Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: SR9UB8eC2RtX4JAK3XiFar/eNQQLGjUkxlxJbueC9D0=
Subject key identifier: 00:14:61:B8:52:F1:1E:D4:DF:12:F2:AB:9C:A4:7C:13:98:1E:0C:4F
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 0198D6612B6E7D2A6E51C74C4397B2AB1CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0A5A
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: JuuKZw+fXlUXSh8/M+O3sVuiYvz86hNc3okct1pLdzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2b:6e:7d:2a:6e:51:c7:4c:43:97:b2:ab:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=001461b852f11ed4df12f2ab9ca47c13981e0c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:c5:2c:cf:72:56:15:41:c5:89:d4:64:29:
a9:f1:f1:8f:13:2b:63:72:48:ea:1a:bf:b9:83:95:
c4:73:a1:88:ed:3a:d9:b8:dc:27:66:e8:52:c8:96:
2a:f8:f1:70:4e:8f:71:9c:91:11:0b:63:b6:a5:d2:
6e:aa:fb:04:ec:d2:9a:53:12:74:7d:8f:9f:1d:9e:
3e:b2:a1:f0:bc:e1:b0:50:c2:a0:bf:4b:3a:3d:00:
fa:5e:30:01:6a:8d:a0:40:73:15:45:09:1b:ec:ff:
c9:07:60:b2:60:6a:db:a4:db:51:84:24:15:88:8f:
b7:c3:d5:32:cf:9d:11:4b:83:6e:51:29:95:01:ac:
6f:37:da:19:18:b5:d0:a1:4c:2a:19:99:f4:1f:0c:
ee:d3:cc:05:21:ed:e2:95:c3:d4:c6:5a:50:b0:f6:
94:de:8d:1b:ec:af:3c:55:b3:1a:b6:a9:c3:73:60:
7d:35:c5:46:7c:f3:fa:99:2d:59:79:e9:6d:fd:fd:
c2:b0:11:8f:a2:c2:b4:e3:b1:fe:a7:d3:22:2f:da:
fd:48:ad:ce:96:a7:f8:f2:4a:0d:88:44:6d:0a:9f:
89:13:5c:4e:83:cb:d8:6b:5a:83:e0:b4:4c:73:f3:
45:c9:bd:1d:13:13:9f:23:a9:cb:e0:72:0c:b6:fa:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:61:B8:52:F1:1E:D4:DF:12:F2:AB:9C:A4:7C:13:98:1E:0C:4F
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d9:91:ce:77:53:60:64:df:78:64:a6:54:67:bd:e1:2f:0e:
8a:cf:e1:3b:86:c5:e1:fb:ac:6f:c5:96:78:51:2b:e9:15:ee:
6f:4b:e7:44:41:c9:9b:e1:69:2a:20:d9:48:ca:5c:b1:1a:6d:
60:fb:9f:60:86:f2:50:9c:00:a4:3a:e9:68:1e:23:54:09:b4:
47:9d:0a:31:dc:04:3d:a6:0c:0d:58:1c:f7:d8:df:1c:7a:df:
4d:d6:c5:40:b0:4a:33:a6:6f:0b:c9:63:ae:78:a7:84:22:98:
1c:a7:e2:06:ed:01:f3:37:c6:7d:1a:73:f3:3c:fd:ff:ef:dd:
b7:42:29:54:42:f9:bc:4d:47:d0:6b:dc:d5:13:a0:e9:af:8d:
01:d4:a0:c8:82:96:c7:e1:a2:ec:cd:d0:35:8f:f2:ac:a6:05:
6d:93:39:ef:1b:01:5f:75:04:f3:5a:55:60:90:7a:08:9a:67:
87:48:16:20:cc:f2:78:87:c3:64:3f:af:89:66:3b:b5:9c:8e:
73:9f:bb:4b:56:52:58:d5:6d:a7:4c:6b:0f:fe:55:57:60:15:
7f:21:23:e2:45:d6:91:53:4d:05:f2:6d:e8:2e:34:ba:b4:ba:
06:19:a2:84:cb:95:bc:3e:f3:b7:3d:6e:22:36:69:88:70:b0:
16:5f:e1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYStufSpuUcdMQ5eyqxzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGMxYTk4NmM1OTMzYTNiOTEwODRlOGEzZmYwODA2NmQz
OThlMTkwHhcNMjUwODIzMTAwMjI4WhcNMjUwODI0MTAwMjI4WjAzMTEwLwYDVQQD
EygwMDE0NjFiODUyZjExZWQ0ZGYxMmYyYWI5Y2E0N2MxMzk4MWUwYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4DFLM9yVhVBxYnUZCmp8fGPEytj
ckjqGr+5g5XEc6GI7TrZuNwnZuhSyJYq+PFwTo9xnJERC2O2pdJuqvsE7NKaUxJ0
fY+fHZ4+sqHwvOGwUMKgv0s6PQD6XjABao2gQHMVRQkb7P/JB2CyYGrbpNtRhCQV
iI+3w9Uyz50RS4NuUSmVAaxvN9oZGLXQoUwqGZn0Hwzu08wFIe3ilcPUxlpQsPaU
3o0b7K88VbMatqnDc2B9NcVGfPP6mS1Zeelt/f3CsBGPosK047H+p9MiL9r9SK3O
lqf48koNiERtCp+JE1xOg8vYa1qD4LRMc/NFyb0dExOfI6nL4HIMtvrrfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAUYbhS8R7U3xLyq5ykfBOYHgxPMB8GA1UdIwQY
MBaAFAZMGphsWTOjuRCE6KP/CAZtOY4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgt
N2Y2YTY1NWZkNzg4LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgtN2Y2YTY1NWZkNzg4
LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNmRzndT
YGTfeGSmVGe94S8Ois/hO4bF4fusb8WWeFEr6RXub0vnREHJm+FpKiDZSMpcsRpt
YPufYIbyUJwApDrpaB4jVAm0R50KMdwEPaYMDVgc99jfHHrfTdbFQLBKM6ZvC8lj
rninhCKYHKfiBu0B8zfGfRpz8zz9/+/dt0IpVEL5vE1H0Gvc1ROg6a+NAdSgyIKW
x+Gi7M3QNY/yrKYFbZM57xsBX3UE81pVYJB6CJpnh0gWIMzyeIfDZD+viWY7tZyO
c5+7S1ZSWNVtp0xrD/5VV2AVfyEj4kXWkVNNBfJt6C40urS6BhmihMuVvD7ztz1u
IjZpiHCwFl/hVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:35 2025 by rpki-client