77:42:cb:26:3c:2b:2f:5d:
36:28:fe:22:00:18:2a:3d:0f:a9:05:69:43:94:cf:
76:8c:89:c2:28:d8:ce:a9:a9:c5:ae:3c:61:16:c5:
5a:85:8b:0e:a3:d1:b2:1b:1a:cb:21:61:b8:e2:05:
df:11:71:33:76:60:df:be:de:91:7b:63:ca:10:fd:
cb:fa:8a:63:c8:79:76:c4:a5:b4:72:c3:d7:25:ca:
b2:19:57:56:01:49:4e:66:40:ac:ae:33:d2:6e:87:
a7:d6:f9:8b:06:be:4c:e0:de:6f:5d:90:38:67:04:
dd:73:e1:d7:2c:6a:b7:89:06:a0:7d:b8:2d:fa:c8:
15:4e:a1:ba:2f:7a:1f:c7:04:61:ab:72:13:ce:45:
7e:57:9e:3b:dc:80:6a:50:ed:f2:de:9c:df:07:15:
d3:91:bb:9d:52:e4:ec:15:5f:cb:f2:52:c3:27:f4:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:29:E4:E5:16:AB:A6:3C:88:DA:1B:10:33:5F:8A:44:ED:63:56
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4f:7e:c5:e4:c7:b2:08:2d:04:7b:c3:ad:5e:99:ba:29:9d:
34:33:c3:5a:4e:75:30:86:77:d9:8c:92:66:d1:46:c2:61:af:
32:87:e8:40:b8:54:09:25:fd:86:21:f0:0d:de:93:4a:11:df:
7c:29:ff:7a:3c:76:2d:d4:9c:09:38:f1:07:20:ff:0c:08:91:
72:e1:f1:4d:c0:ef:e4:45:05:a5:70:a7:1f:f2:ce:52:a6:85:
6e:40:02:64:13:6f:cb:f2:fa:34:01:df:7a:f9:c9:46:20:2d:
fb:27:71:d9:bd:b2:1d:5e:ea:f4:3f:2b:b2:c8:52:37:e5:e8:
b4:48:99:97:a1:48:de:dc:65:4b:78:5b:2d:c1:09:27:ac:d3:
6d:98:50:d2:8b:52:43:bc:b9:f5:e7:f8:3b:5d:0b:e9:e4:bf:
f9:60:9f:b2:14:2d:5e:1c:59:b8:29:3c:5f:d5:46:95:e4:86:
ed:d9:e3:98:a7:86:81:e8:53:92:63:27:51:62:ec:5c:49:53:
22:c7:c3:cd:88:60:5f:bc:86:68:0c:d8:88:33:7e:b1:78:a3:
df:02:bb:61:16:9f:68:85:27:40:af:db:95:5f:49:b8:b0:6d:
fa:02:d6:7a:b1:96:e9:04:7e:dc:d2:02:22:f1:35:c6:c8:25:
39:39:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:47 2025 by rpki-client