Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: zZJogiqZhQgmyDctlxbgoW0r4D0Mh8x9jd6/F6QvrME=
Subject key identifier: 50:64:A6:2C:53:7E:F1:0E:7E:4A:F9:89:50:01:2E:61:D8:9C:D6:E3
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 0199FEB503B56A1F99AC4E8CD333E9630F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 08CC
Signing time: Sun 19 Oct 2025 23:01:39 +0000
Manifest this update: Sun 19 Oct 2025 23:01:39 +0000
Manifest next update: Mon 20 Oct 2025 23:01:39 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: Pk9TjMfsboSsw05TkoaRluH8jnweE2JjpnTlPkl3JyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:03:b5:6a:1f:99:ac:4e:8c:d3:33:e9:63:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Oct 19 23:01:39 2025 GMT
Not After : Oct 20 23:01:39 2025 GMT
Subject: CN=5064a62c537ef10e7e4af98950012e61d89cd6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:bc:53:0b:2c:d1:40:3c:0e:0b:c7:71:84:
16:e1:fc:9f:3d:c7:93:7b:1e:e6:95:39:75:3b:a5:
8e:11:7c:66:8b:3c:23:47:f3:a0:e2:0b:71:7e:4e:
ac:97:50:25:21:84:94:6f:60:ea:e1:b2:cb:3e:81:
1b:c0:98:c9:21:1c:54:ad:c1:c1:ce:7d:b0:2c:ce:
06:2b:e1:06:50:ed:fa:d3:ac:9b:98:b0:2b:e8:29:
a5:3d:da:53:89:91:51:ca:96:da:18:f1:8c:a7:62:
15:38:3a:dc:c7:f5:79:70:cf:58:35:7d:70:1c:8d:
06:3c:cd:8c:c1:d4:8a:e4:3b:7c:87:b7:42:c7:01:
d7:70:37:e1:e0:d1:29:08:77:bf:91:2b:20:51:5e:
26:0f:40:02:93:4e:3b:b1:c9:ce:89:21:89:94:9b:
ae:09:44:4a:f3:2b:67:7f:04:41:20:38:da:ba:a3:
c1:98:c4:18:55:d2:3a:ec:66:28:e0:a6:31:3f:a7:
5a:ac:83:75:3e:61:9c:30:7f:f4:5a:98:2d:1d:8b:
3f:74:b3:d4:27:94:a1:6b:5b:bf:b6:35:75:d9:25:
ff:d1:75:0c:f9:e2:a5:fe:cb:e8:05:38:28:3d:cb:
59:15:df:7a:90:d4:e8:0d:95:d1:de:58:15:e0:99:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:A6:2C:53:7E:F1:0E:7E:4A:F9:89:50:01:2E:61:D8:9C:D6:E3
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:58:9d:09:11:02:05:63:e5:2f:1f:9b:82:5c:c0:55:f2:d2:
06:9d:b1:92:a5:25:33:83:be:91:07:d9:14:33:86:ef:9b:5e:
53:7e:57:33:0b:1b:43:85:60:81:b5:94:10:e7:43:b6:7e:d6:
5f:a4:f6:4e:07:51:a4:fe:e3:fe:b5:5e:89:38:fd:72:0e:f3:
9a:9c:36:49:b1:12:b4:e5:ee:ed:7f:33:1a:1e:9b:8f:77:ad:
e0:08:45:a3:ed:da:27:3e:a3:0e:07:a7:52:82:8d:2d:38:04:
64:d5:4f:bd:c3:b8:40:8a:a6:3b:37:d0:a5:95:b2:a8:d8:4e:
2f:ba:22:50:87:e5:76:9f:30:63:eb:90:3f:64:07:f8:07:04:
54:1d:66:1c:16:98:8c:75:a5:ed:07:39:b3:4e:34:bf:74:69:
3f:8c:fe:15:d8:d1:02:1a:3b:3b:43:0d:cb:b2:4e:5f:eb:d3:
b7:21:7d:66:b0:a4:97:95:c7:9f:ec:ba:38:e3:4c:b2:9e:5f:
cd:29:ba:6c:bb:e3:99:cf:b3:62:68:3b:6f:f2:5b:90:72:fa:
cd:15:1c:41:e9:fa:43:21:6e:bb:8e:56:62:9c:ef:14:e5:9b:
f5:6e:94:b2:7c:db:96:92:76:ad:12:ec:b8:20:12:a5:42:54:
6c:49:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client