Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: apsgu1I5sSybM7LoVahVdVRK+BC3LKqTDdT8DkKHWK8=
Subject key identifier: A5:4F:A4:91:E2:DC:8C:7D:18:BD:97:52:46:6C:5A:8F:E5:26:AE:80
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 0196B8FE9DF0AD707AD63F5DBD4F7394B172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 06A2
Signing time: Sat 10 May 2025 07:00:16 +0000
Manifest this update: Sat 10 May 2025 07:00:16 +0000
Manifest next update: Sun 11 May 2025 07:00:16 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: xHKA6DkLQJ9znvVLxyvJb9xa7fOQTPZqjbheWzmAVl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:9d:f0:ad:70:7a:d6:3f:5d:bd:4f:73:94:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: May 10 07:00:16 2025 GMT
Not After : May 11 07:00:16 2025 GMT
Subject: CN=a54fa491e2dc8c7d18bd9752466c5a8fe526ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:b7:d1:87:db:fa:23:00:45:63:43:37:3d:
f5:fc:34:e8:3e:7f:21:d2:36:03:3b:89:e9:87:a8:
7d:14:d5:55:ee:85:cb:b2:0f:50:39:c0:f2:d6:33:
49:54:54:05:4e:5e:42:ad:8c:64:dc:30:a6:e4:34:
e2:29:7d:18:94:88:43:b9:be:b0:b7:f2:99:0f:b7:
1b:6a:f8:12:c5:ff:cb:1b:f5:24:65:94:dc:39:f8:
08:4c:2e:0b:e2:11:6d:dd:34:f5:41:51:59:7b:10:
ab:2c:b9:14:fa:a2:ec:15:15:4c:53:a8:18:e5:63:
5b:95:0d:b3:69:b7:8e:61:d3:ea:c1:fc:a5:55:ef:
21:a2:d0:2b:48:44:59:e1:cf:38:d9:f3:e6:7b:4b:
ab:85:a3:55:9c:57:ff:2a:42:33:d8:5f:62:f2:60:
28:28:17:1f:b2:12:33:57:6f:9b:98:d0:08:f9:64:
1c:38:c4:ea:7d:f6:e1:4a:c0:18:d4:cd:7f:6c:82:
f9:99:b9:98:d6:1c:da:7f:10:fe:7e:4a:ef:a1:a2:
2b:4f:5c:1a:af:ca:b2:b2:83:47:cb:fb:f7:03:8e:
f7:fc:09:51:6f:29:2f:b9:f0:ee:8e:b3:9e:07:68:
58:53:8d:4a:fb:2f:88:d1:da:fb:13:c3:80:a8:64:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:A4:91:E2:DC:8C:7D:18:BD:97:52:46:6C:5A:8F:E5:26:AE:80
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:36:11:9f:db:20:5b:c4:34:9b:75:51:a1:3c:c1:f8:47:
01:ce:55:d7:58:0f:94:2c:67:62:11:39:34:f7:50:5e:40:b7:
8a:28:b3:e7:8f:b4:34:ca:a2:4e:58:d7:ed:14:b4:24:66:90:
b2:14:17:15:0c:79:ca:ab:bd:3e:a8:3d:86:8d:c0:c7:4f:c5:
54:e4:12:80:7a:62:f3:d7:f5:e0:a0:51:a4:27:bb:28:e0:9e:
f8:35:7c:2b:19:12:80:3e:44:55:5c:00:9e:e1:de:e4:e9:d4:
d8:52:f7:ea:fa:72:c9:ec:a0:0d:71:21:e0:6b:9b:ef:a0:6d:
31:cc:5b:c9:df:06:67:3f:7a:31:2f:b4:34:63:b8:c3:aa:19:
1a:51:1e:d7:96:5f:e3:ec:f0:c8:f6:ef:ff:08:18:b7:30:ca:
30:ac:5d:82:a5:9c:9c:53:1e:cb:c1:63:90:41:c4:fd:6c:58:
6f:33:4f:57:7d:0c:ab:b9:69:5f:0e:e6:ff:21:99:83:e5:3e:
80:23:71:90:b7:48:82:31:aa:de:86:d1:a7:3d:50:3e:eb:56:
0e:34:68:51:72:df:a6:39:4d:ed:9f:9d:40:98:4d:a0:82:68:
03:bb:ec:bb:47:4e:17:b3:f6:d1:d8:7d:1b:f7:17:11:a3:e2:
d3:d1:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:36:03 2025 by rpki-client