Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: SN0BImYrcP+y8SMB7hoH4mjEa5FJHiQAnLcCUgldiOM=
Subject key identifier: 0E:0F:C0:0E:41:AA:8B:50:74:3B:53:CA:D9:64:12:6F:20:62:00:E6
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019A4E8652ECF1E6CBBD3AF953B8FC2FA8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 140F
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 7Ccodd8AWEQ5/RlaS+UKws21sfSwVdwqbVhSvzk4rvw=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:52:ec:f1:e6:cb:bd:3a:f9:53:b8:fc:2f:a8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=0e0fc00e41aa8b50743b53cad964126f206200e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:07:08:f1:14:99:bd:3a:1e:6e:a3:ba:41:a7:
10:64:d1:ef:d6:b4:49:2d:af:db:20:b5:26:8d:d0:
be:14:26:3d:25:94:0a:0f:7f:86:ab:d9:31:cc:e6:
0d:ce:1d:97:4a:81:0a:79:6c:d0:d3:43:a4:ae:19:
dc:2b:b3:1f:4a:df:e7:2b:b6:2e:32:c3:ce:d2:9b:
84:9d:77:a6:5d:4b:53:a2:7f:9e:05:33:00:f6:6b:
1a:30:13:7f:19:9d:7e:46:c9:37:62:b5:11:be:af:
1e:5c:1b:d6:2a:e3:8a:7c:e1:35:8c:a1:6f:f7:02:
74:ff:39:aa:13:8a:ec:bd:39:3c:6a:84:c6:d7:d1:
e3:bc:ed:35:37:49:d5:eb:38:f6:39:69:84:ce:dc:
b6:0b:76:87:8c:4e:40:69:f7:d0:9f:92:55:f6:79:
d9:cd:0f:85:1a:b0:9c:0d:cc:eb:4d:45:13:98:46:
36:a5:c5:2b:70:44:b9:24:53:7d:7f:0d:a6:5e:84:
0e:1c:71:97:ce:df:76:fa:80:00:9a:04:f3:86:bb:
84:2d:11:33:01:2e:60:ec:a1:29:e9:df:d9:ad:06:
3e:4f:14:66:09:a1:b8:75:74:ac:23:ac:8f:60:fe:
4a:dd:69:5b:6e:75:d1:a1:0d:bf:51:e8:4e:8e:4b:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:C0:0E:41:AA:8B:50:74:3B:53:CA:D9:64:12:6F:20:62:00:E6
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:83:12:6d:b5:c7:6d:3a:98:76:56:65:fa:59:9f:52:fe:e5:
6d:79:0d:39:68:db:bb:a0:7b:d5:2d:29:cc:25:b1:b9:69:af:
fd:20:a9:2a:19:69:87:9a:1e:d8:7f:c6:38:9e:c0:9f:1d:9d:
db:c1:e0:4d:9c:0f:84:59:95:a4:22:73:d9:ca:f2:a8:fa:cc:
e8:99:73:4a:ee:db:a5:89:6e:5c:a0:6a:e4:8a:3a:1a:00:a1:
bb:48:35:1e:90:fd:a4:e9:fa:c3:d9:4d:70:33:c1:d6:9f:00:
43:02:38:01:1a:80:1d:c7:54:d7:44:1b:cb:80:8d:c9:e9:10:
cd:b8:4e:40:ae:eb:22:29:d1:de:35:26:37:12:b0:89:25:cc:
e7:d2:04:6c:6a:b5:5d:6a:67:fb:c5:e6:08:7e:64:d3:31:43:
40:b6:82:55:f8:82:f2:49:c7:0f:d5:06:1a:1d:c7:f9:94:38:
42:1f:8e:ab:78:5a:77:f6:f3:22:89:d2:ad:0b:59:46:47:37:
d6:54:6f:22:7e:a4:07:9b:09:17:42:39:c3:db:46:e8:5f:ef:
f1:10:63:85:fe:ec:2f:a4:14:a4:8c:b0:3d:08:09:84:09:5b:
0b:6e:5d:70:4c:73:66:48:9a:ae:6c:5a:61:b7:0b:94:ba:13:
27:94:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client