Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: qRXxui5TZojy2JcRrD2FIFJvHAkh/FaR3+MW2RxI1ic=
Subject key identifier: 5B:42:EF:60:D4:05:1C:8D:60:68:2A:BD:22:FB:5E:26:0F:B1:5D:F1
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 0199FC8F9F80B7D5CC9B201A2D204BBCA6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 05B9
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: K1//LRq4p/mqSjcvEmtEoRnQptswRx9ht19B2SUCt1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:80:b7:d5:cc:9b:20:1a:2d:20:4b:bc:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=5b42ef60d4051c8d60682abd22fb5e260fb15df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:d9:5c:e8:7e:da:6e:77:e3:48:60:4f:b1:
4a:69:a3:b1:20:2d:8e:37:33:46:87:f4:b5:88:fd:
21:90:16:59:37:3a:db:58:68:6e:9f:9a:b5:6a:67:
29:42:05:94:ad:d0:80:ae:b4:1e:63:b0:e6:5a:f0:
02:7f:9d:20:8f:af:ac:b8:83:96:f0:69:15:9a:d1:
2e:f9:b1:87:a5:f4:23:11:5b:34:90:86:2e:ea:e2:
06:8c:3f:c2:c9:69:d6:5f:96:bf:bb:76:2a:84:ed:
45:72:36:9f:81:b8:fb:2b:88:40:be:b6:10:5a:4a:
54:95:b8:e2:5a:2c:da:25:0e:0e:5c:74:d7:fd:2a:
a7:ef:bf:94:d5:20:50:89:ae:d1:1a:b5:a0:b6:ad:
1f:18:86:15:9d:da:2c:60:f2:7b:be:15:82:43:ed:
af:f6:ab:ee:fc:4a:50:8f:41:5a:42:f6:d7:a5:f9:
d9:11:f5:b5:ff:cb:4c:d9:16:b8:93:e2:6b:f3:8b:
ea:39:09:10:4c:08:1b:95:45:65:60:71:02:0d:5e:
92:6f:7c:64:40:f3:d4:5b:75:ea:e9:d3:be:c7:e5:
d4:14:de:74:56:62:92:a1:34:53:13:9e:63:22:25:
25:21:b5:a5:29:84:df:e2:ed:1e:29:1e:6b:cd:16:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:EF:60:D4:05:1C:8D:60:68:2A:BD:22:FB:5E:26:0F:B1:5D:F1
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:49:2b:65:e9:9c:f2:03:9d:ea:ba:97:6b:af:e5:9e:a0:
7a:a9:59:d8:3e:3c:41:cd:b4:c3:cb:dd:88:3e:47:d5:4e:03:
08:6b:bf:60:44:65:9b:a7:36:fe:33:7f:fd:59:d7:5f:79:5c:
2b:e6:e0:4b:48:7d:af:f3:2b:08:e8:6e:8b:f9:24:49:76:8d:
f5:b4:f0:4a:85:c7:ff:5c:dd:73:f9:a7:3e:06:07:06:97:b3:
0e:21:d2:be:94:a2:43:05:75:08:80:00:12:a6:b3:32:95:46:
2e:36:19:6f:5c:9e:74:00:13:9f:9f:f0:7d:24:03:fb:26:91:
f0:da:5c:c8:44:31:ba:10:c4:c5:cf:67:b8:cd:2b:3b:57:db:
62:0f:83:cd:af:df:83:86:c3:16:67:9b:0c:e9:6b:02:43:91:
88:c3:29:56:fa:8c:df:da:62:6a:22:e2:54:f6:b3:3e:1c:4d:
2d:ac:75:c7:8b:42:88:58:8d:7b:f4:94:2a:78:7d:ef:25:9f:
72:70:04:cb:0d:6c:b2:47:dd:6c:39:ce:87:bd:ba:66:20:d6:
e6:e2:1f:34:87:ee:27:80:52:a8:d3:dc:b3:a8:5b:db:e3:db:
ae:64:89:70:2c:a7:09:42:63:48:c6:74:eb:a2:f9:6b:f2:8c:
1d:21:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:39 2025 by rpki-client