Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: kbAPMSmi8Ha8fszGca2ivCx7mK83F7MnczlN9bhQaWY=
Subject key identifier: E2:CC:68:5F:83:DD:1E:D1:DA:83:2C:16:A7:72:0B:AA:03:82:C7:69
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019A4E4F71FEF9C541AA5B8CEAFEB17B5E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:20 +0000
Manifest this update: Tue 04 Nov 2025 10:00:20 +0000
Manifest next update: Wed 05 Nov 2025 10:00:20 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: mng2Le4TX/dPGnTGq2eL/zVy5oqMXS9+GpOQCgZxa2k=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:71:fe:f9:c5:41:aa:5b:8c:ea:fe:b1:7b:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Nov 4 10:00:20 2025 GMT
Not After : Nov 5 10:00:20 2025 GMT
Subject: CN=e2cc685f83dd1ed1da832c16a7720baa0382c769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:30:b9:4d:03:83:52:b1:e0:4c:d1:7a:c5:
25:87:29:db:0f:97:f4:9a:53:ab:d3:95:a9:74:89:
07:4d:b2:ac:69:de:b7:67:c9:45:4d:f2:2b:ad:1b:
ce:2d:32:96:44:78:a8:d1:a0:11:a3:1f:ba:b9:c0:
89:f4:b1:a9:b8:48:cb:8b:0a:f0:3f:ef:f3:d8:75:
d8:2f:11:57:97:cd:8e:2b:ba:ee:f7:34:ff:fe:f9:
4b:44:f8:3f:28:9c:18:65:eb:cc:1b:63:f5:29:a2:
15:4d:70:eb:a2:8d:ce:20:4f:d9:f6:bc:02:0b:4e:
01:a0:6d:36:e2:fc:8c:9d:f7:54:c0:97:5e:94:bf:
d2:fd:0a:a7:2c:0c:74:2b:ef:7d:21:2f:75:39:93:
d0:c8:d6:f8:17:b8:a2:c8:5d:80:e0:56:14:f9:9b:
a1:2a:a0:e3:d9:0a:a9:a5:1f:6a:72:4c:99:a3:2a:
f0:46:0d:66:63:08:59:6d:09:42:0b:05:ae:d3:7d:
4d:6e:71:2e:3e:18:7b:0f:88:c8:1a:d1:49:15:6f:
92:10:ef:d6:ab:1d:6b:c5:62:0d:2f:73:63:d1:f6:
dd:d3:ba:e9:86:e1:de:c8:4f:9f:cf:40:8d:d3:b4:
df:60:09:c2:44:2f:e1:e3:63:88:0a:d1:1f:0c:db:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:68:5F:83:DD:1E:D1:DA:83:2C:16:A7:72:0B:AA:03:82:C7:69
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:88:70:eb:fa:5d:8c:27:ca:09:45:ad:10:aa:81:84:c3:53:
7c:88:2e:a1:43:9a:25:9f:03:7b:ab:42:f2:26:1c:51:04:17:
10:75:52:f6:96:8f:50:95:5e:a5:23:74:f5:04:93:3f:0b:29:
aa:b8:89:38:cb:39:a0:53:ed:05:f9:71:df:90:79:7a:a3:40:
21:1b:35:c4:1e:63:0e:4c:f6:79:ac:8d:55:d6:8b:dd:c4:c2:
71:3e:82:c5:37:c8:2f:da:57:d5:7c:69:56:69:65:2e:3f:69:
74:0d:f5:d8:0c:e4:ce:58:a5:43:8c:ec:49:4a:41:e3:db:f7:
c0:4d:f3:77:0f:1a:50:87:3c:22:fc:2a:00:5e:72:12:7c:9a:
3f:0c:f3:2b:7b:9f:37:c2:d7:43:37:cc:f9:63:2f:25:f4:21:
84:80:bc:aa:5c:0b:30:cb:3b:b8:d9:31:8e:46:08:28:2d:e1:
eb:df:2b:51:66:a8:48:f7:f7:97:b2:87:a8:dc:61:d4:4b:26:
f2:d0:b1:40:1c:61:fe:e7:7d:0b:30:8e:02:04:ae:17:84:c3:
64:52:be:b9:b4:2a:f5:a6:74:6d:5f:fd:a2:d6:75:63:26:3a:
d2:57:5a:c4:8b:ec:fd:23:56:60:1f:be:22:46:13:b1:90:26:
a9:75:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:00 2025 by rpki-client