Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: luw5NrxDGMJ5JQzdSYZtNqazHkjpFvfLlJukdC9iTx4=
Subject key identifier: 2B:C9:3D:03:31:90:A5:62:2F:0B:52:42:AD:F6:EC:EE:12:0D:E3:B8
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 0199FD6B3B46619B1764FBF63214155687A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 13E5
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: uYnh7UOtunYd2+c3sx7KNBxk6kzf1NegmM7TepTsMgE=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3b:46:61:9b:17:64:fb:f6:32:14:15:56:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=2bc93d033190a5622f0b5242adf6ecee120de3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:8a:1e:c5:7d:a4:2c:f5:a5:56:97:a5:c6:
3c:ac:47:c5:3e:8c:a1:54:a6:50:a8:de:c0:43:c3:
5c:5b:18:7e:7b:85:d1:46:4b:d5:69:84:cc:55:41:
a6:11:cf:3c:06:ad:67:e6:9e:2a:db:49:6d:75:0e:
b6:44:b0:58:f8:3b:8b:99:e2:21:06:c1:33:ab:d0:
88:1c:c7:4b:5d:cf:ad:1e:76:88:87:9c:19:b8:43:
ab:96:2a:4d:c0:3c:38:06:96:72:a1:a4:68:6b:eb:
33:bf:b3:b2:c7:c9:27:66:ea:33:01:70:fc:92:b2:
0c:a5:64:68:c0:bd:6d:fe:9e:60:f2:44:1e:87:53:
fe:d2:e1:5c:d7:a9:6f:c3:e8:5e:45:e9:56:36:09:
b2:32:4a:ad:02:52:35:00:ae:a4:8a:68:c7:83:e4:
92:32:d1:3d:ef:bf:a3:e5:6e:a9:f5:f0:13:28:da:
94:d7:ea:a4:a5:e4:94:4d:bb:ef:c8:f0:ac:4f:33:
d9:51:d8:95:32:38:ee:c9:0e:7a:5a:37:96:2b:19:
2b:68:cc:3a:a1:48:97:ee:7b:7e:16:c0:87:cd:23:
1a:ef:7a:a8:8c:b5:c5:3f:bc:01:fd:ff:22:48:9c:
32:8f:09:ec:9b:83:ad:49:db:57:22:fe:84:43:7c:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:3D:03:31:90:A5:62:2F:0B:52:42:AD:F6:EC:EE:12:0D:E3:B8
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:43:8f:9d:63:bb:86:ce:c3:09:a2:45:5a:f1:f0:f6:f0:
b4:f9:0a:da:2a:14:b4:80:86:cb:f2:0a:b3:15:a0:c4:38:95:
8d:c1:86:f3:12:ce:93:5a:4e:34:40:7a:ff:c4:27:8d:e3:66:
22:81:8e:01:93:a7:13:7c:72:e5:01:07:c1:1f:1d:8c:d8:2c:
fb:96:d4:3d:d4:7b:8a:ab:62:57:5c:91:e9:35:ce:f1:d8:de:
3b:a8:f8:9f:87:59:fe:a1:f2:49:ad:93:78:3a:2e:88:d1:4e:
e6:0c:7f:e3:ef:cf:22:e4:31:d5:64:55:9f:7e:18:6d:e7:2d:
a6:3b:03:a2:7f:7e:22:9a:a5:31:f6:1d:78:eb:40:69:65:42:
3b:00:14:ed:bf:aa:8f:bc:94:16:7b:a6:71:5f:a8:40:f2:48:
e3:af:9e:85:c2:54:87:52:e4:b5:15:98:d1:03:b6:97:f6:ed:
e5:1e:69:0c:a7:ee:28:dc:dc:d4:d0:26:41:ea:33:e0:75:c8:
84:49:3a:10:7f:c9:3a:76:b4:94:38:21:fc:7a:3f:7f:79:12:
0a:0a:28:32:b7:82:a7:3c:a8:90:28:b3:0b:32:bb:57:b1:ca:
2a:87:13:3f:cf:1c:d8:af:8d:27:b3:e2:06:3a:53:c3:aa:87:
36:ab:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:50 2025 by rpki-client