Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: +hL1HSE7f+irc7rThUYWBm7ySF3veanLCPGC5HuY+LY=
Subject key identifier: 7A:1A:9F:35:87:FB:4E:C5:0D:5F:C3:1B:BE:E8:88:8B:E2:CC:6F:BD
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 0199FBEABDEDAE14F5FCDADD3D5DEBADA277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 1116
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: dWAuwP6Xtnr4mbgf7IsqbzdugCegEGNMdsKQPxy2jck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bd:ed:ae:14:f5:fc:da:dd:3d:5d:eb:ad:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=7a1a9f3587fb4ec50d5fc31bbee8888be2cc6fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:7a:36:47:3f:01:98:3c:28:11:98:fd:1e:
66:f7:f7:8a:8c:c9:ab:9f:cd:dd:fb:eb:a8:5b:12:
a0:12:d7:0e:a7:5c:47:4b:a6:85:bb:83:69:1a:d6:
d2:da:8b:cb:12:39:9f:73:19:09:f5:20:b5:65:50:
98:c7:db:af:c3:2f:f3:7f:7e:ba:02:aa:47:c3:c8:
c2:ca:06:4d:7c:b2:33:47:df:73:10:f4:6a:30:f1:
66:60:5f:0b:dc:1e:18:70:d8:df:ae:d6:5b:b4:3d:
4f:35:bf:cf:39:c9:4d:18:cc:02:16:d9:cf:45:e8:
0e:9c:89:6a:bc:43:35:87:d6:97:c5:fd:50:d7:33:
3a:36:8f:a6:96:5d:43:bb:bd:c6:c5:6d:73:5d:4d:
a0:80:5e:51:58:b5:27:be:f1:e7:83:fd:a3:ff:30:
f8:9d:f8:e2:d5:48:6e:1d:4e:d3:03:30:0d:5b:b1:
dc:5e:55:1f:dc:bf:1d:21:eb:10:4e:82:85:6f:03:
2f:e2:a2:28:7a:07:df:ec:6d:eb:21:32:00:d1:59:
c9:35:fc:6c:d9:f8:bc:d4:77:a6:56:cd:b1:2e:b0:
33:0c:04:9a:b5:37:dd:da:07:89:46:b0:b2:35:d3:
09:98:e2:e7:0c:b8:15:5a:56:f4:0f:0c:55:ed:f0:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:9F:35:87:FB:4E:C5:0D:5F:C3:1B:BE:E8:88:8B:E2:CC:6F:BD
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8b:d9:7c:5d:1f:c8:50:7d:df:f5:b4:2c:e7:0d:a7:35:29:
fe:57:28:a6:98:6d:5d:d3:b1:b2:1d:f0:7f:77:4f:bb:8b:dc:
54:49:87:54:a1:9c:a1:1b:8b:13:77:fa:a0:77:81:80:86:7d:
d8:c3:42:2e:8f:ad:de:58:7d:5e:75:a0:9f:14:5e:d7:2a:c7:
80:05:c9:e0:a2:7e:36:3c:4f:05:89:f4:a2:e5:f8:9e:c4:5d:
e7:70:7f:8e:d3:52:d9:74:33:fe:9c:a0:ab:55:7e:4a:26:a1:
28:e7:b4:a5:19:bc:90:67:8b:07:fd:ea:d3:a9:f2:26:6e:c9:
eb:48:f9:37:18:76:b5:d3:3a:e0:ed:af:79:6b:81:29:0b:ea:
7d:f8:bf:8c:3a:cd:84:6b:4a:f7:32:b7:a6:e2:41:8c:60:33:
b9:da:ef:53:b1:68:83:5c:d4:42:39:23:ff:64:c1:e2:cd:3e:
41:41:83:20:65:11:56:42:2c:db:b1:d1:df:e2:31:f2:f4:0c:
4a:fb:25:da:20:c2:24:33:cc:48:0d:8e:0d:fc:b3:cb:71:38:
94:c7:40:99:a0:1a:81:ce:d8:16:2f:e4:f7:34:69:01:3e:26:
82:fb:35:3f:fc:23:2e:cc:e8:ca:6b:fe:36:19:e7:3b:5e:62:
0a:be:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client