Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier: 7itEWnbegtNfH01zq7LJozmkMnlxDgQupDCiI3CKZJs=
Subject key identifier: D4:5F:BC:B2:D3:CF:52:22:F9:F6:FE:FE:58:3F:8A:32:19:9C:33:62
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer: /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial: 019A71B81C2E39785245E002DCD5E1B10DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: gyyVkozM/Szp8TpyGYTqfC2SVZK12qOwLUI7poSc2nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:2e:39:78:52:45:e0:02:dc:d5:e1:b1:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=d45fbcb2d3cf5222f9f6fefe583f8a32199c3362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:96:af:54:b1:13:69:d1:03:5e:ff:22:53:
ab:a3:4b:8d:b5:92:97:8a:03:83:c2:2c:11:77:65:
bb:cc:0c:3d:bb:ba:4f:68:90:2d:4d:e7:77:54:78:
46:bb:12:2d:f6:67:94:3e:51:78:11:83:76:24:60:
cf:e3:a1:fc:b6:df:b4:8b:86:e1:f2:cb:f4:62:22:
38:da:49:8b:1b:6d:9e:80:0e:36:18:a8:e6:cf:e1:
bb:c7:be:cc:a9:55:95:12:30:81:d0:f2:b9:49:70:
74:73:98:6d:46:18:b9:2d:f3:dc:c8:49:55:4a:0e:
0e:7b:1e:4e:f4:02:a6:c1:74:41:f0:ef:55:54:d3:
3f:0f:8d:8d:6c:16:7d:36:10:1e:92:e1:1a:74:a7:
cf:7b:4f:99:98:b0:ec:7b:a4:de:4d:4c:fd:16:f7:
36:7f:69:0d:04:ef:f1:be:04:c9:a0:f5:38:3a:9d:
c3:a2:dc:fc:b2:d6:1a:5f:02:35:54:59:70:79:f8:
7a:a8:e3:5a:4b:32:c0:ae:dd:c9:9d:fd:ab:15:88:
18:75:cb:78:a9:ee:d1:dc:32:18:d6:b3:21:e4:83:
46:5e:49:38:5f:54:82:36:be:a3:53:7b:4b:86:b4:
ea:35:e3:ae:7f:02:d2:b6:f9:ab:72:1d:15:80:81:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:BC:B2:D3:CF:52:22:F9:F6:FE:FE:58:3F:8A:32:19:9C:33:62
X509v3 Authority Key Identifier:
keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:17:92:9b:40:03:92:c2:3b:46:de:7e:d8:63:0e:96:97:9c:
9e:dc:db:a5:8b:a1:39:c0:b2:bd:49:e1:6f:6e:e1:40:46:48:
f4:22:36:43:20:ab:90:3b:e9:c3:db:d5:62:d1:ca:da:38:55:
3f:38:5d:55:75:fc:66:84:a4:14:33:da:33:28:ef:28:45:9f:
75:99:19:99:c2:6a:63:8d:86:92:54:f1:d9:e6:b4:1d:0b:03:
21:09:af:7e:07:0f:1c:26:23:7f:a5:05:8f:05:a3:18:d6:ea:
05:6e:6f:e8:96:73:7c:5f:80:d7:bd:c9:45:e9:ee:c5:30:26:
a9:57:e7:a2:bc:98:fe:27:36:91:e4:8f:ae:8c:85:56:4e:16:
bf:47:cd:20:74:3f:b6:71:19:2d:ce:2d:b7:bb:2c:03:82:78:
c1:46:4e:fe:ad:19:9f:9d:61:0b:3d:58:85:f9:96:c9:55:6a:
6f:5f:47:e7:ea:a5:e1:af:11:54:b6:c8:fc:f3:0b:98:9a:2d:
3f:f3:ff:a0:5b:bd:3b:22:9a:37:f2:e3:7d:54:b6:39:fc:79:
2f:ab:04:5d:bd:80:f0:b8:47:79:bc:54:09:c7:d6:c4:9e:b2:
c5:c2:bc:a6:b7:39:17:ae:b1:1c:e5:f1:6d:79:b5:c6:51:56:
e7:82:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:21 2025 by rpki-client