Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: nqOTuWhc1aEa89Jg7mNyw3DQoYOcABP4DVnROT++3mU=
Subject key identifier: 84:E8:E6:C7:24:1F:97:37:EF:03:EC:A7:BE:60:B8:99:9B:0B:6A:08
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 019A71B7C0D7297D230582CB958E7F29015B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 07EE
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: bBeMtRvAZt45pTRYGPfbIsIwmNefl3/UkbRap+eDObE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:d7:29:7d:23:05:82:cb:95:8e:7f:29:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=84e8e6c7241f9737ef03eca7be60b8999b0b6a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:3f:92:75:df:07:ca:bd:19:98:97:0f:a4:
43:ae:e8:7c:a6:d4:9c:ce:45:cb:34:0a:f2:03:6e:
18:e4:d3:dc:12:2b:72:9b:74:76:a2:05:d8:e2:fc:
c7:21:ef:0b:d4:d3:12:cf:43:35:c0:12:d0:dc:aa:
48:3e:1d:50:aa:9f:5f:d3:b3:89:2f:f3:80:e6:39:
ad:fd:3a:3b:a9:0b:30:fb:e2:ea:3e:36:64:e8:70:
a6:be:60:6a:30:40:33:94:ef:f9:2f:ad:da:16:19:
84:39:b3:f6:43:28:36:c1:87:00:ad:66:bc:a6:ae:
95:2c:26:95:21:91:a1:3b:d4:21:9c:a1:5c:ff:48:
cd:c4:d7:75:b9:7d:17:c9:7a:1f:23:45:b1:a1:b6:
33:7c:06:8b:2b:98:0b:03:28:27:fd:fe:c7:f6:4f:
46:08:c0:0a:3d:84:df:ee:41:b8:bf:71:14:77:c0:
70:0f:e2:b9:ec:7b:43:32:e6:15:b5:f8:27:03:d5:
fb:e8:96:f1:a7:9b:07:5a:11:a9:cc:cd:f8:a0:5e:
0f:02:c7:26:77:d0:62:8e:cd:40:ce:a5:a9:a6:ab:
3c:ef:ea:2b:5e:90:ec:c0:f2:a2:aa:57:9b:d1:23:
f9:48:3d:7a:57:a3:27:98:9f:b5:f5:10:61:79:23:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:E6:C7:24:1F:97:37:EF:03:EC:A7:BE:60:B8:99:9B:0B:6A:08
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:59:18:7c:c2:9e:7b:f6:1f:07:02:15:8f:8b:d6:e3:88:
5b:77:9f:35:0d:91:55:d0:04:f2:2c:00:d7:d3:19:9e:f1:35:
d5:10:85:7c:0c:6c:a0:eb:85:c3:1c:08:e3:14:61:b8:e4:fe:
77:71:31:ba:34:a9:06:12:a0:27:5f:2a:6b:48:55:c1:b9:e9:
17:e2:02:0b:3d:5c:72:f9:91:92:1d:75:cb:a8:e5:29:e8:f2:
bd:bd:d6:c7:60:7e:2a:fa:e6:92:e8:f4:98:18:04:02:39:f7:
85:25:1d:44:35:02:c7:e9:8c:41:ef:cc:d6:ae:4a:aa:9c:cb:
28:db:f8:d1:0f:33:63:b6:5a:51:0d:f9:62:e2:49:8a:6a:30:
71:75:11:73:3a:4f:2d:47:ad:a9:dc:3c:e3:70:65:de:f9:d8:
e1:f9:3b:1d:cf:a0:2e:1f:6b:08:b3:4c:50:92:ee:09:65:d4:
97:da:f1:1d:89:2c:c3:d3:b2:d6:df:4d:03:2f:f2:1c:fe:18:
a0:61:c9:f0:ba:83:e3:bf:8f:28:12:e1:ad:af:09:de:3c:ee:
76:e4:a0:2f:c3:ee:35:ec:6b:40:44:70:57:33:6d:6f:e5:a5:
df:dc:5a:19:06:32:7d:f2:6b:4e:13:84:3c:42:23:b4:8b:a3:
92:5f:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:10 2025 by rpki-client