Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: JlaVdDMIZ/9jzMBd4zh8gxyQFvQZx7NkI2XZSdfLX9o=
Subject key identifier: C6:36:FB:F5:1A:C9:8F:43:0F:7B:70:A4:0E:60:2F:B7:89:50:04:6A
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 0199FC5882D71FC1AAAB0586041D86B66203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: elp3XwNt445+I45Sq8rBs7r77te4P1Ep8ewSX/LnJxs=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:82:d7:1f:c1:aa:ab:05:86:04:1d:86:b6:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=c636fbf51ac98f430f7b70a40e602fb78950046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:bd:83:cc:c8:77:25:ca:12:52:03:95:b8:
89:a6:aa:7c:d8:44:10:f5:00:38:af:ce:eb:2b:5e:
9a:0d:c9:df:5d:cf:95:0f:d5:de:51:20:57:5f:be:
17:8b:92:0f:f5:d4:87:21:4d:0a:f3:d1:68:80:38:
88:de:42:bc:90:b6:52:cc:46:9b:ab:37:ff:e0:87:
9c:3a:0f:90:84:a8:08:43:f0:45:8a:c4:7e:bd:83:
f7:3f:f5:47:fd:a4:fc:1b:f3:bc:b7:e6:af:09:bd:
59:77:da:26:1e:3c:b6:e2:bd:0c:f9:89:82:e2:e5:
ce:d3:55:9b:e0:a0:78:6b:22:4d:aa:a0:32:77:9d:
94:54:94:c8:9f:9d:d1:80:08:23:61:be:49:17:ac:
a9:82:72:e0:72:28:28:85:b7:1e:d1:d6:54:0b:44:
27:c3:1a:4a:3a:a4:d6:be:18:cc:f4:38:8a:6a:9b:
17:95:b4:81:cc:d9:1f:70:c5:e8:f3:b1:a3:3b:38:
e7:e7:6d:5f:a1:a9:1d:25:fa:5e:83:94:7e:11:97:
36:4c:65:37:51:e6:26:96:93:e2:02:5a:fc:e6:2a:
19:d1:40:8c:83:3c:e6:f8:ea:f9:86:30:c0:76:71:
c4:ed:48:15:c1:25:e9:d2:af:ec:83:7e:cf:d7:29:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:FB:F5:1A:C9:8F:43:0F:7B:70:A4:0E:60:2F:B7:89:50:04:6A
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:7d:28:27:de:7b:cb:8b:35:31:5b:2b:65:cf:5e:b5:e7:
c7:88:df:83:2b:40:84:e2:5f:aa:c7:b0:09:ae:74:9c:9b:09:
62:dd:24:bd:c2:99:bb:17:a0:c8:59:2b:64:58:9b:29:73:3e:
8c:be:a9:c8:1a:e7:f6:26:d7:fc:c9:4c:ef:f3:46:e7:46:f5:
23:fe:6d:e9:22:14:d8:14:72:03:6e:82:1b:e5:7e:60:5d:67:
77:c9:f1:98:af:90:f8:eb:ec:db:0c:83:c6:ff:0a:a9:c2:27:
86:f6:09:d6:13:94:03:3e:60:cc:63:14:99:73:28:4b:1b:32:
5e:e6:35:f1:14:3f:22:6f:9c:d6:f6:19:f0:92:72:3e:4b:09:
1b:a6:3c:d4:9e:e1:52:40:96:56:e4:96:a3:38:8f:51:f7:91:
b1:f5:5d:d0:64:dd:e3:44:59:1c:b4:98:19:c6:20:b2:c5:59:
a4:8d:c4:d1:22:c5:b1:90:cd:e6:bf:05:64:aa:62:43:44:7e:
a6:32:09:9c:fe:6d:7d:0e:87:43:3f:98:e1:8d:8a:aa:7e:b3:
26:ae:f1:e7:10:8b:69:e7:a3:8f:50:04:84:95:8f:f6:90:a6:
60:a2:8e:02:24:40:c6:78:61:02:3c:3e:24:52:6d:2f:95:4e:
af:86:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:12 2025 by rpki-client