Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: n2CQdQAIVfglBhooTsYxN2ovupJaL4AhtB0j/Q0ngW0=
Subject key identifier: 00:DB:15:7D:11:45:40:9B:83:5B:C4:1F:5D:C0:A8:A6:21:B9:EA:1D
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0197B70F39E5413BA448D77CED486F72A4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0EFC
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: CN0lvYC/rYAX7x0YeBwZ3jZglG8sQA3LdnZi0338wwk=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:39:e5:41:3b:a4:48:d7:7c:ed:48:6f:72:a4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=00db157d1145409b835bc41f5dc0a8a621b9ea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:fe:84:2a:37:e7:23:40:69:66:16:da:93:
9a:a5:b3:85:c3:8a:34:02:36:7f:bf:07:b6:f5:8a:
c0:3f:d8:db:c7:95:b5:71:14:8a:3a:ec:b9:85:48:
8b:1b:96:1c:93:a9:53:e5:65:99:a4:ff:21:5a:9d:
dc:6f:a9:6c:54:fb:95:40:5a:64:4f:ad:44:18:bb:
d1:e2:8f:d6:be:ea:a2:68:46:3f:53:ea:a2:cc:ac:
67:2a:61:9d:af:d8:8d:30:11:f3:97:07:68:30:0a:
33:ff:cc:7d:ec:2a:bd:e8:12:03:14:08:a1:4b:dd:
8d:45:e1:3f:44:0c:05:46:86:19:50:aa:22:e6:a6:
d4:7d:cc:3b:6b:41:1c:02:65:cb:c1:1d:01:9f:04:
ae:12:af:8c:33:df:42:5c:3b:07:9f:e3:57:a1:db:
22:32:a9:fa:6a:b5:75:cb:21:66:ee:73:f7:79:64:
7c:3c:32:c8:7d:4c:a6:f0:47:de:54:08:cf:97:64:
30:bf:c4:f8:5f:f8:ac:43:cc:a5:bd:50:36:4c:5e:
f9:89:1f:f7:04:eb:0a:33:8d:d0:ef:7d:1d:d8:e1:
23:ac:5c:60:52:b5:49:ac:2d:04:3b:a3:a1:69:d3:
6a:c4:45:26:ea:b4:a7:be:ce:32:13:c4:06:c4:b2:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:15:7D:11:45:40:9B:83:5B:C4:1F:5D:C0:A8:A6:21:B9:EA:1D
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:1f:9c:cb:6a:df:1f:b6:60:96:0a:3e:b3:37:92:99:d0:
35:c8:0c:8d:5e:3b:16:82:b5:38:f1:8a:d8:1b:d4:cd:d6:b3:
32:58:15:be:fc:fb:06:cb:db:cc:75:29:b4:f4:c5:16:dc:d9:
60:fa:a5:92:34:e1:ce:e9:ee:39:30:ce:e9:9d:38:3e:c4:85:
3f:4e:9d:fe:81:44:52:84:0f:9c:9e:87:81:d2:0d:7a:e6:04:
3d:de:58:9d:a6:08:5a:82:3a:81:0b:33:66:d4:da:88:2a:fc:
d9:dc:52:42:d3:e4:dc:4b:2a:a9:71:d4:cc:1f:0f:f7:8c:80:
9c:d8:ed:f9:cf:f9:51:15:39:96:e6:db:39:55:4a:a5:09:f9:
0f:34:bb:9a:36:18:22:4b:3d:05:8d:cd:3e:02:0b:f4:4d:f8:
75:87:5c:07:04:b4:c1:c4:25:29:9c:ee:85:4b:55:f6:1b:c8:
ca:89:40:35:9b:02:45:f7:27:b2:fa:9c:21:1d:a1:8d:34:66:
d5:21:be:a4:42:be:27:06:bd:35:af:2d:1e:33:51:82:d6:fa:
69:9a:2c:3f:eb:b3:90:1b:46:a5:ff:bb:43:97:a7:3f:2b:c8:
ee:42:26:72:11:de:05:2b:f0:d5:f1:7c:ca:c8:48:7c:fc:22:
1f:23:de:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DznlQTukSNd87UhvcqS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4
MGQwN2QwHhcNMjUwNjI4MTUwMTU3WhcNMjUwNjI5MTUwMTU3WjAzMTEwLwYDVQQD
EygwMGRiMTU3ZDExNDU0MDliODM1YmM0MWY1ZGMwYThhNjIxYjllYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIf+hCo35yNAaWYW2pOapbOFw4o0
AjZ/vwe29YrAP9jbx5W1cRSKOuy5hUiLG5Yck6lT5WWZpP8hWp3cb6lsVPuVQFpk
T61EGLvR4o/WvuqiaEY/U+qizKxnKmGdr9iNMBHzlwdoMAoz/8x97Cq96BIDFAih
S92NReE/RAwFRoYZUKoi5qbUfcw7a0EcAmXLwR0BnwSuEq+MM99CXDsHn+NXodsi
Mqn6arV1yyFm7nP3eWR8PDLIfUym8EfeVAjPl2Qwv8T4X/isQ8ylvVA2TF75iR/3
BOsKM43Q730d2OEjrFxgUrVJrC0EO6OhadNqxEUm6rSnvs4yE8QGxLJDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADbFX0RRUCbg1vEH13AqKYhueodMB8GA1UdIwQY
MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt
NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5
LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh8fnMtq
3x+2YJYKPrM3kpnQNcgMjV47FoK1OPGK2BvUzdazMlgVvvz7BsvbzHUptPTFFtzZ
YPqlkjThzunuOTDO6Z04PsSFP06d/oFEUoQPnJ6HgdINeuYEPd5YnaYIWoI6gQsz
ZtTaiCr82dxSQtPk3EsqqXHUzB8P94yAnNjt+c/5URU5lubbOVVKpQn5DzS7mjYY
Iks9BY3NPgIL9E34dYdcBwS0wcQlKZzuhUtV9hvIyolANZsCRfcnsvqcIR2hjTRm
1SG+pEK+Jwa9Na8tHjNRgtb6aZosP+uzkBtGpf+7Q5enPyvI7kImchHeBSvw1fF8
yshIfPwiHyPelw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:44 2025 by rpki-client