Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.mft (raw, json)
Hash identifier: 8a/j1ywzD229tJhWbRsO5ld2e07Du0RRv/rbVyGYYMA=
Subject key identifier: E8:89:7D:E7:CD:AD:D7:57:29:73:0D:7B:94:CF:8F:67:DC:77:C3:4E
Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986
Certificate serial: 019A71B879146D4D86B5BC17E1D37EF50536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
Manifest number: 09BC
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: bZYBl_5YkhTCJZ9q6olsThAH6YY.crl (hash: lIeBnHPvjWflqPDO3Mfxz3CCVhcIFuzLCQll6K9PpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:14:6d:4d:86:b5:bc:17:e1:d3:7e:f5:05:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=e8897de7cdadd75729730d7b94cf8f67dc77c34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:e0:b8:33:77:be:4a:1f:fc:c1:7e:17:50:
4b:3e:fa:ba:c0:82:ff:31:47:4f:4a:b1:49:2e:fb:
bc:ea:1b:6b:d4:32:d7:6a:e3:88:96:9e:a6:83:94:
30:b1:dc:39:bd:e1:bb:0b:40:00:a4:0b:c1:17:e0:
6e:c7:87:c0:ae:f0:04:cd:56:1b:e0:b6:96:6b:5e:
0b:2f:b6:aa:1a:d6:cc:74:8f:ae:be:03:89:1a:03:
06:62:58:19:86:72:7e:d5:af:0d:5e:27:ea:2a:48:
b7:f7:0f:a8:7e:0f:a9:a0:03:c9:8d:c7:da:5d:7a:
a7:f2:5b:f4:34:6e:0b:6f:58:d2:15:ec:ac:61:47:
ff:a8:b3:63:2e:37:00:25:2a:67:00:00:0b:02:3a:
97:b6:b0:f7:e9:27:1a:ac:b8:13:4d:c1:f6:f8:0c:
c6:91:5d:58:84:fc:81:b4:14:6b:f5:a0:a3:0f:86:
b1:56:5c:8e:68:77:f3:5a:35:dd:a0:74:ee:fc:e9:
00:64:28:a9:68:2f:5c:4c:09:ea:1b:c8:79:31:9e:
92:1b:7d:77:d0:6d:47:f9:44:22:72:a6:23:3c:97:
77:a8:5c:6b:22:ce:5f:04:75:cd:ed:18:e1:d2:f8:
f4:0b:e6:fa:70:f2:8a:ce:e3:f1:4b:05:a3:36:95:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:7D:E7:CD:AD:D7:57:29:73:0D:7B:94:CF:8F:67:DC:77:C3:4E
X509v3 Authority Key Identifier:
keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:ab:e2:f2:86:05:af:33:e7:7b:4d:26:09:dd:3e:ba:75:
cd:19:00:d2:ee:11:d6:7e:c5:41:bc:03:fd:f5:45:cc:e6:1a:
02:88:42:42:36:22:85:17:32:ce:7b:60:26:bc:8c:aa:e9:89:
71:72:7a:e3:c8:ce:75:ac:c7:86:5c:f7:95:e0:20:ee:a8:7c:
b2:a1:47:ae:68:8f:35:4d:e0:19:d5:28:e0:65:ba:95:1a:cf:
09:0c:de:80:b7:15:e8:e3:d3:2a:9b:16:31:cc:0d:35:56:33:
5b:cd:8b:4f:7c:e5:9e:3e:78:e1:6d:6c:da:40:a6:15:d6:3f:
86:10:21:31:7f:b0:64:4f:31:7d:e0:2a:fe:88:a1:47:a1:96:
f4:4c:58:b9:de:bf:ce:0a:b1:9b:81:1f:f4:12:30:49:bd:1a:
60:27:9f:4e:e2:8a:4d:c5:71:de:7a:6c:5b:5b:e7:f9:59:28:
2d:8d:50:1f:33:0b:79:fc:52:53:f9:1c:f1:bd:21:c5:16:33:
c6:1f:78:56:23:f9:c7:ae:91:11:62:90:88:03:45:f0:10:54:
76:a9:d3:59:e5:4e:e3:f2:da:9f:cb:96:0b:4a:53:cc:04:5c:
e6:f6:65:39:d3:4b:d1:12:40:5f:01:3d:2e:72:19:be:2d:0b:
8e:75:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:40 2025 by rpki-client