Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: zndb22VeDIcuGoTLT/XzkF+XQVRXgvvJuK1VgSJyftM=
Subject key identifier: 71:B8:42:C5:F0:30:B3:4C:11:ED:00:41:84:97:BA:57:CE:9A:FF:FF
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01977187F6E87408690B14653E8FD373D950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0ED8
Signing time: Sun 15 Jun 2025 03:00:25 +0000
Manifest this update: Sun 15 Jun 2025 03:00:25 +0000
Manifest next update: Mon 16 Jun 2025 03:00:25 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: n8ZxYpIGtS/2VIXuDgKf2aW2EFaPhbBDgRucBBI9DDo=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:f6:e8:74:08:69:0b:14:65:3e:8f:d3:73:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 15 03:00:25 2025 GMT
Not After : Jun 16 03:00:25 2025 GMT
Subject: CN=71b842c5f030b34c11ed00418497ba57ce9affff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:10:e9:b4:dc:39:1f:ac:5a:f4:ca:b1:78:
1f:f3:06:14:de:34:92:11:19:c9:83:55:ca:cf:eb:
9b:30:86:b4:44:82:e0:2d:41:51:e0:02:62:7d:a2:
a2:3c:7e:ca:66:0c:76:a0:f7:d7:ee:fc:64:89:1c:
f1:6c:1e:53:e0:37:9c:55:0e:6d:6e:4d:03:c4:55:
6b:f8:d7:0e:cb:d8:c4:66:ed:5b:fa:c5:87:3c:3b:
65:a5:aa:14:38:3f:9a:01:fd:0e:68:8b:7e:44:df:
1d:56:28:b5:05:f3:52:8e:00:78:13:db:8b:8e:99:
7e:e3:15:22:4c:ed:55:7c:06:65:45:a8:e8:e5:99:
82:56:98:81:0f:1e:4a:76:69:99:05:d0:71:da:54:
16:f1:0f:a5:7c:d4:93:e7:f1:3f:7f:d6:76:88:a9:
cc:73:2e:1e:25:75:2f:ba:8c:b2:b1:f9:28:74:a6:
19:7b:1b:77:01:f6:0f:1c:6d:4a:ac:ac:1f:54:cf:
03:41:aa:2d:8a:e7:d7:77:44:90:c1:9a:19:30:19:
91:62:6f:2f:e6:28:18:3a:89:8d:f9:15:8d:d2:32:
48:24:8b:73:ca:ef:c2:02:cf:de:34:51:3f:22:0e:
ce:e0:70:36:a0:b6:47:00:bd:5a:03:55:0b:18:00:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:42:C5:F0:30:B3:4C:11:ED:00:41:84:97:BA:57:CE:9A:FF:FF
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:6d:26:7c:15:fa:e2:3d:91:dc:8f:5b:91:1f:18:53:a8:
14:4f:39:b3:fd:6f:54:a6:0e:fe:a8:6d:41:6b:cc:cd:4f:66:
b6:9b:8a:29:58:72:e1:e5:51:af:1d:54:2f:45:c9:2a:b5:83:
b0:3d:b0:16:3e:2a:e5:2d:4e:83:65:82:12:a3:1b:e6:ac:62:
d4:94:7f:93:c4:fb:c6:16:c7:7c:55:d4:ec:44:31:2f:98:19:
b5:3d:45:a6:fb:88:58:a2:dd:68:df:ca:b5:3c:07:34:65:71:
4d:43:67:9e:86:9e:01:f4:19:56:9e:6c:ac:b5:8c:ed:2a:89:
ac:ea:83:33:42:26:3c:86:b9:19:d8:3a:47:89:0a:c3:00:6f:
45:64:45:ef:5c:86:a5:35:f6:2d:41:5d:b6:36:5d:5b:2d:a8:
57:4d:35:b3:26:21:9d:3e:96:29:aa:81:cb:a3:25:2d:4c:83:
14:85:aa:ab:ca:49:dd:fd:2a:9f:84:95:5f:9e:78:a9:54:c9:
a8:26:b9:6b:6c:91:63:5a:ae:dd:10:6d:95:4b:80:1f:3a:7a:
e2:25:c2:8a:be:f2:7c:29:dd:bb:56:60:74:11:68:f8:9d:d6:
ad:dd:07:25:0d:48:0f:9d:d2:80:5a:79:d3:0c:17:a1:2f:7b:
1d:56:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:59 2025 by rpki-client