Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: uywHAkYb0Li4amgt3w7ODIY6Im2BdC3pFoM9TnL+1jg=
Subject key identifier: 0D:E1:AA:5B:CF:4A:AA:78:6F:10:1E:74:27:C1:B6:9C:F1:73:C1:9A
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019A4DE1D45654A15598B709C99C83632639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 08F5
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: 7AhF4VjxA68mMJ6Smy0z4FeHV3Kl5A2s+RajRnQpy10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d4:56:54:a1:55:98:b7:09:c9:9c:83:63:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=0de1aa5bcf4aaa786f101e7427c1b69cf173c19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:10:51:20:ca:18:d4:e3:36:5a:bb:21:aa:
79:df:9c:02:30:e1:c9:ad:96:e9:6f:9e:36:c1:9a:
df:e0:63:99:bb:93:37:d1:81:93:53:53:1e:5c:78:
2b:d1:80:d8:ca:24:6e:96:b2:1f:7a:42:80:a7:8b:
d1:36:ec:38:22:64:c9:8e:a2:6f:b4:71:f3:8f:7a:
ae:1b:36:b3:35:49:b4:68:d0:ce:7d:5b:c7:bc:20:
0a:23:c4:a7:d7:9b:a9:5d:13:72:40:27:ea:fa:d0:
35:f9:3c:4b:19:e3:c5:5a:88:2a:9e:2c:fc:cb:fd:
1f:ab:af:09:12:37:a3:2d:7a:dc:e3:ab:d8:20:4a:
8e:3d:19:24:10:e0:b8:50:a0:28:01:e0:c4:29:44:
7e:44:02:ac:b0:a6:99:6a:a3:b2:27:ea:1e:bd:9f:
58:9d:cb:bb:3e:73:71:9c:28:38:5a:aa:1a:0f:6b:
09:93:da:29:28:b4:54:8e:60:7e:30:78:c6:9a:29:
bc:a5:10:70:d3:ca:5d:56:eb:26:16:12:46:6a:0f:
57:88:48:b2:08:70:70:a6:41:dd:34:9b:9c:de:bf:
46:b9:16:8f:eb:b6:f2:2a:19:80:51:8a:cd:24:c7:
b2:87:6d:02:40:dc:85:a0:42:41:c1:12:90:85:ba:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:AA:5B:CF:4A:AA:78:6F:10:1E:74:27:C1:B6:9C:F1:73:C1:9A
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0e:9e:9f:25:fa:ae:e6:43:b2:78:94:02:e4:e0:cc:09:b9:
0f:06:39:4b:a0:04:7b:8a:63:da:11:e8:c2:bd:ea:7e:d0:cd:
3e:33:3e:5e:65:e1:b3:f7:b6:77:ed:60:53:e0:da:80:e2:fe:
65:9f:73:fe:62:cb:16:fc:87:93:d6:4b:1c:a6:76:ce:b6:18:
d2:83:ec:a9:45:bc:6e:14:8e:ea:b6:06:3b:f8:fc:21:9b:5b:
69:a9:39:3c:a2:22:90:fe:6f:8c:a5:12:5b:53:4f:2e:df:11:
4c:76:c3:11:6b:9d:7a:4b:6b:cb:a2:d1:0c:9c:f9:51:e9:76:
fb:65:a2:68:9a:f2:24:c4:60:69:e8:fc:97:9c:86:ea:34:b6:
dd:cd:b8:bf:9d:43:b1:d0:17:54:cf:0f:f2:74:28:b6:ed:ae:
fd:e8:6f:b2:08:be:5f:48:c3:dc:90:79:6b:5f:50:a4:8d:b3:
ca:b1:67:82:1b:e6:f6:60:80:07:2b:36:db:60:ed:de:e4:8e:
99:90:07:cd:29:e3:d8:64:e2:29:64:6f:b5:d7:0e:65:d7:1e:
9a:50:89:d6:0f:50:2a:a7:c3:82:61:ff:a6:9d:4b:f1:d6:45:
76:7a:1f:61:4a:68:f7:b5:a5:ac:5f:e2:3f:60:0a:f4:c8:7f:
b1:1f:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:28 2025 by rpki-client