Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
File: bn-6EaMdOqkN48e7i1bTzQbmvnU.mft (raw, json)
Hash identifier: Igp30rn0MMU/VBAzH8TsS2xvMY9AqZy7Cw6WivKupmA=
Subject key identifier: A0:85:47:EB:15:B5:A1:34:A6:7D:6D:41:E9:94:FA:78:24:B4:82:28
Authority key identifier: 6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
Certificate issuer: /CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Certificate serial: 0199FBEBC75197359651F4AD5CCA3DA6CE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
Manifest number: 16C8
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: bn-6EaMdOqkN48e7i1bTzQbmvnU.crl (hash: fKk7QGJsMq4H5kUY9nz6i3grEwnqHialXRCa56aDNvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:51:97:35:96:51:f4:ad:5c:ca:3d:a6:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=a08547eb15b5a134a67d6d41e994fa7824b48228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:66:4d:f2:d2:29:22:6c:c8:4b:10:d7:aa:
2a:4f:cf:ab:95:03:42:6b:98:5b:88:75:92:b6:3c:
32:af:46:ee:a7:fb:dd:2d:23:a4:c1:2a:71:04:b1:
fb:9b:00:b9:0b:e3:ab:9c:21:b0:14:eb:6e:5e:9c:
1b:d1:46:4a:c5:09:31:9b:6c:31:e0:a3:09:20:63:
86:b7:c6:ab:64:a4:58:3c:dd:5f:57:90:d9:1a:1c:
d5:ed:77:60:8b:ae:1b:2c:c3:7f:fd:c0:ac:00:94:
1c:62:67:97:f3:29:9c:ac:85:68:62:f6:1b:cf:60:
32:b7:8b:b2:2d:92:9a:00:7e:ea:fb:b5:20:9b:eb:
f8:3b:03:a4:45:ea:d0:dd:0d:fa:87:22:44:d6:2d:
34:94:54:4c:ef:65:e0:af:9a:6f:dc:60:04:15:70:
ce:4b:70:4f:25:f6:5f:d9:1a:74:7d:4c:b3:82:26:
31:e5:cc:60:94:4c:5d:58:c9:22:f9:98:18:88:77:
37:67:f8:9f:b2:2c:46:c9:09:f5:3a:1b:f0:ba:a9:
3b:6e:39:7f:65:9a:b4:e5:d0:ff:2c:b4:a6:78:ba:
59:ff:8b:05:c5:13:47:be:05:bc:48:8d:92:d5:7a:
3f:5f:d2:76:ae:80:04:07:da:c8:7d:15:6d:a6:9b:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:47:EB:15:B5:A1:34:A6:7D:6D:41:E9:94:FA:78:24:B4:82:28
X509v3 Authority Key Identifier:
keyid:6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3d:cd:81:60:fa:a3:e4:8e:26:a0:46:6b:3c:24:5e:90:be:
f7:1b:cf:4c:6d:ff:0f:68:ee:d0:90:09:16:0e:05:75:37:f2:
f5:bc:68:72:3f:c6:af:3e:9b:7b:95:d2:61:dc:00:b8:ab:88:
c5:12:2a:2e:88:3b:85:db:a9:64:03:80:c9:96:2c:82:c5:81:
96:42:1a:dd:0b:e8:8e:33:e2:d3:fc:08:3b:9b:4f:82:21:24:
da:fe:12:cc:f3:0b:a5:bb:53:86:ab:31:c0:3c:07:a0:d5:a7:
f8:c8:78:fc:cc:a9:5f:2a:3b:4f:5b:4c:4c:fb:7c:6e:b4:1a:
f8:91:e1:7a:92:8b:25:ff:f4:61:25:07:53:2d:00:e5:06:f0:
5d:a9:e5:b4:66:15:6b:84:37:8f:cb:d4:3c:ea:fa:06:f2:eb:
b2:c6:6b:7c:5e:ce:91:d0:9e:d1:a1:b4:d6:ae:4c:d7:4d:75:
ff:4b:a4:b8:83:3a:76:fc:a3:2b:a7:ad:9e:43:f4:f9:ec:47:
ed:c9:fa:c3:23:a5:2a:a8:bb:42:75:fb:79:6e:13:e0:6f:63:
48:26:a2:3b:1c:4e:be:70:50:fa:12:f5:12:62:50:b2:1d:6f:
7e:31:33:a4:b8:a5:96:db:1d:79:48:04:7e:c1:59:0d:88:b3:
67:ba:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client