Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: 6o4ddIhMZ1kwUCtoO46MJNLDBsyl1vu9VHzBxkqZsxY=
Subject key identifier: 68:2D:2B:20:FD:F6:8F:E9:B7:C1:5D:94:3E:D5:59:29:97:2A:2C:A8
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0199FE7E2B93D4B02E97E7100E69F8064F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 1695
Signing time: Sun 19 Oct 2025 22:01:45 +0000
Manifest this update: Sun 19 Oct 2025 22:01:45 +0000
Manifest next update: Mon 20 Oct 2025 22:01:45 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: dHvJCAYAnktkaHdPKoGzj/VUvLziyXkGqXRwQRoCLIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:2b:93:d4:b0:2e:97:e7:10:0e:69:f8:06:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Oct 19 22:01:45 2025 GMT
Not After : Oct 20 22:01:45 2025 GMT
Subject: CN=682d2b20fdf68fe9b7c15d943ed55929972a2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:b0:e7:ba:23:26:4d:61:98:50:7f:f4:aa:
58:01:39:13:47:ce:c3:28:10:bd:ba:68:60:53:c2:
ed:7e:7a:79:84:f2:33:4d:67:99:73:65:7b:1f:f6:
0c:78:f2:6f:c7:18:52:6f:8e:ae:64:7b:ea:20:47:
1e:3a:54:cd:4e:9f:e7:ca:6f:a6:1d:4f:a6:fc:b3:
ac:10:31:69:5f:33:dd:da:51:0b:61:29:95:54:50:
68:b5:54:ef:21:95:8c:bb:0e:a3:2f:ab:93:dc:c6:
c2:bf:fb:81:66:19:4c:ad:72:d2:1e:61:d9:4b:a3:
42:b6:d3:24:99:2e:1f:04:44:00:74:4e:99:d2:1d:
ac:d8:e7:e6:f6:15:e8:f2:78:6a:57:91:ce:26:14:
b0:3d:ea:2b:ea:4e:98:2e:7d:16:ae:5a:72:0b:d1:
8f:9d:15:8d:d4:be:18:85:d3:9e:f3:e9:65:9c:b3:
28:ab:b2:8c:50:9a:96:5e:a0:7a:83:ed:34:4b:7d:
74:2b:da:3c:b0:95:29:4f:5a:6a:7c:75:42:65:be:
41:91:ca:2c:dc:a1:9d:f1:86:d9:f3:c0:c3:4e:a4:
a2:e5:79:f2:ed:bd:df:7c:75:47:07:1f:9c:d4:c9:
31:11:4f:e4:05:f8:36:51:20:c9:ab:29:34:87:be:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:2B:20:FD:F6:8F:E9:B7:C1:5D:94:3E:D5:59:29:97:2A:2C:A8
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:de:27:d2:ee:e3:fe:6e:b8:e1:13:be:43:1e:fb:0d:eb:
22:e6:6b:ad:8d:19:c9:04:2c:27:cb:bb:a0:8d:c7:fd:ee:39:
27:7e:df:b7:5d:c9:85:db:93:5c:32:cf:79:61:c7:9e:37:8c:
4c:ab:31:ff:b9:68:d2:13:0c:81:83:1d:78:cb:ec:bc:ba:8f:
73:0d:78:e2:e5:3a:ca:5d:84:b2:4c:1d:60:0f:7a:6c:bc:81:
bb:b8:6a:ec:50:83:6b:16:f9:72:cb:89:9e:ba:73:36:88:1b:
58:15:dd:ca:fe:3c:df:56:7a:34:a7:06:f4:f2:3f:41:86:8e:
73:b0:53:47:f5:e1:ca:d0:4f:b1:ca:5e:14:87:b0:6f:27:81:
15:67:28:36:d9:96:57:64:6e:86:18:2b:92:d6:50:71:3c:6e:
5c:c1:fa:3d:96:8b:d7:70:ec:a3:72:34:7c:32:07:11:33:28:
66:dc:fa:85:10:f6:bf:73:cf:38:43:24:f0:14:34:48:53:fc:
83:31:39:ce:5e:48:24:87:24:0e:88:88:8e:2d:3c:15:0c:20:
1a:5f:07:32:46:21:7b:94:ed:34:3e:f4:1d:4b:45:5e:b5:db:
b0:7e:26:ed:e2:89:63:fb:fb:79:1b:e2:d4:14:2f:f2:d9:b9:
76:b7:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:15 2025 by rpki-client