Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: nXlxw+sfBHDKPSt6FdVTtAUur67VSzWXxB2vrNzSdsI=
Subject key identifier: 86:03:55:01:6E:7E:0C:24:FF:E4:99:00:B8:FF:90:D4:F7:BA:66:E1
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0199FBEACDE5F2735CA61A99DEB17F802541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: nVgq7hD5tIHes5Pn5hcHZ6gn7noRXPlt3wKT9WsGUTU=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cd:e5:f2:73:5c:a6:1a:99:de:b1:7f:80:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=860355016e7e0c24ffe49900b8ff90d4f7ba66e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:fa:c2:bc:53:8a:cf:d6:ac:23:f1:f6:09:
95:4a:14:7c:9a:a4:73:f0:4a:34:45:cc:cf:05:54:
e1:58:1b:a5:ee:01:f5:56:5e:81:9f:31:47:b7:48:
3a:d3:57:73:0f:66:65:b9:23:64:48:1e:f2:c7:c6:
21:a6:25:12:30:ba:f7:8a:af:ca:ba:2f:11:ee:34:
44:b1:85:52:69:8e:75:cb:28:97:70:98:6f:53:c2:
b3:d9:e3:0b:d6:19:5a:8c:8b:01:cc:5e:c1:d8:cb:
c0:f7:7e:98:35:e4:5b:cb:87:c4:2c:e6:3e:aa:db:
b0:fc:d8:3c:a4:79:46:8f:e0:29:ea:a9:df:82:53:
2a:93:b9:af:85:20:70:b6:61:95:d2:6b:b8:4e:a5:
08:79:0e:80:19:88:45:c4:87:a3:93:3b:f6:2d:2d:
d7:78:e6:6c:43:d5:fd:59:0e:1b:7f:02:95:08:69:
75:32:b2:e9:09:e6:ed:0b:07:2d:90:6d:c3:8d:d7:
17:16:1b:35:e3:8e:b9:0c:73:39:46:bc:9d:09:66:
97:14:39:a7:c1:71:0d:44:82:9a:40:ff:76:a6:df:
4b:5c:e8:27:e1:4a:8b:66:b7:c3:55:73:be:22:15:
b2:fa:81:2c:46:a3:dc:4c:55:70:d7:ca:b7:1d:79:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:55:01:6E:7E:0C:24:FF:E4:99:00:B8:FF:90:D4:F7:BA:66:E1
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:23:71:db:55:d0:39:3e:5c:cd:f6:ee:31:31:f7:2f:df:
c8:3f:fa:c8:7c:df:ff:1c:38:8c:13:47:f8:a0:e2:c2:d8:07:
4c:66:b5:9f:22:30:4b:cb:f0:17:ad:d9:4d:a2:1d:92:d3:95:
91:3b:34:c1:e2:31:c7:58:6b:ed:59:c0:c4:01:46:bc:d8:9d:
24:ec:57:91:ef:39:93:e7:e8:31:4f:6e:68:53:ea:57:c6:a7:
43:c2:8f:d6:96:4b:ed:6a:61:f9:b4:4c:dd:23:89:56:40:dc:
91:37:5b:86:af:4f:58:0c:15:99:5e:54:20:c0:b4:5a:83:67:
aa:f6:49:42:04:ed:03:47:da:77:39:43:3f:91:7d:38:21:fe:
43:b1:9f:61:ea:83:47:42:bd:67:ef:1d:ea:2b:92:2b:99:3a:
8c:8f:01:45:86:87:33:de:d0:62:ac:97:53:a4:64:6c:21:78:
f9:64:15:a0:ca:74:14:ba:6f:b0:6a:9f:fd:d7:34:b3:9a:7b:
0a:7d:43:d0:35:21:5d:8c:1b:f4:82:df:5d:ff:ab:e7:2a:d5:
2e:5f:05:02:17:34:bc:fe:af:20:9f:75:75:21:58:4f:5f:91:
59:d7:08:73:45:d2:a2:b8:7a:c0:53:ef:b8:fd:c7:99:64:7d:
44:57:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:38 2025 by rpki-client