Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: 5Ob1MulipjxUHVdItL6alb8TM6Yliy3vMYycZQCWIWo=
Subject key identifier: F1:E9:50:9D:61:18:BB:F8:80:AE:DC:D8:19:6B:33:73:78:0C:E8:1C
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0198741912F8E810A8F4AC298D120BE71602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 12F4
Signing time: Mon 04 Aug 2025 08:00:56 +0000
Manifest this update: Mon 04 Aug 2025 08:00:56 +0000
Manifest next update: Tue 05 Aug 2025 08:00:56 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: oxy34r1brrdRtIkJlYd0vsAxfg1HRQ8TRCIjvhw/U+Q=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:12:f8:e8:10:a8:f4:ac:29:8d:12:0b:e7:16:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Aug 4 08:00:56 2025 GMT
Not After : Aug 5 08:00:56 2025 GMT
Subject: CN=f1e9509d6118bbf880aedcd8196b3373780ce81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:fb:29:48:73:f3:ef:a1:00:52:fb:cf:56:
1a:92:2d:b3:c9:23:5f:6d:11:cf:47:25:78:e0:65:
48:b1:89:3a:52:71:92:66:e7:aa:a5:78:71:3b:0b:
2d:c5:ea:1e:b0:80:8c:bf:11:cc:8f:8b:c7:93:c9:
99:21:5f:21:26:a6:b8:d2:bf:ad:e4:bc:d2:a7:ed:
39:2d:cd:bd:26:5b:5a:1b:c6:ea:23:ef:c3:68:6b:
e7:a9:91:e2:41:66:5b:f1:36:71:96:b2:00:a8:5f:
32:5f:32:02:45:52:b0:3f:d4:d5:c9:33:11:3f:23:
a2:e6:11:51:3f:46:28:4b:29:a7:f7:28:3a:3c:24:
b9:2c:98:89:de:ce:b7:23:ad:f4:95:d6:ba:a4:4c:
6f:c9:23:fe:2a:3b:68:82:b7:e4:56:77:42:ed:03:
cf:1f:65:b4:47:7d:55:07:ce:bc:e2:92:47:12:7a:
09:74:8b:2a:07:2a:b3:5f:51:94:e0:24:72:da:00:
81:94:93:48:b2:af:93:b7:23:32:17:b5:2b:e6:d5:
2b:d9:03:a0:b8:a4:c8:39:d4:c6:7d:89:7b:85:85:
1a:20:31:2a:6e:9b:25:05:f4:28:ca:f7:ac:40:a5:
af:bb:12:d2:80:23:39:32:99:ac:a7:55:45:c4:9b:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:50:9D:61:18:BB:F8:80:AE:DC:D8:19:6B:33:73:78:0C:E8:1C
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:da:3e:e7:ef:49:a5:8d:8f:d1:8d:8e:2c:1d:66:2c:3d:
d4:2a:c8:9e:a7:60:67:8d:8e:ad:ff:78:c9:48:5d:f1:46:5a:
77:16:eb:38:b2:4a:2e:d4:88:bc:14:ff:c4:f4:eb:01:ea:72:
7a:29:e1:83:18:78:6a:a8:88:d4:d3:d4:61:34:77:34:c6:2e:
51:3c:ee:b5:d7:2b:2c:f6:b2:9f:43:1d:74:50:92:9b:73:ec:
b3:6c:b1:08:aa:03:d8:88:c9:62:fe:86:64:c5:5c:e5:c6:ee:
01:ff:87:5c:05:83:87:f2:cd:c8:15:b9:8a:5c:be:56:fc:72:
30:c1:85:88:10:27:70:59:95:68:b8:a0:8f:3f:12:89:01:2d:
2a:43:20:3b:63:e2:c8:74:e4:cc:a5:68:51:ea:e8:64:e4:c8:
35:27:08:b2:28:13:e0:4a:28:28:a8:22:ea:ba:29:d8:40:c3:
33:e3:a5:84:a0:0e:b0:cd:95:ab:58:23:56:a8:5d:8c:de:f5:
ff:02:0b:6c:85:73:36:ef:ad:fe:5c:38:a3:75:6d:c0:f5:ef:
a3:74:55:02:9a:dc:96:d8:78:67:20:64:4a:0a:ce:fc:79:5c:
23:c7:d3:14:38:c9:5c:72:ee:8f:cb:70:58:ce:df:3e:54:c0:
47:2b:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:40 2025 by rpki-client