Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: bkh15yn4I+dARBel5MYCasi5zM57F609LRl51tnGMBk=
Subject key identifier: 9F:9D:E2:79:0A:84:E9:DB:11:3B:DD:DA:22:B9:AE:BC:A0:9E:C7:35
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 0199FC587F756304511B000C913D0ABA0063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 1374
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: On478gl+VCX1UgSrZPODwx9uxpTMWFjHg/bdsMQ+geo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7f:75:63:04:51:1b:00:0c:91:3d:0a:ba:00:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=9f9de2790a84e9db113bddda22b9aebca09ec735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:28:43:ab:b7:b8:e3:b7:08:d3:c6:ba:a4:
66:90:de:e3:9b:09:a7:a0:dc:04:d1:5e:5e:d4:7d:
1b:0e:46:36:a7:54:22:65:14:75:3d:00:74:38:a0:
95:ca:41:fd:4a:81:8a:0d:8f:b8:80:9c:4b:22:63:
5e:c8:2b:27:fc:6c:bc:46:57:ef:08:5b:cc:47:84:
a4:90:ef:aa:e2:33:81:9a:44:00:f7:f3:b1:88:03:
f1:14:d7:ae:5a:bb:48:12:e5:4b:7a:db:1b:ed:ab:
18:41:09:a4:b4:ec:d3:48:5b:a1:37:a9:9b:dd:65:
a1:7c:68:c5:e4:91:f7:bd:9b:c0:2f:91:6d:13:ee:
7d:a8:fc:dc:a3:23:7c:c9:43:b1:39:01:77:cb:f9:
db:9f:07:db:89:e4:e9:6c:4d:8b:90:ee:63:ac:64:
c4:bd:88:fe:34:4d:e6:88:fe:5b:6a:58:f8:c6:45:
fd:f7:d4:5a:d4:3c:39:5d:aa:a3:fd:92:43:9a:0d:
62:e9:6d:df:2e:ee:c8:74:bb:17:5b:29:81:64:1d:
40:4d:16:47:b3:f3:06:94:eb:f6:79:0e:51:3f:b7:
04:4e:d4:c5:bb:63:fe:cb:cb:14:43:90:c6:71:36:
fc:58:8e:56:2b:5c:31:71:eb:cd:45:2f:df:86:af:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:E2:79:0A:84:E9:DB:11:3B:DD:DA:22:B9:AE:BC:A0:9E:C7:35
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0c:ae:5a:9b:b2:2f:ae:63:1c:f5:59:aa:e7:ae:6b:23:0c:
d3:e5:48:2b:12:83:29:51:fb:25:5a:35:08:2a:e6:2f:0f:ba:
56:d7:9c:1a:90:ad:a0:7c:7c:c7:13:16:56:d4:4c:02:63:2c:
15:81:14:27:60:a0:ca:4f:10:35:d8:13:82:6d:fe:1b:84:51:
bd:f1:e3:95:e7:b7:e0:99:eb:91:34:1a:89:e7:cb:ce:6c:de:
8f:69:a2:8f:c8:62:d4:c0:cb:99:7b:ce:5e:67:85:51:f1:ea:
53:f2:e7:2d:41:b0:c0:b3:c5:35:00:bb:1f:79:ae:c1:cb:33:
d3:d8:f6:bf:c2:c5:29:f0:91:d3:30:5d:92:23:d2:ac:51:dc:
9a:f2:ca:e6:4e:5d:d4:0a:12:47:25:c5:b2:cf:42:90:50:e0:
eb:a1:b4:b6:b7:9d:14:3a:ef:09:77:3f:97:25:28:ab:54:9b:
fd:ec:27:26:ef:5e:f2:39:79:07:15:e9:08:ab:45:eb:c0:b9:
6f:ca:6d:9b:05:d2:35:a4:5a:30:dc:e3:0b:63:0a:43:a2:4e:
73:11:29:b0:a8:ff:59:60:51:73:c9:f1:63:b2:39:ed:e4:46:
34:a9:07:a9:b6:0c:96:cb:a7:f2:ac:c6:4f:ab:65:ad:b1:cd:
51:50:5a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WH91YwRRGwAMkT0KugBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTE2MTRiNmJmYjZjNjE4NzgzNjc2OTExYmRmM2JjODI5
Zjk3ZDcwHhcNMjUxMDE5MTIwMTIyWhcNMjUxMDIwMTIwMTIyWjAzMTEwLwYDVQQD
Eyg5ZjlkZTI3OTBhODRlOWRiMTEzYmRkZGEyMmI5YWViY2EwOWVjNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnwoQ6u3uOO3CNPGuqRmkN7jmwmn
oNwE0V5e1H0bDkY2p1QiZRR1PQB0OKCVykH9SoGKDY+4gJxLImNeyCsn/Gy8Rlfv
CFvMR4SkkO+q4jOBmkQA9/OxiAPxFNeuWrtIEuVLetsb7asYQQmktOzTSFuhN6mb
3WWhfGjF5JH3vZvAL5FtE+59qPzcoyN8yUOxOQF3y/nbnwfbieTpbE2LkO5jrGTE
vYj+NE3miP5balj4xkX999Ra1Dw5Xaqj/ZJDmg1i6W3fLu7IdLsXWymBZB1ATRZH
s/MGlOv2eQ5RP7cETtTFu2P+y8sUQ5DGcTb8WI5WK1wxcevNRS/fhq/zEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+d4nkKhOnbETvd2iK5rrygnsc1MB8GA1UdIwQY
MBaAFGxRYUtr+2xhh4NnaRG987yCn5fXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMt
N2Q1ZWIxODMxZWYxLzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMtN2Q1ZWIxODMxZWYx
LzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgyuWpuy
L65jHPVZqueuayMM0+VIKxKDKVH7JVo1CCrmLw+6VtecGpCtoHx8xxMWVtRMAmMs
FYEUJ2Cgyk8QNdgTgm3+G4RRvfHjlee34JnrkTQaiefLzmzej2mij8hi1MDLmXvO
XmeFUfHqU/LnLUGwwLPFNQC7H3muwcsz09j2v8LFKfCR0zBdkiPSrFHcmvLK5k5d
1AoSRyXFss9CkFDg66G0tredFDrvCXc/lyUoq1Sb/ewnJu9e8jl5BxXpCKtF68C5
b8ptmwXSNaRaMNzjC2MKQ6JOcxEpsKj/WWBRc8nxY7I57eRGNKkHqbYMlsun8qzG
T6tlrbHNUVBaCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:50 2025 by rpki-client