Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: S8pjcjO48IaUrMxEti+nObpPzYGXGPOdGdpZg8rBwo8=
Subject key identifier: F1:79:1E:0B:17:D2:23:0C:C4:87:8E:5C:95:B1:87:A7:17:DC:12:37
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 0199FEB4D60C8EB7C6017B34D99CC2306F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 1164
Signing time: Sun 19 Oct 2025 23:01:28 +0000
Manifest this update: Sun 19 Oct 2025 23:01:28 +0000
Manifest next update: Mon 20 Oct 2025 23:01:28 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: +vVm/lgKxArU4JIDj0WJ6TpmIPxcz2Hc6WdTGUYzxD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d6:0c:8e:b7:c6:01:7b:34:d9:9c:c2:30:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Oct 19 23:01:28 2025 GMT
Not After : Oct 20 23:01:28 2025 GMT
Subject: CN=f1791e0b17d2230cc4878e5c95b187a717dc1237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:31:b6:75:00:7c:e9:3e:56:f7:01:e0:02:
f3:0d:ff:d9:43:c5:4e:c6:4c:ee:73:bd:60:98:4d:
08:cd:1e:68:45:18:e8:0e:87:78:2f:42:16:b4:44:
fd:1e:cd:13:5b:6e:f7:2c:6c:f6:b3:cb:b1:8a:5e:
b3:06:52:3d:f6:f9:27:11:d6:e3:95:78:76:42:14:
d6:72:3d:0a:f4:00:65:7f:b4:8e:2e:18:b0:37:96:
4d:d4:7d:e8:c6:fd:f3:e0:e5:af:c2:d5:1b:9c:9f:
21:bd:8b:5e:0b:b7:2b:ed:5b:bb:b1:a6:28:73:0a:
df:61:25:e8:00:82:1a:cb:b8:f1:53:d5:a6:87:24:
fb:71:fc:28:f2:71:95:30:ca:5c:8f:c9:80:07:8d:
cc:cc:76:67:57:d9:4e:3d:2b:90:4a:5d:b8:d7:8d:
4b:67:48:d3:28:76:dd:ac:ed:90:8d:c7:7f:2d:ea:
c3:31:a8:cb:29:df:e5:e8:88:86:7f:91:c4:05:ea:
18:39:4a:50:56:e9:4f:cf:35:ef:3c:ef:24:19:9a:
63:3d:21:9f:49:69:1f:85:c8:8a:11:a5:cb:52:59:
8a:d4:17:3c:91:d7:cf:b9:94:8d:98:31:8e:2c:26:
72:e9:39:51:8e:9d:67:60:25:d3:c9:7a:cf:42:80:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:1E:0B:17:D2:23:0C:C4:87:8E:5C:95:B1:87:A7:17:DC:12:37
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2a:d0:d8:61:08:a9:2e:0d:31:fa:a1:b3:0b:74:00:3f:d5:
58:89:1d:1b:2d:3f:47:a1:c3:c0:f5:9e:e2:fa:cb:ee:34:17:
01:f0:71:c0:9d:e4:9f:73:9c:69:8c:51:e6:5f:3e:4d:ae:c6:
ff:d2:1e:f6:9e:37:0f:72:83:6d:5e:e6:97:f5:06:4a:c3:54:
24:b8:d3:90:14:69:7c:d4:fb:a6:af:9e:64:a7:13:fe:40:59:
b7:93:67:ed:02:55:08:aa:bd:ce:de:a1:36:de:60:d6:e1:3a:
d5:93:13:a6:66:60:b1:cb:ea:bb:1d:f3:fd:ef:8d:24:25:6d:
cb:0a:27:67:01:c5:4b:e8:7b:c5:a9:c3:34:f0:88:2f:cc:a8:
f6:0a:80:22:6f:53:79:94:19:d4:7a:f4:18:b1:4b:a3:0d:de:
e6:82:49:17:3f:17:10:33:11:00:ac:e6:71:34:dc:cc:f1:ef:
59:be:aa:83:61:56:36:9b:83:ca:f2:fa:7f:25:61:1d:18:07:
a7:d6:0b:a3:e9:29:28:72:1d:65:b2:4a:4c:78:89:a8:2e:9a:
a4:c4:9f:05:8a:0c:d4:65:95:6b:cd:af:a5:44:79:da:e2:a9:
bb:02:ec:3b:d8:f1:95:84:46:93:1b:c8:73:54:af:49:a7:d1:
ef:94:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:25 2025 by rpki-client