Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: 7iXTzFjdQOaMsRmz8Y2hxzH/pto0Jm9xCpTXH/F63Vc=
Subject key identifier: B8:20:97:FD:5B:B2:01:0B:E4:35:5F:F5:38:E8:C1:41:85:BE:DE:8F
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 0199FB0EE974EE13FD490891D6383232DAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1259
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: hob5OCwiVYn1LlA1JyHEZqJ0zQTKLPdH1Md8m6VT6CM=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e9:74:ee:13:fd:49:08:91:d6:38:32:32:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=b82097fd5bb2010be4355ff538e8c14185bede8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:9c:6d:a8:f8:37:c8:34:2d:85:fb:5a:66:
a1:64:f9:9c:34:e8:c8:88:90:43:e2:fc:76:96:39:
5f:37:e2:fb:d4:82:81:66:96:bc:f7:31:c6:37:7e:
7a:e1:43:74:9e:86:b9:6a:e5:a8:b5:b0:5e:cf:a2:
ee:af:c8:7a:27:d9:b1:02:cc:c0:f9:eb:80:03:b7:
b1:4c:a6:9a:09:74:e1:1e:8b:60:52:c0:c2:51:ed:
2b:02:96:87:cf:69:82:6f:ed:1c:93:2f:0e:2a:aa:
ce:83:58:2c:4a:0b:1e:e2:ea:5c:97:dd:ac:f4:07:
b2:4b:57:52:aa:12:63:58:cd:64:57:77:02:b4:9c:
1e:9a:72:e0:dd:19:28:70:ab:54:da:99:ed:ae:ca:
37:23:53:05:94:49:56:27:36:76:bb:c8:a9:ef:c8:
d6:2f:99:7f:b0:39:80:2e:a0:c9:69:c9:f5:62:e2:
2f:73:ea:a0:27:fd:b6:41:81:9f:fe:4e:17:cf:a4:
65:34:57:01:fa:95:cd:a7:57:16:f6:c9:0d:8b:65:
03:56:af:36:c0:b2:d6:1d:e4:3a:6c:93:f7:d7:9e:
97:cd:58:c1:9f:b1:8e:8d:f9:0b:63:64:c4:32:8b:
36:8a:da:de:bd:f2:0e:14:9b:83:d8:b8:d2:a7:ee:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:97:FD:5B:B2:01:0B:E4:35:5F:F5:38:E8:C1:41:85:BE:DE:8F
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:dd:f6:b3:a2:6d:3f:9f:ce:ff:01:52:7f:4a:52:e4:0a:
9e:cb:f4:4b:fb:0a:a5:c6:42:08:aa:3e:36:18:95:71:19:e4:
e4:a0:e7:93:dc:f4:69:f9:a3:90:0d:a8:82:23:fa:5c:8a:43:
f6:a9:24:e7:aa:81:46:9e:90:e5:ad:1e:ba:98:32:9a:f0:42:
14:6c:98:c3:ca:f7:99:82:3a:22:7d:66:56:c7:58:b5:dd:49:
fb:ca:0f:5c:e5:61:f9:9c:34:c1:55:88:03:d0:5b:c4:06:af:
23:6f:57:f6:45:bf:90:f2:9f:c9:bc:9f:6e:eb:ed:8a:f2:4b:
52:4e:4b:16:c2:45:be:b4:c5:f8:5a:30:78:c0:f1:36:31:7a:
a7:cb:2d:7d:b8:e1:9d:f3:6d:d7:56:6f:d4:13:b7:b9:d1:c6:
e9:b6:da:b8:53:c1:10:2b:64:23:3d:21:88:41:b8:34:d3:94:
29:17:49:03:64:d7:4c:00:14:68:43:c6:0f:9b:73:c3:ba:0a:
4d:b3:2b:79:73:55:0d:32:e2:ba:7a:fd:a3:1e:56:d2:b4:ff:
06:e6:b7:27:47:26:6c:01:0c:f3:db:4b:5b:a9:44:b8:79:68:
32:57:3e:36:c1:16:90:cf:a3:ee:b2:39:98:80:d1:de:16:ce:
82:6d:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:37 2025 by rpki-client