Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: f3lsxFAPt2SMc4glFD0i1ma1Kw05jfOswHixjTZlGqc=
Subject key identifier: B0:EB:50:D5:14:31:99:18:2F:78:C5:5C:75:2E:90:A5:7A:A4:9B:17
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019A72939F9153A0A76CFB6754846A75CCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 11A0
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: JhaLRvToEIfsji9Gym9sE4GObfD0e5kv7CUWGAUVp6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9f:91:53:a0:a7:6c:fb:67:54:84:6a:75:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=b0eb50d5143199182f78c55c752e90a57aa49b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:3a:75:45:4d:26:3d:6a:5e:3f:9a:fb:51:
f1:7b:f6:06:62:4b:16:1c:dc:82:ca:eb:eb:16:77:
64:84:ce:bd:d9:aa:fb:83:16:2e:63:39:a7:c2:7c:
37:b3:ba:10:08:76:43:be:9a:e7:a9:5a:c6:f9:b5:
03:ce:49:25:0e:c5:35:52:7a:5a:a7:85:e4:98:da:
c9:51:9d:02:e7:5a:25:cf:97:91:24:74:7f:c1:43:
92:70:f0:22:56:50:e6:ee:e0:4b:f8:bf:39:0f:b9:
41:f7:ff:e2:ad:59:ed:86:bb:d0:c7:ca:9e:c0:e8:
a3:b2:52:a5:f2:f5:61:4b:86:5e:60:6e:1d:88:40:
07:11:c7:c3:bb:6b:7b:b2:d6:53:b3:2f:d7:b5:b3:
36:e1:78:97:3f:b7:d3:27:f2:73:de:c0:1a:95:b1:
f4:dc:ea:5c:af:a4:84:a9:60:49:bd:8c:5d:92:98:
bc:30:f8:4a:b4:22:1c:8f:6d:55:a8:d3:33:16:83:
f5:04:a6:5e:42:b0:15:82:7b:a5:6d:4e:1d:99:21:
7f:c6:0b:c3:10:28:23:2d:a7:5d:20:d6:10:ee:c3:
32:e9:02:8f:03:62:67:ac:44:ec:32:91:6e:4c:32:
e4:a0:3e:e3:7f:fb:81:55:db:39:d4:9f:9a:07:d5:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:50:D5:14:31:99:18:2F:78:C5:5C:75:2E:90:A5:7A:A4:9B:17
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:0e:3d:70:23:01:e1:a8:b8:9e:a0:89:ce:d2:94:a0:f3:
e2:bc:24:5d:c5:4b:a5:52:ed:20:3e:e6:62:6a:ac:00:71:ca:
b9:39:c3:2c:5f:75:0e:b7:11:b2:12:0e:8e:1d:f8:0c:d9:31:
16:f8:a5:a9:2f:ae:7f:14:e8:c3:96:f3:8a:ed:f5:a5:e4:86:
e5:bf:bd:85:3d:81:00:28:89:3f:45:0d:1f:52:7f:a7:d1:16:
c4:3f:03:57:46:32:d1:c6:e6:d3:d5:ed:80:f5:15:b5:2b:ad:
da:7e:e8:c4:63:4d:20:89:e3:d6:f0:d0:03:0b:57:5d:9b:4a:
59:f5:57:2f:e9:1f:4a:bf:69:66:14:d5:ae:c2:d9:ac:e4:67:
ba:46:cd:66:76:37:8c:bb:3d:1b:dd:84:ea:5c:9c:ae:7c:5e:
42:23:65:93:91:57:78:7c:e9:92:37:3d:45:78:3d:41:47:d2:
a6:c0:0b:05:66:d4:88:a6:18:b9:77:1f:c6:e1:dc:fe:a3:8c:
02:cc:72:9e:25:55:19:1d:be:6a:af:bb:25:cb:8a:27:42:bb:
57:93:5b:fb:6b:8b:75:20:23:8e:82:be:c4:1d:a3:8d:28:0d:
47:09:6f:b2:f4:f8:fe:72:67:db:07:3c:9b:8e:60:28:59:c2:
d2:35:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:41 2025 by rpki-client