Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: ZWnX+yC811Hjo4QxOj9ExitfoLMHuSOpvYXl67GQflc=
Subject key identifier: 98:7F:F4:41:43:B6:05:2A:60:76:54:90:33:8B:6D:95:8F:B4:E8:E5
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019A70A51884614DB1287E24146FBBA19C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0907
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: mT9oYax0sl4rJaASHYhPRiU0tqUSL6MAUfCHYOEkZFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:18:84:61:4d:b1:28:7e:24:14:6f:bb:a1:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=987ff44143b6052a60765490338b6d958fb4e8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:02:ec:69:73:3a:28:13:9f:21:19:3f:02:
f2:a1:d5:d6:44:9d:54:05:70:f6:5a:ad:dc:a8:43:
34:16:39:35:e1:17:79:36:88:27:9c:dc:88:95:79:
8d:c7:aa:6b:c9:8b:a4:4a:3c:56:6e:04:65:c7:6f:
74:ca:e6:b8:3b:99:56:09:dd:52:8e:85:b0:23:79:
8a:30:73:c6:7f:de:98:03:dc:09:61:da:8a:a1:09:
2b:f5:13:6d:fb:02:38:b7:36:0e:c9:6f:99:fd:aa:
60:e6:20:98:bb:e7:55:94:0b:11:ed:55:7b:87:cc:
bf:91:57:cc:02:47:f6:88:6c:b0:99:cf:7a:f8:db:
ec:d0:38:cf:f3:14:c0:90:82:61:10:e0:71:0b:63:
83:72:58:ab:a0:86:19:4f:ca:7e:21:21:36:24:de:
9b:35:9e:f6:9c:ea:34:03:6d:89:68:98:84:09:39:
da:2e:15:5d:50:da:30:f6:e3:61:24:19:87:b0:bd:
08:d0:12:df:6d:51:54:70:41:40:57:5c:c5:b1:7c:
90:99:81:31:89:24:42:8c:b3:9b:fb:5e:df:a1:f0:
e2:33:fc:50:2e:16:cd:51:2e:e8:bd:47:23:7e:0e:
fe:69:d8:df:ae:28:a8:9b:de:d9:cd:6c:35:6c:34:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:F4:41:43:B6:05:2A:60:76:54:90:33:8B:6D:95:8F:B4:E8:E5
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2f:c1:88:5b:bd:5a:0d:9b:58:93:5e:86:e7:31:db:cf:f9:
7b:31:d6:4e:ca:7f:ac:f4:7f:45:fc:85:96:e7:2e:21:9d:47:
b7:ad:6c:b0:7a:f4:11:c4:47:30:53:a7:12:3a:ca:8c:0f:e8:
94:5f:67:52:28:be:94:4b:05:95:18:15:32:75:6e:3e:6d:08:
ae:30:e1:08:48:89:91:7a:21:a9:64:7e:88:a0:e8:98:9d:76:
ad:5e:80:f2:91:ff:5d:00:78:59:85:f7:35:36:57:02:35:f2:
06:c0:75:59:a9:12:7b:3c:36:11:a0:65:81:35:5a:8f:5c:73:
24:ea:9e:b5:c2:98:29:e0:64:01:4e:19:a2:58:a9:bb:4b:78:
91:ec:a1:73:19:e4:d9:39:d1:eb:ea:96:aa:0d:dd:d3:c5:ab:
71:c8:ee:49:fb:62:17:78:f0:58:3f:be:ab:8e:6e:76:c2:46:
e7:f5:1c:19:64:f1:3b:52:95:e3:b4:1c:ac:c2:16:d5:5d:93:
8d:f1:ca:a9:75:0f:be:12:29:88:58:f8:da:04:17:cc:79:38:
03:fd:07:7a:eb:ec:32:1c:c0:10:a9:50:5a:6e:c3:1a:90:23:
56:ea:cb:95:b2:76:08:d2:45:db:7f:39:b8:9c:72:c3:b3:15:
96:37:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client