Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: dyNh1NKFVG0B0eg6A7VGS0mQ7hy+pKLEG5mJnLyq2Z4=
Subject key identifier: 93:1C:B1:B8:04:6B:A2:97:BE:D3:E9:A0:26:3E:C2:A0:86:BB:C7:DB
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019A4EF58393676B9DBCD0FE8F9A97395F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 07DC
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: zq2ktRCVABAIS8ANNDphjAvvgwf4hv2qcJfZLE4P9H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:83:93:67:6b:9d:bc:d0:fe:8f:9a:97:39:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=931cb1b8046ba297bed3e9a0263ec2a086bbc7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:f5:36:a7:4e:bd:cd:1a:1a:a0:24:6a:17:
84:fc:91:da:26:a2:a1:4f:10:29:c7:4e:d7:a2:59:
55:e0:cc:89:57:ff:65:a3:45:e8:d4:b8:5b:38:3e:
42:43:c6:6c:9d:89:44:34:43:1e:76:49:69:bd:dc:
4d:87:3b:15:dc:da:7a:66:dc:92:64:b4:2d:74:6f:
2f:8c:a9:6c:2d:ba:36:7c:86:08:c7:d0:81:f1:ae:
44:d6:4f:8c:40:fd:51:4e:03:b7:ee:e7:3c:0b:d7:
df:f9:c7:7e:15:4e:04:20:d0:e6:37:c8:fb:5b:e8:
c3:0a:1d:ec:51:69:03:c3:8e:94:34:ba:c3:a5:72:
d4:02:dd:3f:2d:00:16:eb:f4:25:5b:f0:0b:d7:b3:
48:37:0c:d5:56:ca:a6:62:bb:cc:0c:8a:52:2a:98:
0d:fe:3b:9f:b5:59:28:f7:4e:93:d6:8a:c8:ca:7f:
cf:66:2c:4a:96:73:4e:64:16:c3:8c:aa:76:22:32:
fd:44:83:f1:8c:e7:90:60:00:e7:3e:fa:aa:61:d8:
70:a8:4f:41:90:b8:5e:7c:96:0a:f3:81:52:db:ea:
3a:c4:6d:5f:f2:29:a0:75:fb:b5:68:1c:71:98:72:
50:b7:f9:e4:0b:05:8b:d0:cd:c9:ce:88:d1:63:2b:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:B1:B8:04:6B:A2:97:BE:D3:E9:A0:26:3E:C2:A0:86:BB:C7:DB
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:cd:b5:c9:f6:b2:55:43:7e:37:57:37:a3:9c:6d:1c:6f:
09:59:b1:28:62:0d:45:cf:89:15:5f:05:58:94:66:ae:6d:8a:
b8:42:5b:51:5c:a8:1e:7e:46:62:8e:8e:6d:f1:f6:80:39:1b:
57:b1:19:41:b6:2a:7a:be:b4:b4:f1:4b:53:13:8a:24:c6:12:
7d:e2:92:2e:e8:60:97:f7:a3:a5:fd:26:36:ca:97:43:85:a9:
01:25:fd:70:54:cd:56:c3:2c:cd:84:ac:e7:82:62:be:5f:86:
4c:4a:ce:04:2d:61:65:d6:fa:30:fd:54:bc:dd:a4:bb:db:0a:
86:65:17:5a:4d:0a:f3:a5:27:9f:1c:39:52:cd:27:c7:43:ae:
90:a2:d7:88:c5:97:3b:b5:61:36:df:fc:ae:fa:72:b1:18:cc:
78:2c:76:06:12:01:01:73:80:06:e0:e1:60:40:de:32:a2:12:
59:d5:fa:fb:88:eb:cd:37:36:a4:bb:c8:04:80:5f:f3:19:53:
8b:9a:89:c5:15:aa:10:00:9d:2a:b9:bf:ea:55:a1:90:a9:4c:
51:9a:be:6c:31:e7:a0:9d:37:1f:77:38:50:a8:c3:fe:a7:b5:
74:32:1c:0a:1e:09:f3:49:2a:44:91:84:7b:a1:c1:3c:9d:83:
3b:c6:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:35 2025 by rpki-client