Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: waIVRzWKhx6vqgLIJ8S9ISQtnGDsXnq7gDBntkVUIZA=
Subject key identifier: 1A:36:B4:7E:88:18:CF:33:29:68:1E:FC:81:EE:7F:5C:3C:E9:81:90
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 0198752B9AD64FBABE5FBB4CAA521F221364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 13:00:48 +0000
Manifest this update: Mon 04 Aug 2025 13:00:48 +0000
Manifest next update: Tue 05 Aug 2025 13:00:48 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: tcq5qdwSMihnCpJ7jS5zCgyjLKOlrerEXYrdGaHZOGM=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:9a:d6:4f:ba:be:5f:bb:4c:aa:52:1f:22:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Aug 4 13:00:48 2025 GMT
Not After : Aug 5 13:00:48 2025 GMT
Subject: CN=1a36b47e8818cf3329681efc81ee7f5c3ce98190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:20:72:f1:e3:1d:32:79:9f:71:40:dc:95:
26:9b:14:ef:4d:f3:6a:f2:dd:fe:ba:b6:c2:12:1a:
b1:0f:e6:2f:85:a7:34:78:68:55:c7:d2:bc:73:e2:
c8:84:6c:f0:e3:91:ea:4e:0e:0a:d7:64:ce:09:20:
ed:4b:b1:cd:7e:72:31:b9:78:e1:a8:f2:78:80:4f:
bf:d1:ed:a0:37:d5:1e:7d:77:d9:43:3d:d2:4e:87:
33:8b:69:a8:cd:68:24:b1:35:7b:6a:df:2f:31:a2:
45:85:a4:f6:45:1a:70:42:ef:f2:13:a0:89:38:9b:
64:d3:97:86:f7:dc:2c:4f:61:f5:07:7c:22:0f:91:
71:e7:63:e4:7d:6b:89:47:51:6d:27:4f:55:10:40:
1c:41:5c:b1:44:0e:26:fc:0e:8f:3c:83:5d:cc:49:
58:bd:41:77:e3:5e:1b:d6:d0:3a:3b:af:ca:c5:07:
d5:98:4b:73:b2:86:b4:a9:75:74:9a:61:2d:db:3c:
10:8f:d7:d3:03:f1:e3:dc:6d:ff:11:d4:3b:ba:21:
46:9f:eb:84:81:10:98:05:0b:92:a3:fc:44:b6:e9:
20:ce:2d:7e:e5:e1:bb:8b:a4:fa:0f:01:20:aa:28:
c5:ce:b2:1a:00:93:dd:19:12:1d:1d:d1:81:83:79:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:B4:7E:88:18:CF:33:29:68:1E:FC:81:EE:7F:5C:3C:E9:81:90
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ca:91:ad:35:fb:50:9a:4f:6b:19:1d:e1:46:8f:88:0b:d8:
43:e4:10:29:29:5e:a9:30:c6:ff:fd:a6:cb:24:03:11:3d:73:
43:17:75:17:f6:82:bd:c4:95:75:a0:b9:ca:9a:ef:12:db:7c:
a8:50:8e:b7:08:9d:f4:a1:94:b8:36:c1:36:a1:1a:e3:3b:c5:
1d:a8:de:b0:5d:9b:ef:e6:7c:46:44:60:92:8a:7d:36:bb:66:
01:ea:d3:15:b7:79:b6:47:12:1f:03:34:00:58:bd:db:99:e9:
d9:0d:c0:80:7c:c7:f0:d8:e5:93:99:07:97:9e:86:64:0e:85:
fd:2b:e7:1b:1e:4b:3e:83:6c:c1:c5:58:5d:a2:18:6c:90:ce:
6f:7a:38:1a:28:ce:15:43:90:36:2d:24:94:b4:44:74:21:9c:
85:8f:68:6b:e4:39:6a:23:ad:90:5a:bc:1b:29:91:73:61:e0:
90:21:63:94:df:cb:e5:95:40:3c:44:11:e9:58:13:19:ae:b2:
a8:12:45:71:0e:fe:c2:d3:11:dd:30:ea:af:f7:86:83:6e:21:
57:47:f6:6c:3f:a1:e3:c7:3d:ab:7c:be:25:2f:24:f4:ee:77:
0e:1a:ab:2b:ae:c2:a7:95:68:8a:48:4a:39:1f:26:c3:9f:f8:
59:e9:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:40 2025 by rpki-client