Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: 8bNNmpMDgjEaVs/aME/nPFjwUMi2pzilaOmh80H4CSc=
Subject key identifier: E3:49:42:F4:39:52:F4:ED:55:B8:CB:00:E0:69:08:63:E0:43:76:C1
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 0199FBEB17F3733A16E203968713137BAF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 07B1
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: mHqj9u3h4ZQJA34cR7uOE5kK1WGVJPsiJV7NAH+eQ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:17:f3:73:3a:16:e2:03:96:87:13:13:7b:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=e34942f43952f4ed55b8cb00e0690863e04376c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:fa:1e:bb:76:09:6b:dd:c8:f1:8e:46:d2:
4d:e5:65:a3:0e:bd:db:68:f6:8c:8a:76:da:09:dc:
22:11:58:bd:de:3e:75:8e:77:eb:bb:27:4c:a4:da:
79:26:84:5e:a5:97:f1:c1:e6:02:de:45:81:ff:35:
00:1c:62:a4:13:e5:89:5f:51:24:83:15:3b:50:f5:
97:c5:1a:8e:18:43:23:8c:ed:b7:bb:e2:6a:af:06:
39:f1:2b:94:8c:92:e0:79:14:38:c0:8f:13:d3:55:
81:39:ff:34:73:e7:cd:91:5f:ac:c3:53:e6:95:47:
eb:e2:67:80:9a:d9:21:c1:99:b0:e4:9e:fb:64:de:
f8:d4:df:91:25:8d:97:c4:12:0c:9e:72:de:0d:d8:
62:43:b6:56:6a:10:e5:8e:44:9d:48:7b:e8:15:0a:
4f:56:4c:27:a2:5b:06:63:c7:cc:73:a0:ee:a4:9c:
ac:ea:76:3f:19:8a:cc:7e:1a:26:a6:90:aa:8d:c9:
c6:f9:06:73:85:54:6b:b4:15:b5:76:17:ad:c5:94:
60:f0:66:86:cf:85:70:9a:0a:62:57:6a:d5:04:2d:
01:d9:d2:83:80:d4:ac:8b:49:66:43:a0:cb:b2:f7:
73:2d:43:8f:f3:53:6b:bb:50:16:6e:7b:85:30:9d:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:42:F4:39:52:F4:ED:55:B8:CB:00:E0:69:08:63:E0:43:76:C1
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:92:c3:a6:6a:a3:df:2f:e8:9b:29:7c:bc:b3:24:77:08:
5f:96:9b:6e:99:87:56:a0:f2:e0:9f:45:16:5d:4f:59:9a:79:
cb:19:64:97:04:df:4c:d8:34:70:ce:c3:f1:79:db:a6:58:02:
6b:23:e6:16:16:ae:7e:c8:28:05:b5:8f:86:b3:13:f5:16:2b:
45:4f:3c:b6:14:df:d8:ea:f8:45:0b:0b:28:e0:fe:95:6f:96:
b8:f6:28:c1:f4:26:f4:45:db:2b:e5:68:ee:b1:2b:b4:52:16:
84:46:56:bc:14:64:7d:40:d6:08:c7:53:78:d2:28:91:69:49:
ca:95:13:e7:fa:31:f9:92:33:56:8e:2a:30:9f:98:1e:89:d0:
60:8a:8a:b1:ba:11:c4:fa:28:7a:00:a3:d2:f9:89:cf:f0:8d:
a8:53:29:54:ec:17:a0:bf:ef:55:b3:aa:4b:34:38:22:19:ac:
a8:89:a9:aa:69:09:49:73:7c:0f:17:a2:45:f2:ff:a8:14:b9:
11:91:a9:84:31:2a:f1:a8:e9:d5:cc:9f:9f:72:84:ed:f7:3f:
4d:55:de:2c:02:e3:c7:c6:80:03:71:97:ee:86:c4:68:fd:9f:
90:e4:bf:98:dd:29:1a:82:3e:e8:3b:07:1f:bd:33:54:56:da:
60:fe:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:32 2025 by rpki-client