Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: aEMVyF+HAV65057aC6UmDgUpJNSfw+r1PpfkaYqMaSY=
Subject key identifier: 40:07:6B:F8:68:64:36:BD:5D:E9:44:E3:7E:96:BA:B1:07:17:DD:22
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 0199FB45B1A3E0C22784E5EF4FA1781F436B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 132D
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: rryLJI/JkDiwvpRruhXaswldxPywEDw5/AOtwBnz9Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b1:a3:e0:c2:27:84:e5:ef:4f:a1:78:1f:43:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=40076bf8686436bd5de944e37e96bab10717dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:f9:16:c0:a2:d4:b8:4e:ca:2a:31:88:33:
d6:1e:43:63:c0:93:08:3e:bf:6e:b2:b1:13:f6:b2:
e5:23:af:1b:ce:eb:d0:1b:69:2d:32:37:fe:15:bc:
69:ad:73:26:9b:25:2a:24:23:06:71:54:ac:65:29:
a9:54:56:05:16:4c:e3:0c:5e:67:02:98:73:21:c2:
c0:63:07:93:65:fb:7a:be:c3:7f:47:1d:89:d2:a2:
2a:63:f0:a7:32:8d:d5:4b:40:47:fd:c3:8d:4d:58:
08:e5:c7:66:21:74:15:34:d7:f2:e0:16:e0:88:01:
0a:9e:71:9c:db:d8:0f:1b:4b:45:d5:d0:b7:2b:53:
c0:7b:8c:71:ce:f7:ce:74:35:8a:35:bd:97:ab:6f:
56:2a:d7:11:72:fa:09:d1:97:4f:a5:44:f4:1a:dd:
35:32:4d:40:ce:30:5a:7d:5e:56:82:db:f8:d8:88:
3b:1f:c2:b0:b6:78:58:69:b5:d3:52:0d:53:56:7e:
bb:8c:80:e5:8d:dd:c2:3c:72:b2:a9:e5:88:dc:54:
76:7a:65:26:7d:dc:14:97:be:42:41:0f:ae:28:0a:
9a:ca:a3:8d:49:4f:5d:32:ad:00:29:cb:5d:99:f1:
95:6e:f7:5e:1a:6b:cc:4f:cd:2b:f1:54:18:e4:0a:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:6B:F8:68:64:36:BD:5D:E9:44:E3:7E:96:BA:B1:07:17:DD:22
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:63:8a:06:c9:52:69:de:a2:d2:40:60:d3:a0:cb:c0:fa:da:
25:26:44:ba:1a:69:76:fe:a6:be:3f:de:fd:d0:f1:75:06:00:
c1:8f:9f:3f:94:a9:33:fe:77:61:4f:ba:13:bd:0e:ac:3b:bc:
e0:2b:ab:fd:dc:6d:4e:a4:60:81:e5:79:ec:26:9e:a2:b7:43:
2a:02:ae:84:1d:f8:1d:09:8b:68:85:78:c0:6e:b3:78:88:3d:
84:5a:0c:23:7e:2a:05:18:cd:e2:f3:e2:8d:b0:72:a9:5b:a1:
5b:d8:07:62:57:5c:bd:a3:7a:96:0b:67:6f:6f:8e:be:cc:48:
dd:03:de:6c:cb:6b:ea:ac:02:11:e8:39:72:fb:a9:50:30:00:
db:fb:86:93:75:b0:95:af:e0:6d:3d:87:52:6d:40:5b:55:c5:
d6:11:fa:36:cc:ec:8d:d7:11:3d:f8:78:47:9c:c5:9e:9a:23:
df:a0:e7:e9:63:92:62:96:09:71:6a:b0:97:f7:11:5c:16:04:
39:04:af:38:8c:b3:6a:fd:34:49:2c:aa:48:48:78:24:6d:48:
79:30:d1:68:d9:b2:5c:f0:0c:49:b9:5f:8e:7a:57:6e:a3:65:
c0:5c:bf:29:e9:a1:cf:5c:81:19:29:0b:0d:c7:c4:3d:69:0b:
5e:4b:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:17 2025 by rpki-client