Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: mzQjwsnRVp+VPsLEjy37SnWaH7mXgjTQYlR+cfYwZWY=
Subject key identifier: B6:8C:62:54:95:C9:65:D1:0A:DE:D0:B9:80:CB:54:EA:99:B7:7C:70
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0197684E99506FA2446FFDED7596DDAC3359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:01:10 +0000
Manifest this update: Fri 13 Jun 2025 08:01:10 +0000
Manifest next update: Sat 14 Jun 2025 08:01:10 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: 6Vc32UkTxZgdHxpZGu4FgWExbI7ARUVtPomW+jBdsNg=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:99:50:6f:a2:44:6f:fd:ed:75:96:dd:ac:33:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jun 13 08:01:10 2025 GMT
Not After : Jun 14 08:01:10 2025 GMT
Subject: CN=b68c625495c965d10aded0b980cb54ea99b77c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:d4:4d:fc:e6:d5:8a:cf:1f:8e:a5:97:bd:
42:83:f6:84:45:66:ca:97:f5:74:12:d3:27:ab:aa:
f7:be:13:29:7b:ee:9b:ad:63:c0:af:f6:b0:ac:f5:
58:50:ab:c0:8c:b3:14:3c:6d:0d:bc:fc:98:a9:2e:
a2:66:e6:be:29:45:a8:4a:9c:0c:d1:54:02:6e:7c:
e2:01:ba:b8:9b:ee:4c:25:a5:0a:cf:ae:18:6b:c8:
f6:f9:73:9f:62:5d:44:a0:9c:a7:7e:9a:b8:64:3c:
c7:7f:b9:41:7b:89:23:18:89:db:e3:81:61:36:50:
2d:e6:d8:83:90:b2:ac:84:9e:f8:13:ea:ba:c7:66:
e0:8f:aa:5e:e1:51:04:2e:4b:6b:9c:5d:bc:de:ae:
bd:0e:3f:2b:0e:a0:63:4d:52:83:cb:72:17:32:f9:
19:c9:7b:ca:ef:8e:b0:4f:27:fc:1a:8b:63:f4:32:
50:64:86:d7:5f:2b:c7:6b:77:47:7a:f0:af:81:09:
3c:c9:2d:49:cc:12:e2:14:41:03:1d:54:ed:c8:b1:
d4:83:d6:4d:db:ec:80:a2:88:3c:dc:64:f8:02:ca:
5a:6f:3a:ad:1c:7c:14:50:b3:be:08:c4:de:73:73:
a0:f6:0b:ce:a3:fe:dd:56:ac:ee:27:c5:1d:a1:94:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:62:54:95:C9:65:D1:0A:DE:D0:B9:80:CB:54:EA:99:B7:7C:70
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:95:b7:55:1f:87:05:26:40:c3:77:6e:a9:07:ba:31:dc:
de:8f:cc:42:c9:cf:3e:50:9f:ba:39:0e:6a:17:03:66:af:69:
ea:db:d6:3a:f5:17:d4:0d:69:68:95:73:12:ba:f9:e7:76:ff:
3a:fb:d9:8e:f3:ce:5a:54:28:c3:22:71:51:84:52:33:22:af:
a9:82:f4:cb:49:27:92:1c:cf:b7:f8:9f:71:19:2d:62:b7:e6:
dd:61:9a:fe:c6:75:54:33:fc:14:16:dd:74:6e:57:71:b9:8a:
9b:5b:54:78:7b:fc:1b:80:fa:eb:41:87:fd:c6:b1:d5:6e:54:
f9:90:ed:d2:65:4a:3d:ce:b9:66:1f:22:ed:66:65:cc:6f:92:
02:c1:a5:6d:01:4b:24:83:dc:32:ca:90:2e:8b:2a:2e:de:f6:
dc:c3:4d:af:fc:ed:d2:e5:b6:3f:23:cb:25:fa:db:b8:46:ce:
27:9d:fe:40:89:96:b2:80:99:1c:b6:3d:30:16:7e:9f:90:2a:
c0:03:0b:24:04:1c:e5:59:6a:d3:ab:a2:e7:f9:cd:40:cf:4f:
e2:3c:15:44:8a:57:d0:b0:64:ae:4a:26:d3:00:e2:c0:60:61:
28:3e:aa:b9:bc:a1:0d:a9:b8:f7:b1:a8:6c:4f:20:b9:39:9d:
15:7f:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:16 2025 by rpki-client