Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: ElEos+4RGc4UwEscyZJ/4DtkB+kNRi1jUrcK1ADe/u8=
Subject key identifier: 47:42:08:4E:D8:52:17:E8:38:3F:6E:5F:68:40:AE:C0:B5:F4:BD:16
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019A51BEAD9034D89968290BB6E92EC2ED4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 118F
Signing time: Wed 05 Nov 2025 02:00:41 +0000
Manifest this update: Wed 05 Nov 2025 02:00:41 +0000
Manifest next update: Thu 06 Nov 2025 02:00:41 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: vmwsbZe261PPWx3dR/ObmmUZToiJIR2Bjlcqx8GFrs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:ad:90:34:d8:99:68:29:0b:b6:e9:2e:c2:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Nov 5 02:00:41 2025 GMT
Not After : Nov 6 02:00:41 2025 GMT
Subject: CN=4742084ed85217e8383f6e5f6840aec0b5f4bd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:87:e4:86:4d:7f:a1:d0:52:e9:6e:72:63:
8c:f8:f7:24:ab:af:e2:9c:84:ae:1a:06:d3:5e:45:
ce:96:eb:5e:f2:0d:4f:6d:74:a9:c1:95:86:38:17:
f3:0a:c2:c3:00:0d:ce:c0:74:5b:aa:a6:7b:a4:fa:
e3:d1:8d:99:74:62:d0:eb:e8:91:82:3b:72:11:2e:
d1:95:ce:be:bf:84:43:85:03:03:72:97:8f:62:34:
6a:ea:c2:3c:d2:43:66:be:65:04:77:94:95:3f:89:
b0:93:bf:97:ac:47:f5:cf:ff:9d:75:9f:b2:7a:8c:
73:40:5a:44:ce:af:f2:0e:ab:4b:0a:6e:95:d7:77:
64:ab:99:ab:fe:83:c6:9b:b3:63:6a:b9:0a:bb:73:
3b:80:7b:ef:03:b9:ee:fb:0b:25:0e:95:a3:76:12:
c8:d1:93:eb:d8:14:2f:b0:71:b4:97:e7:1a:1c:7c:
bf:43:90:ab:67:be:c9:9c:8c:6b:5e:b8:22:5a:1e:
2d:4c:fe:b2:fc:b3:06:b9:cb:2f:ab:d4:6c:bb:58:
50:e2:96:d8:a2:4a:b9:cb:cc:63:ad:82:8a:21:9f:
8f:63:f6:37:87:b3:a9:67:f9:6d:3c:2f:d0:2c:8a:
96:e3:44:1d:99:b0:30:cd:33:1b:97:b5:87:bd:c8:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:08:4E:D8:52:17:E8:38:3F:6E:5F:68:40:AE:C0:B5:F4:BD:16
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:21:5b:16:76:67:71:f9:da:0d:7e:ff:22:eb:8f:41:27:
36:c7:d3:bf:e6:e6:2f:de:cc:87:f4:4b:28:fb:fd:17:d6:de:
fc:3f:50:72:3c:ac:2f:a5:54:07:18:ce:37:de:9d:0d:1f:82:
fd:17:a5:90:da:07:23:32:0e:68:bd:8c:61:3a:a9:d0:45:f1:
9b:3a:40:ed:8e:aa:49:24:4e:b6:4a:0e:b9:13:75:b3:d2:cb:
6c:2a:74:a6:74:14:99:b0:b2:17:cb:65:63:fe:85:30:02:f7:
0c:1c:df:18:e2:63:55:2a:43:63:7b:38:9b:73:55:08:40:e2:
fc:9e:fd:7b:24:4e:c3:a7:16:32:70:f7:23:62:00:58:ce:55:
16:b8:52:97:81:95:14:15:f3:28:d6:40:c7:2f:4e:b7:3b:e3:
34:7d:8e:0d:b9:22:d5:59:3b:5a:01:b0:58:54:e2:bb:09:67:
46:35:d0:bd:f5:d4:16:86:71:11:75:0c:0b:6f:01:05:13:4d:
6b:ff:2e:90:c6:61:ae:c9:d0:68:29:06:63:ff:b0:ce:ae:c5:
1a:22:a7:23:67:08:b1:b0:9f:54:55:7f:4f:0f:30:3b:10:f3:
88:23:af:cb:4e:57:d5:36:b8:47:5a:73:5c:eb:aa:aa:28:6d:
84:a3:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:29 2025 by rpki-client