
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: gx8Qb6wJef7RTZ0OHcYA9fMP8R6E3sqLfVcB4QBIMeQ=
Subject key identifier: 6E:2F:C6:C6:DE:F5:43:37:AD:44:FD:2A:61:F5:48:E4:DB:10:F1:F3
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 0199239EDC214607CBC8B325955EC260ED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0741
Signing time: Sun 07 Sep 2025 10:00:37 +0000
Manifest this update: Sun 07 Sep 2025 10:00:37 +0000
Manifest next update: Mon 08 Sep 2025 10:00:37 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: 0TxrIdojg2RFpTtRRktoeyCnl6IjsNpmvmwXgTjlzW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:dc:21:46:07:cb:c8:b3:25:95:5e:c2:60:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Sep 7 10:00:37 2025 GMT
Not After : Sep 8 10:00:37 2025 GMT
Subject: CN=6e2fc6c6def54337ad44fd2a61f548e4db10f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:ed:22:58:81:87:49:97:20:be:19:81:13:
78:2a:b0:da:05:79:cd:31:b5:c8:b2:88:23:4a:c1:
ae:f6:b2:d7:61:03:93:51:11:75:05:04:6f:38:a7:
67:c2:f3:c2:31:a7:0e:4a:6f:85:97:e1:a0:08:c4:
21:a9:97:2c:0f:c2:d9:42:0d:c5:e2:40:d8:d4:ba:
27:00:61:c6:c3:b7:7f:eb:fb:10:af:14:c8:2a:64:
05:c8:51:74:cc:10:3f:02:e8:f3:b7:b1:80:12:11:
2e:ee:d2:56:cc:92:0f:e5:11:8f:59:6e:ac:f1:8c:
63:37:8f:ef:02:33:ca:65:20:ae:91:1f:9a:b9:0c:
5d:cc:20:3b:cf:a2:71:d5:b1:50:25:46:b0:bd:fe:
bc:53:1c:f0:bc:20:19:22:6b:81:fe:fb:f1:4e:80:
0b:77:df:e3:ff:ac:71:a9:e8:94:49:73:0e:a7:ef:
e9:0d:c9:84:20:13:50:1b:2d:fe:39:0a:26:1f:83:
c2:0b:d4:3c:c8:6f:72:81:8a:5f:3d:24:cb:2d:0e:
2e:24:63:24:e5:b7:a1:50:ac:79:13:61:ed:36:d7:
33:af:9c:90:1c:cc:53:66:16:00:31:f0:b2:78:09:
c7:53:d1:1c:a5:cf:0c:f3:8c:50:01:6e:12:aa:c7:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:C6:C6:DE:F5:43:37:AD:44:FD:2A:61:F5:48:E4:DB:10:F1:F3
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:cb:f7:8b:7f:2a:83:d2:a7:67:88:9f:58:5a:82:94:66:
d9:67:88:f6:63:79:04:e4:61:58:e2:6b:37:77:39:f7:9d:30:
1c:90:cd:14:16:7d:9e:c5:67:a3:c5:4b:99:98:59:fd:33:42:
57:e7:1b:21:9c:d1:c6:5a:6d:e8:7a:99:79:36:89:91:4e:0d:
e0:78:7f:c1:4e:9f:c1:97:22:b0:65:80:23:b7:24:e4:aa:5d:
a4:f4:cb:5b:12:8a:eb:63:6c:65:e6:c0:5c:2f:4a:4f:64:66:
4e:ef:c5:a5:a4:3d:8d:e9:83:2a:ec:76:16:27:8c:8b:40:61:
57:c2:db:3f:c9:94:3e:7d:fd:ae:43:14:7a:a5:08:56:d5:d2:
17:20:9a:e3:84:3d:bb:f8:36:de:fb:f9:0d:1a:bc:e7:7f:f6:
73:26:37:f2:58:0d:07:13:8f:e5:7f:91:3b:0f:01:76:d3:57:
0d:7a:4c:ee:69:40:25:12:91:36:a9:61:9c:db:c5:2f:a2:99:
c3:f7:88:a4:d0:11:6b:df:24:50:87:22:fe:87:67:1f:99:08:
d2:07:c0:b5:01:94:54:12:70:87:88:27:d1:16:e1:f8:9b:f7:
eb:32:ad:08:a0:a8:04:35:4e:bd:42:c5:2c:d0:e7:83:6f:72:
ee:f3:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:03 2025 by rpki-client