Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: f2Q84IdllpVJST1qbDzQezs6WJnq2xcpvF50Twi/FbM=
Subject key identifier: 6E:25:D0:C8:04:DB:6B:D6:FF:34:32:EE:34:72:24:42:AC:B6:03:D6
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019770758D3F5A24D1AF24DAB39DBB63AA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 22:00:41 +0000
Manifest this update: Sat 14 Jun 2025 22:00:41 +0000
Manifest next update: Sun 15 Jun 2025 22:00:41 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: CQsArqhvqLBKwj/ZPzJ1vFguHjEeWo6QlHP3as94mgE=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:8d:3f:5a:24:d1:af:24:da:b3:9d:bb:63:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jun 14 22:00:41 2025 GMT
Not After : Jun 15 22:00:41 2025 GMT
Subject: CN=6e25d0c804db6bd6ff3432ee34722442acb603d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:0a:5b:bf:2a:c2:a0:74:ad:89:c2:40:4d:
f6:14:0e:b8:8e:53:34:bf:b6:fe:6b:83:c4:54:d7:
a8:82:5a:2f:ad:00:8a:88:cc:ea:6c:fd:ac:5a:6b:
bc:24:ec:bb:05:72:05:0a:39:e6:eb:4b:cc:f7:9e:
f9:d1:49:a4:e2:24:38:f5:02:77:63:e9:28:2e:10:
65:be:40:a5:a8:ad:de:c8:37:f3:43:96:ef:f5:ed:
98:c4:ce:52:9a:27:18:57:2c:e7:86:fa:26:f8:fb:
67:6a:a5:15:f4:54:2f:80:ef:11:7a:e1:3a:c0:1b:
24:8e:70:bd:82:27:4c:ed:96:a6:da:26:d3:2a:54:
be:bc:aa:74:2b:8a:7b:ca:f3:ef:cf:6c:e0:97:65:
62:f7:27:16:fd:66:ad:2c:3d:f6:89:cc:2d:6c:1f:
8d:79:fb:65:94:d6:a8:b9:35:d2:2f:40:67:50:94:
9f:cf:ae:db:7c:f8:c5:f0:50:8e:bc:f8:e5:35:67:
6e:d0:c2:a7:f1:53:34:95:09:bc:ac:f2:c4:ff:39:
16:fd:96:81:cd:2d:19:78:d3:3e:aa:24:c4:b2:54:
bd:da:32:98:c1:85:cf:95:8a:ff:28:f3:1e:9d:9f:
35:a9:9c:10:79:93:83:5b:3a:45:01:0a:4a:d7:89:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:D0:C8:04:DB:6B:D6:FF:34:32:EE:34:72:24:42:AC:B6:03:D6
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:f3:38:72:a6:2b:01:9d:66:bf:e9:5e:70:6d:3e:0f:f5:
a3:63:72:d1:2f:38:c1:a3:9b:fe:52:77:04:18:58:5a:3c:73:
2e:e1:75:07:07:5d:82:dc:46:17:d6:3c:fc:73:d0:02:97:da:
a3:d1:e5:2f:7a:69:3b:d1:5d:72:06:d4:18:72:a9:29:d5:67:
ba:c6:27:13:3d:d6:f3:be:8c:a9:9a:ee:7f:40:f4:08:eb:6f:
d1:00:79:bb:ef:3e:5a:8e:c7:fb:f8:e8:b7:93:ae:44:05:73:
42:84:47:35:53:e6:59:36:5e:a0:e2:59:27:95:45:85:40:23:
f7:6e:d5:51:6d:fc:3c:54:c3:b7:ab:ad:bb:39:ce:6a:93:80:
f2:a3:cf:b8:c2:31:f4:86:f4:3e:15:ce:50:76:b2:1a:b2:29:
ac:15:e4:34:c8:42:42:2a:e4:77:51:95:1a:ae:ab:e9:3a:a8:
03:cb:3a:9c:c1:f0:86:05:4c:f3:f1:73:51:82:8f:ab:32:48:
2e:dc:fb:74:1f:9c:1c:ff:4e:54:15:20:54:2b:74:f3:40:f7:
1a:9c:ee:61:5a:dc:57:d5:d6:ac:d9:7c:07:b0:d7:64:fb:f2:
9b:2a:bd:5e:b3:b2:bf:40:ec:fd:ba:b5:3e:ed:ec:c4:c9:e5:
47:8b:88:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdY0/WiTRryTas527Y6oPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjUwNjE0MjIwMDQxWhcNMjUwNjE1MjIwMDQxWjAzMTEwLwYDVQQD
Eyg2ZTI1ZDBjODA0ZGI2YmQ2ZmYzNDMyZWUzNDcyMjQ0MmFjYjYwM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimMKW78qwqB0rYnCQE32FA64jlM0
v7b+a4PEVNeoglovrQCKiMzqbP2sWmu8JOy7BXIFCjnm60vM95750Umk4iQ49QJ3
Y+koLhBlvkClqK3eyDfzQ5bv9e2YxM5SmicYVyznhvom+PtnaqUV9FQvgO8ReuE6
wBskjnC9gidM7Zam2ibTKlS+vKp0K4p7yvPvz2zgl2Vi9ycW/WatLD32icwtbB+N
eftllNaouTXSL0BnUJSfz67bfPjF8FCOvPjlNWdu0MKn8VM0lQm8rPLE/zkW/ZaB
zS0ZeNM+qiTEslS92jKYwYXPlYr/KPMenZ81qZwQeZODWzpFAQpK14nYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4l0MgE22vW/zQy7jRyJEKstgPWMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+LzOHKm
KwGdZr/pXnBtPg/1o2Ny0S84waOb/lJ3BBhYWjxzLuF1BwddgtxGF9Y8/HPQApfa
o9HlL3ppO9FdcgbUGHKpKdVnusYnEz3W876MqZruf0D0COtv0QB5u+8+Wo7H+/jo
t5OuRAVzQoRHNVPmWTZeoOJZJ5VFhUAj927VUW38PFTDt6utuznOapOA8qPPuMIx
9Ib0PhXOUHayGrIprBXkNMhCQirkd1GVGq6r6TqoA8s6nMHwhgVM8/FzUYKPqzJI
Ltz7dB+cHP9OVBUgVCt080D3GpzuYVrcV9XWrNl8B7DXZPvymyq9XrOyv0Ds/bq1
Pu3sxMnlR4uIIA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:56 2025 by rpki-client