Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: w9lZ0JaF8UmvQgQei/sewMTXH2pu0nQ5dHQp87nT4OY=
Subject key identifier: 2C:0C:2B:C1:7C:7F:1F:D0:A6:7D:31:83:23:26:B4:78:9D:6B:61:14
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 0199FBEC1193E50545B25B2A776F3B527360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0A22
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: RHOnr2uggXDz3U9oswkD1EOIdLfuC39dy3JNInTD5Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:11:93:e5:05:45:b2:5b:2a:77:6f:3b:52:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=2c0c2bc17c7f1fd0a67d31832326b4789d6b6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:1d:57:33:ef:1d:a8:8e:0e:49:4a:5c:54:
73:16:ea:0e:93:c9:05:fd:d9:a4:ad:b4:84:55:2a:
fb:39:2c:f5:01:9c:c7:a7:f7:d6:cd:43:93:e8:4b:
7b:f7:dc:e5:56:38:59:9b:13:4a:9f:fc:21:43:23:
b8:a2:b1:d5:f5:13:e9:b9:6b:ca:3d:3f:6a:e6:9f:
85:fd:78:7f:70:bf:61:e6:41:a1:0f:8d:02:40:2f:
2a:86:78:94:26:28:9e:a0:27:ed:f6:b9:f3:f3:c5:
f2:27:57:27:67:90:09:8b:09:11:86:bc:a7:28:4b:
fe:92:ce:b6:0c:74:f9:82:48:fa:b5:73:4b:b7:1f:
f3:21:d8:ac:af:61:ce:5b:07:b2:63:ea:ce:f3:aa:
d2:31:97:02:2d:2b:22:1c:66:08:b2:85:60:f8:be:
71:f6:5f:d3:c0:60:f6:5c:85:e2:6d:86:05:db:53:
a1:3a:2e:91:70:5e:29:eb:b1:fe:23:b5:0a:ea:a6:
bf:90:17:e5:7b:84:8f:c4:23:e5:53:8e:85:36:36:
97:45:02:0e:25:5a:e5:17:e5:24:f1:db:8f:cd:c3:
bc:c9:54:d9:0c:a0:b4:84:67:55:d4:a5:46:df:22:
04:05:a5:dc:03:cf:be:43:6c:14:d3:d5:9c:98:84:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:2B:C1:7C:7F:1F:D0:A6:7D:31:83:23:26:B4:78:9D:6B:61:14
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:98:d4:3e:89:2d:30:d2:51:8c:9b:0d:f0:07:02:7a:c7:
27:28:f4:0f:88:69:58:e5:6b:ab:10:24:71:45:a2:a8:f7:5e:
2b:b2:77:33:ba:ad:c6:7d:23:c8:c1:47:8a:5b:c6:ba:c1:28:
0b:93:0e:44:8c:a3:5e:a9:8f:31:f1:76:79:30:1a:0e:41:ce:
43:0a:cd:80:f9:97:87:67:0d:e4:53:fb:86:21:3f:c3:b2:7c:
9a:41:b2:e3:38:4c:32:e7:38:73:33:bd:7d:c4:b2:4b:09:e9:
6c:b1:b1:be:5e:7e:af:a3:66:07:3e:3f:90:82:5d:ab:24:03:
b6:1e:25:e4:eb:4f:b6:03:61:e5:3d:b5:51:60:36:5f:fc:52:
cc:1b:99:d6:8f:be:74:6e:c7:58:66:cb:fd:21:fa:35:4b:af:
2d:19:50:56:21:e0:f5:e5:82:aa:6e:f3:93:dc:f0:cb:bf:75:
d9:79:bb:a1:a1:28:0e:bd:ca:6d:91:41:f4:90:70:eb:49:4a:
cc:e7:c5:ea:c6:b0:17:d9:3e:63:20:bc:5a:d5:8f:eb:46:28:
ca:a3:1b:3c:6a:71:b5:26:e0:0f:ff:bc:a0:46:15:51:36:92:
d6:e4:52:8a:af:cc:d8:d8:19:bc:26:27:54:2c:04:1a:e6:d1:
d3:b5:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:55 2025 by rpki-client