Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: bsypBpS/MxWbAlLeXGwT0gUy4XZQ1GHNJYnoWc8oBHg=
Subject key identifier: 66:7E:7E:7E:38:A6:D7:31:BE:A6:F3:2D:0E:E7:52:00:BD:E6:61:6C
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 0199FBEA749C095B7C5A852CC1D469718511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 1Ccn9QwQ55MU3oPpraTUZvvQMxPDSgk7eRzncDSzeuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:74:9c:09:5b:7c:5a:85:2c:c1:d4:69:71:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=667e7e7e38a6d731bea6f32d0ee75200bde6616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:3f:90:7c:f5:e7:56:0b:60:d9:20:96:d8:
f1:b9:72:f1:6a:a3:f3:01:f1:03:69:23:9c:58:54:
d1:5c:c7:ac:f5:17:7e:61:32:25:be:29:e1:0b:2c:
97:8c:bd:42:b6:4c:63:b0:9c:04:88:8e:84:d8:6b:
d3:cd:e3:72:1c:30:57:7b:bb:61:75:5a:53:74:f7:
2e:79:37:c0:e4:f5:5d:50:9b:d0:ba:ef:8d:fb:cb:
1a:53:e7:c0:4b:60:24:34:17:0a:03:5f:ab:e1:db:
fd:82:33:cb:7f:8a:36:84:31:cf:6a:2c:e3:f1:a6:
0d:b7:f4:6c:42:3d:ce:3b:68:27:e3:bd:a8:18:e2:
10:28:12:fc:af:a7:d3:d0:7e:37:d3:ef:3d:78:5c:
7f:ac:d5:73:af:39:28:b4:69:68:3c:49:c5:f2:15:
66:e4:d8:60:09:c5:6b:47:29:67:a6:1d:bd:bc:b8:
c3:67:19:e8:79:96:e9:2f:d4:15:91:f3:0c:42:a8:
23:a8:01:27:f6:5c:07:f6:07:78:58:df:6b:56:76:
2c:b2:27:7b:31:9d:37:9f:1d:c5:99:28:bf:38:f9:
af:bd:9b:36:d7:6f:45:46:4f:0d:c6:d2:9a:89:95:
2d:3b:6e:d8:1e:77:42:7b:e0:0e:b5:bf:09:75:9d:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:7E:7E:38:A6:D7:31:BE:A6:F3:2D:0E:E7:52:00:BD:E6:61:6C
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2f:e0:24:34:5a:85:84:67:ca:b1:90:9b:d8:9f:61:84:7c:
9f:a1:28:49:3b:f5:b2:38:ab:0a:bc:37:14:50:cc:47:3d:07:
1c:44:f9:94:46:01:94:ea:c8:af:cc:cc:89:7a:f7:2a:be:0c:
a3:2c:89:24:98:c6:37:3a:08:58:5c:13:9c:04:8e:e0:0a:62:
28:87:2c:a4:67:dd:3a:8e:fb:31:8d:c8:7f:f4:8c:63:37:42:
df:8b:e6:bf:fc:c3:98:7d:19:a6:0b:d7:18:ba:ba:3e:cd:7a:
ec:c4:bc:50:3d:8d:22:dd:0a:92:68:4b:7a:2d:52:e7:1e:07:
c6:91:cd:9f:c0:b6:09:04:10:d0:81:8a:22:ad:a4:c1:36:a8:
2e:9f:6e:63:b3:10:7f:22:92:a8:50:c6:15:55:a5:b4:11:9c:
99:c8:96:4f:2f:1d:e2:62:73:14:9b:14:42:c3:b4:12:37:e6:
3d:b1:cb:d4:7f:82:30:74:52:ad:3c:24:b7:9d:99:b9:a6:15:
7c:c1:f0:5f:fd:eb:7b:51:af:e0:02:e1:f2:e4:46:8f:3e:46:
c5:54:56:b0:bb:ed:b3:50:bd:03:32:6c:8c:3a:8a:67:24:43:
2b:85:ad:1d:36:6d:85:7e:af:b9:af:bc:82:6d:8d:ed:85:0d:
a2:a8:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:53 2025 by rpki-client