Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: hSzj0JJbQT+wAuIe30FpzBHETM0+LaCjDHLAak5DoGI=
Subject key identifier: D5:90:F2:37:BE:A4:2D:8D:D7:55:C8:FC:23:4B:DC:2F:8C:4B:29:18
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 0197B7EA88D962F068CA8D1188DDB06A23CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 0726
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: I87MSwkWMn1fcC1QBjamy/QEogh2bku99xRAjZyiRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:88:d9:62:f0:68:ca:8d:11:88:dd:b0:6a:23:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=d590f237bea42d8dd755c8fc234bdc2f8c4b2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:9a:41:1b:96:88:76:33:43:90:00:06:c9:
b6:96:05:b8:8a:e6:b7:8b:c3:28:25:aa:75:7b:42:
5e:d0:e1:86:19:5f:f2:2b:7e:be:b7:d3:f2:ea:d4:
d3:d1:b7:3a:a9:5a:4e:f2:83:64:97:c8:4d:ca:72:
54:fb:bd:c2:80:c6:f6:89:57:29:53:99:3c:69:21:
04:19:1b:f0:3c:a3:28:b1:32:80:b9:b5:4f:b2:c1:
79:a8:68:87:ce:5c:84:7d:4a:b4:fb:e1:8a:ad:dc:
a5:a0:66:e9:19:c0:79:ec:d6:fa:92:51:33:86:25:
50:59:a3:21:d9:d3:56:81:6f:7f:da:b3:9c:ca:b1:
d8:8c:e5:97:cd:16:0b:9b:1c:e2:45:9a:e8:af:2b:
44:bf:94:97:aa:45:af:32:6b:05:bf:36:2b:ae:dc:
f7:cf:9e:dd:c1:e5:1c:10:43:0a:de:6d:e1:65:33:
ba:9a:86:25:d8:3a:5b:01:5c:9d:ef:aa:4c:11:ab:
02:f0:3e:3f:f2:00:64:ed:ac:6f:15:ef:fb:91:68:
e0:69:55:57:a9:44:93:60:e9:40:5a:34:59:16:a4:
31:18:a2:0a:08:ef:da:3e:01:2d:07:0a:49:96:d4:
bd:38:e9:77:f0:e1:7f:61:dc:5e:3f:96:8b:26:fc:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:F2:37:BE:A4:2D:8D:D7:55:C8:FC:23:4B:DC:2F:8C:4B:29:18
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:10:bb:80:98:15:ae:51:d3:e8:64:f1:61:e2:86:f0:ad:
0f:25:28:35:00:3f:46:95:2a:e6:e1:8b:9f:57:3f:32:ca:c7:
10:ed:84:87:d3:a2:56:e7:bd:7d:d0:46:74:5a:3f:2b:6a:e6:
07:26:0c:28:b9:42:8f:83:3a:8f:61:ca:d9:cd:e0:6e:77:9c:
63:5a:dc:c8:34:fb:b7:33:90:ea:1c:29:b2:95:f6:68:72:b4:
2f:a7:a0:43:f6:47:04:43:44:41:fc:38:20:47:8d:c8:32:35:
de:cd:25:e6:32:bf:ff:bd:c9:22:19:6b:39:04:77:63:d7:45:
2a:7d:05:3b:42:2f:94:b5:d0:b4:f2:53:eb:a5:c3:97:36:e7:
a0:74:53:44:d5:09:98:69:ac:a2:29:70:8e:44:e4:a6:f3:34:
56:c4:40:09:88:b4:02:4b:02:ce:dc:68:1e:fc:ff:79:7d:d5:
4a:0c:fd:6b:17:5e:c5:fe:df:7f:f5:c9:34:46:14:7f:cc:36:
cb:b6:45:b5:f2:89:fb:66:4d:1f:5d:38:47:a1:f9:4a:f9:d4:
4e:39:87:ad:52:c1:2d:fa:32:c6:13:7a:87:e2:a8:c4:00:01:
d9:20:8c:57:ba:1d:f3:f5:dc:62:0a:4b:2c:a3:25:43:94:cf:
90:37:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:59 2025 by rpki-client