Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: 8uYpWNkOP3sjclOqy8jb5D7VWj74H3ZvuUBiYu8oFGY=
Subject key identifier: FA:B5:7F:3E:76:7D:D7:03:82:6C:1F:EF:0A:04:5D:6C:36:96:80:60
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 019A23D37FE7AA19AADE154636D2ED426434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1342
Signing time: Mon 27 Oct 2025 04:00:54 +0000
Manifest this update: Mon 27 Oct 2025 04:00:54 +0000
Manifest next update: Tue 28 Oct 2025 04:00:54 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: q//mhjEiGPo+IgIZg1A+4AjVemBULA7m9AR/Oknx2pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:7f:e7:aa:19:aa:de:15:46:36:d2:ed:42:64:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Oct 27 04:00:54 2025 GMT
Not After : Oct 28 04:00:54 2025 GMT
Subject: CN=fab57f3e767dd703826c1fef0a045d6c36968060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:0a:44:cc:b3:b5:88:bc:fd:78:84:19:8e:
73:20:0d:ca:a4:ea:8a:3d:2a:2d:35:c7:7e:c2:08:
37:4b:48:ac:58:60:e4:0d:36:4a:dc:32:e0:3f:68:
61:55:cf:41:6f:88:37:c3:50:3b:36:9f:20:a0:7b:
5c:58:14:01:ea:b3:3b:ed:18:b0:03:77:77:fd:69:
a6:17:f2:c8:2d:48:5f:9d:06:d1:66:1c:06:1d:f3:
12:7f:7c:c4:8a:f3:0b:55:f3:50:b2:58:86:93:10:
ab:8a:e4:85:05:ad:17:8d:aa:56:74:d2:20:88:54:
fa:37:19:d8:1e:c1:e8:80:a9:8b:c8:10:54:51:1f:
7b:56:8e:ee:1b:f2:f7:5d:f8:78:77:9c:f7:70:b2:
f7:f9:7f:b2:b6:7f:3d:1c:d9:7d:d0:d0:90:8f:f3:
d9:c4:0b:78:29:16:13:64:bd:db:43:c1:79:7c:e5:
67:8b:cc:eb:57:d0:29:0e:53:17:5e:cf:b6:b9:02:
d1:22:00:d9:52:d9:2b:22:af:03:29:cd:54:f8:46:
11:ae:47:86:01:ab:1d:5a:73:51:ad:9f:32:5d:2c:
89:57:44:6d:a6:86:dc:d3:77:df:c8:c9:15:c2:a6:
8a:2c:27:d4:9a:9c:49:ef:14:a6:54:b0:61:ee:6c:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:7F:3E:76:7D:D7:03:82:6C:1F:EF:0A:04:5D:6C:36:96:80:60
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c6:08:13:a2:99:01:8d:ec:49:85:e1:d3:3d:77:64:bf:1d:
8e:56:e2:f5:51:45:23:73:00:7c:6e:3e:14:fa:75:99:db:0a:
af:9e:f4:c8:5a:b0:ef:41:46:04:6e:a0:73:0d:cd:f6:25:62:
f8:bd:92:02:16:52:7f:da:87:04:f5:8b:ea:78:d5:df:c4:73:
61:b9:4e:a6:99:e1:0b:0a:4b:ff:c8:0e:26:f7:af:1a:da:e8:
bc:db:b5:a1:1c:38:39:ef:0f:06:44:93:a1:1b:a8:e7:10:75:
45:1a:5c:44:38:46:61:1b:bd:59:bf:ae:5e:87:2b:0a:43:ce:
1f:50:5c:8e:30:be:3b:e9:f2:73:13:54:98:79:b5:19:2d:70:
ac:cd:b7:0a:c4:ca:77:0b:16:0e:71:4e:9c:1a:20:b9:d7:18:
48:c8:99:47:e6:44:49:da:aa:d4:1d:56:dc:e5:9a:ce:1a:e5:
68:86:ac:3b:04:50:41:b6:6d:6a:2e:45:28:50:34:00:ea:52:
80:05:a5:de:85:bd:ff:2b:5e:bd:df:8b:dd:8f:ec:c1:f8:95:
a4:07:e5:f2:6c:b5:c9:05:35:82:61:70:4f:80:8e:cf:2f:eb:
c3:a8:a0:e6:00:48:db:90:5c:75:a0:df:a0:cc:cd:36:6c:36:
5f:49:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:57:13 2025 by rpki-client