Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: kl51dX2NSbx0HqIEhalRQPFfOg9tM7x9mAGqZ0tfj8I=
Subject key identifier: BC:6E:BB:76:E9:B1:01:1D:1A:6A:FC:BC:CF:4F:31:FC:BD:3D:8B:B1
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0199FB45E0639FA8BD90A7B4909412CC843A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0613
Signing time: Sun 19 Oct 2025 07:01:24 +0000
Manifest this update: Sun 19 Oct 2025 07:01:24 +0000
Manifest next update: Mon 20 Oct 2025 07:01:24 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: oKEPITTD9isOuqqGjVthUm4s4sx8FWlLWBy3WgqGV3A=)
2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=)
3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e0:63:9f:a8:bd:90:a7:b4:90:94:12:cc:84:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Oct 19 07:01:24 2025 GMT
Not After : Oct 20 07:01:24 2025 GMT
Subject: CN=bc6ebb76e9b1011d1a6afcbccf4f31fcbd3d8bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:87:8a:9b:7e:f7:17:e4:f2:84:27:3e:4b:
cf:f3:ec:14:11:24:be:89:c9:ad:c6:a1:84:c6:e4:
8d:be:62:23:ca:1b:6e:b1:38:33:8f:61:1f:6d:d5:
71:2f:94:e1:05:1f:2c:1d:a2:4f:71:e1:33:e0:3d:
98:c9:c1:c6:a3:a9:58:75:c7:d1:91:49:9b:b9:89:
e2:94:65:15:01:a2:cc:e6:f7:4c:41:34:44:bd:67:
07:98:9d:2c:62:a9:13:d9:e0:a7:30:19:e8:42:d8:
eb:37:d2:25:e6:22:a5:8f:bb:96:9a:bb:f3:2a:7e:
43:c7:75:66:87:24:8d:24:92:43:c3:64:a8:8d:15:
2a:92:f7:0c:2d:f0:79:df:76:b7:04:fb:db:3c:f6:
e9:6a:c3:b6:1d:ee:c1:f2:30:42:25:e6:e8:83:58:
51:aa:d7:bf:a3:20:a8:e8:4e:5f:15:0e:e8:27:ae:
1d:88:ba:a5:cc:3f:42:0b:72:0d:a0:fa:f7:48:58:
b1:cb:f4:f7:60:3c:e6:33:eb:bc:40:87:35:58:16:
c3:f9:a8:dd:73:3b:cb:6a:9b:ab:1c:bb:fc:01:35:
52:29:0a:3d:14:b3:70:27:02:b6:74:c2:b3:e8:03:
cf:ec:0e:15:9e:98:01:08:6d:29:05:ff:f6:2b:41:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:BB:76:E9:B1:01:1D:1A:6A:FC:BC:CF:4F:31:FC:BD:3D:8B:B1
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:96:c1:02:7b:57:49:5d:ad:d5:6d:0a:16:9b:d1:5a:6b:b5:
de:48:f5:6d:8d:e2:21:5d:af:7d:c7:3b:d5:9a:df:d3:c7:f0:
61:8f:04:9a:0b:ff:90:a1:a0:a4:66:0d:25:a9:2f:82:67:cd:
d3:a4:d2:56:87:05:4a:c4:2d:74:39:46:ae:b6:15:d8:94:15:
08:34:64:dc:f3:8c:85:c8:df:d9:5b:49:dc:61:c0:03:a4:5a:
72:cb:fc:71:9e:27:26:e0:99:3a:c6:1a:59:7d:82:57:e4:01:
88:43:48:ec:0d:b7:87:7f:1e:25:77:3c:d0:6c:2b:82:37:d9:
45:26:30:56:e7:74:43:03:7b:e3:75:87:e2:89:8e:b3:c0:e2:
52:32:cd:e9:76:6e:ed:c1:43:7d:10:32:fc:28:d9:9c:fc:ee:
85:09:e3:36:bb:2b:10:78:a7:a3:ca:8c:7d:db:3c:77:cf:25:
d7:a5:06:9a:8a:30:35:9e:8d:ce:f3:ae:af:91:c2:c4:ef:87:
7a:99:d5:ca:70:f2:9a:34:ef:3c:22:e1:b8:b7:0f:4f:bb:91:
11:fb:fd:27:48:7c:5c:db:c2:87:e4:54:1f:13:f0:12:81:85:
bb:ca:ec:3a:e0:29:2d:0f:7d:9e:ae:68:71:7e:47:7d:0c:3d:
7c:74:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:59 2025 by rpki-client