Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: eoyqL2xY5B1V8x7WRNyAF0hjZnrw1g1eNw7eKuG0peg=
Subject key identifier: F3:BC:AA:40:6F:83:2C:C4:29:C9:CA:82:07:A0:DF:D2:F9:57:65:3D
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 019A72262AE61DC2100629D6AE267B287B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: 0AmLWsR6cLwhaAJ8n8i+qGknahb8zf6zdIVL1B+cn6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:e6:1d:c2:10:06:29:d6:ae:26:7b:28:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=f3bcaa406f832cc429c9ca8207a0dfd2f957653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:d0:65:4b:73:8d:d6:fa:fc:eb:7b:98:95:
93:2c:e9:7d:c0:19:a7:10:61:7d:e7:cb:4b:8f:9d:
e4:5b:85:be:f1:5f:c6:d3:a1:41:53:a8:35:ff:ce:
e6:db:6e:c1:f8:de:93:7c:3f:4d:02:79:da:f5:e5:
2e:8c:bc:58:71:86:6a:35:d9:5a:e8:7a:f7:99:ce:
32:b1:72:92:1c:95:a3:19:92:61:c2:2c:4e:cd:f4:
02:33:f9:71:05:e6:41:b5:5e:61:5e:d6:39:7a:05:
e1:99:35:05:1b:36:d0:59:8f:95:a2:b5:4a:a0:08:
d8:70:bf:ce:f4:71:6c:79:90:fa:17:48:e8:51:77:
96:99:0c:fa:10:c0:0e:50:1e:c5:22:98:8a:33:2a:
07:2d:46:c0:66:bb:3f:13:e7:5c:ab:93:f1:43:d2:
06:2d:5b:55:1f:2b:85:fe:92:6c:3c:9b:df:6d:f0:
13:91:06:0e:1a:08:cd:d4:fa:ef:45:23:f1:31:a9:
fc:9e:97:73:4a:58:84:41:06:50:c0:48:17:52:dc:
3b:d2:9f:c6:aa:f0:c9:f7:52:77:f9:79:6d:15:ae:
96:31:9f:bb:99:61:47:19:ef:75:2f:36:05:a6:03:
41:a2:b8:7b:33:ab:c0:dc:d1:01:6c:51:22:ac:9c:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:AA:40:6F:83:2C:C4:29:C9:CA:82:07:A0:DF:D2:F9:57:65:3D
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:82:64:54:21:24:fe:ec:0c:de:01:c3:33:62:65:d2:a4:a9:
48:c8:b4:ac:51:74:4a:6c:bc:f2:30:c0:05:70:51:b6:db:1e:
fd:78:dc:4b:2e:03:e4:44:3a:59:25:51:18:be:8a:e3:cd:50:
3c:9c:3d:41:ad:51:a6:5b:5c:48:d4:7f:71:7e:b5:13:84:42:
73:84:f8:0d:01:35:73:03:cd:e9:50:67:da:48:d7:47:a6:8a:
57:d7:14:7c:2d:16:3e:d6:52:d1:61:62:56:55:f6:ae:6e:14:
b0:73:92:a6:15:36:57:ae:ab:8d:f0:50:e9:32:85:50:65:fb:
b8:1e:e6:c4:73:ef:dd:3c:18:9f:8b:2b:21:6e:b8:b4:ad:d5:
ce:fb:c5:cf:91:d0:6a:0f:3e:f6:fb:fe:08:47:93:79:7d:bc:
47:9f:03:3f:cc:51:3b:91:c4:b4:21:2d:1f:e9:53:80:17:8a:
64:5c:1c:27:cc:c0:b4:ab:19:6c:f5:d0:07:2f:f0:07:3a:ad:
25:79:3d:a2:3b:10:a3:06:f8:6d:5a:5f:bc:4b:ff:dd:89:1f:
3b:e3:00:b2:23:a7:dd:8c:cf:05:66:ca:0f:b7:30:21:2d:4a:
6d:d8:ba:f3:28:fa:69:29:09:e0:c6:e8:f5:0b:b5:7b:7e:a8:
be:c9:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client