Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier: cvnkwJNN+hSXculOmHHds+WsOe19Ak8GEQQovav1d3A=
Subject key identifier: E8:32:EC:C5:92:4D:30:70:FB:4D:94:68:59:2F:08:7E:B1:2C:24:9D
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer: /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial: 0199FDD8DF4D11D4083F9B43CFF2805DDD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:12 +0000
Manifest this update: Sun 19 Oct 2025 19:01:12 +0000
Manifest next update: Mon 20 Oct 2025 19:01:12 +0000
Files and hashes: 1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: 9UqurdIAug0wJ6nT5fkTIUbI8/qsPVx1LzcPxcxskZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:df:4d:11:d4:08:3f:9b:43:cf:f2:80:5d:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Validity
Not Before: Oct 19 19:01:12 2025 GMT
Not After : Oct 20 19:01:12 2025 GMT
Subject: CN=e832ecc5924d3070fb4d9468592f087eb12c249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:5c:e1:ef:3f:1a:3e:22:6d:77:f7:75:c3:
ad:85:16:99:75:ae:05:21:11:f3:81:63:8c:ea:9f:
4f:7e:df:c9:72:b2:4a:db:ed:96:75:00:b7:de:5c:
6f:5e:3a:99:3b:ad:ae:0a:5f:d1:9b:3f:ad:52:ea:
34:b8:f5:6f:be:ce:2d:5a:2f:45:db:3f:82:3f:28:
7c:2c:70:57:0a:c4:58:d8:e9:c5:a4:44:ea:b6:bb:
0c:7f:77:63:b6:5d:b8:32:03:9e:8b:06:74:8c:94:
99:da:44:44:40:3e:28:17:90:54:ea:61:99:e9:55:
92:78:d1:17:5b:7a:a7:87:75:3c:80:8b:d5:e8:70:
04:00:ce:8a:c6:53:ae:1c:b1:21:db:d4:f7:d1:4e:
17:1e:13:e9:10:e9:b5:fa:a4:f1:1f:0e:c4:0f:7d:
a7:56:81:4f:37:a7:68:fd:fc:7c:f3:a9:1a:64:4c:
1c:a3:0e:f8:ed:08:26:ea:2f:69:2f:3d:85:3c:a2:
89:6a:a2:11:be:d8:dd:7d:ca:b0:d8:eb:61:54:9c:
e3:f1:76:90:94:42:9e:46:96:cf:d0:59:55:1c:25:
b3:83:30:e8:52:9f:f0:cb:30:09:5a:0d:e8:2b:af:
5c:f8:02:9c:88:64:50:98:c2:61:c3:09:78:0a:c8:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:EC:C5:92:4D:30:70:FB:4D:94:68:59:2F:08:7E:B1:2C:24:9D
X509v3 Authority Key Identifier:
keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:aa:07:62:a8:6c:90:92:3a:a5:17:ea:74:b5:a1:b3:80:
37:34:05:b3:4d:4c:3e:6b:a6:ac:c2:a5:9c:81:4b:f4:2e:63:
0e:d8:dc:2a:63:65:05:65:90:77:92:17:3e:15:40:17:77:10:
23:5c:59:22:8b:46:0a:5b:82:43:64:d4:69:79:97:9b:2a:a3:
d5:69:c9:02:0f:bd:41:40:d5:e7:75:d8:6b:53:dd:7c:42:4b:
98:b9:19:26:1c:cd:d8:82:03:a8:21:5c:2e:c3:6d:3d:f8:db:
f2:1f:a7:b7:62:2c:34:b9:38:18:bc:76:7d:7a:0d:74:e6:be:
a2:ae:19:a7:ff:01:d9:25:e3:fa:8f:6f:dd:cd:9c:83:6d:56:
1d:9c:c2:37:96:0b:b1:e3:fe:7c:ee:48:03:49:d3:7f:92:99:
06:d4:52:40:d6:b1:eb:c1:5f:0c:08:2f:ce:4f:ba:fb:7b:5f:
02:f2:e9:be:5e:7f:a5:6f:79:f7:bf:fb:36:85:fa:2d:fc:10:
b4:88:16:56:45:15:70:8f:3d:b0:3e:97:bf:c8:64:dc:a0:64:
1f:25:c7:96:10:75:40:d7:4e:e6:2a:fd:5a:d6:88:16:d1:1b:
a4:a2:03:50:f5:9b:90:24:3f:d4:58:99:64:31:68:4e:ee:64:
99:59:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:59 2025 by rpki-client