Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: /vdk8V7iACRkUK+RloFBx/281dNyRdx8FjPicpve+nU=
Subject key identifier: A0:E5:9A:F9:44:93:0E:E0:A4:FB:25:34:87:AE:38:B3:B8:15:95:0B
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0197711A7960A5D4FAF3AFFAAD1A2596A54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 01:00:49 +0000
Manifest this update: Sun 15 Jun 2025 01:00:49 +0000
Manifest next update: Mon 16 Jun 2025 01:00:49 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: CcCY+ItMfSoh9gGcbTKOHIBqqW/J8Pww4IzoNaoTAks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:79:60:a5:d4:fa:f3:af:fa:ad:1a:25:96:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Jun 15 01:00:49 2025 GMT
Not After : Jun 16 01:00:49 2025 GMT
Subject: CN=a0e59af944930ee0a4fb253487ae38b3b815950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:32:5a:fb:20:fd:2a:10:07:02:57:cc:89:
2d:01:c5:a9:c5:12:d6:f7:cc:ad:d8:06:27:2f:3f:
d2:79:dd:6a:59:28:1d:d6:fe:6e:76:de:8a:be:29:
41:38:5a:3a:34:d1:7c:ca:af:5f:af:01:47:65:a5:
d8:51:b3:38:47:79:c0:dd:c0:8d:11:7c:c4:bf:3c:
2d:4f:5d:da:20:3e:36:6b:c9:e4:63:a4:62:7b:a4:
dd:00:27:29:a8:53:43:14:5b:ed:10:d7:d2:8e:92:
51:20:d5:7e:70:cf:5c:be:8f:dc:5f:74:ff:26:90:
3b:dd:29:e9:35:d8:d3:ef:b4:7d:31:a1:0d:9e:9d:
04:f9:63:1c:e8:d4:e5:61:43:62:99:a8:f2:02:38:
50:3a:57:53:1f:f4:e2:25:ca:cf:83:9e:fa:5d:f1:
a9:51:66:1a:c9:cd:eb:c8:70:b5:50:35:58:c8:3e:
cd:92:6c:f1:95:c9:e5:c3:d7:fa:ae:75:c8:b3:f0:
40:2d:f8:ac:d4:4e:01:19:a4:b1:be:1a:0e:05:83:
84:b6:4b:7b:11:13:8b:6c:e2:8f:ec:c1:51:50:e8:
0a:2e:7e:05:2e:70:57:d8:da:22:d1:97:b6:f9:02:
f5:17:89:af:4d:67:40:21:46:6e:99:4e:5a:dd:79:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:9A:F9:44:93:0E:E0:A4:FB:25:34:87:AE:38:B3:B8:15:95:0B
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:ea:b4:72:b3:e2:77:55:30:71:ee:f5:b0:26:80:c6:7b:
ba:e8:f6:3a:44:a6:8e:a8:61:f4:c9:18:4a:02:96:5b:ae:35:
ab:59:8f:23:fe:d2:ec:0c:0b:06:b0:a6:3e:8d:be:6b:1a:e1:
b2:12:1b:f2:49:9b:ae:af:bf:62:11:6b:0e:ba:98:9f:93:19:
f7:9a:7d:94:37:c6:ad:de:5e:19:61:4a:10:8f:6f:1a:c0:01:
3c:bf:e1:a5:8a:d4:77:21:63:b1:95:82:3c:42:ac:26:a1:19:
11:f7:67:f4:17:24:cd:45:f4:fd:0b:49:3f:96:45:cf:ac:6e:
23:30:34:cc:9b:0a:c3:c5:d6:34:37:7a:38:b2:5f:15:44:70:
21:d0:72:d5:89:06:85:0b:64:d2:a4:36:04:dc:55:75:00:5a:
19:65:6c:cf:c6:cf:e1:d6:62:7e:87:56:88:b9:39:da:87:df:
98:d3:cf:32:e5:d4:91:aa:d3:ac:4f:6e:d0:af:15:e8:db:f9:
24:74:98:6e:0c:77:4c:a9:68:03:0a:9c:b2:f9:b9:2c:ba:77:
e3:de:b8:ee:f1:d4:19:51:32:02:3f:d3:e4:49:97:a3:ae:97:
53:11:6e:0f:ab:87:f9:ec:c4:10:f9:18:a3:db:b9:67:68:fb:
1e:e6:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:06 2025 by rpki-client