Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
File: _Bmp6bejYMnT_drVgPsSgllp7y0.mft (raw, json)
Hash identifier: NafViK9aHOOwWf1gh4v98MVcpsE1NkhCGU26Yjyf30E=
Subject key identifier: 42:84:C4:2E:34:06:6E:12:20:96:90:19:AD:AE:85:42:1D:84:FE:3A
Authority key identifier: FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D
Certificate issuer: /CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
Certificate serial: 019A71B7C479E9B27B369CFCBEEFFCEE7EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
Manifest number: 40
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: _Bmp6bejYMnT_drVgPsSgllp7y0.crl (hash: ivksVPFHHRwgEnDRU8Y/PG/m5Kmce4qqOd9nF9pSrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c4:79:e9:b2:7b:36:9c:fc:be:ef:fc:ee:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=4284c42e34066e1220969019adae85421d84fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:b1:20:c8:2b:ea:2a:03:88:37:e6:ac:46:
8b:7d:94:d9:89:f0:c8:ed:1c:4f:68:d2:59:6f:9c:
79:d1:aa:43:69:13:a0:a0:c4:93:9d:bf:6a:c6:9d:
c2:59:b8:97:53:1e:37:fd:03:28:28:cb:91:0d:3e:
65:f6:5a:64:d8:4b:3f:c3:c8:68:ed:3d:fd:34:35:
f9:c0:33:76:a9:eb:45:dd:76:99:3c:fa:de:af:ea:
04:b4:b9:e9:92:2c:48:69:88:0d:de:0d:9a:cb:84:
b9:82:7f:5d:b0:70:d7:ae:23:0d:86:9e:a0:c7:f6:
73:5a:6e:dd:80:89:24:d7:80:24:7e:c3:5a:96:d0:
3e:cb:dd:51:16:7e:ec:e5:6a:e8:0a:8b:c1:ab:7f:
5f:46:7c:95:36:e1:e7:8b:16:4a:d8:02:9e:aa:ec:
00:71:a9:cf:a6:ac:09:c7:e9:11:d7:fb:05:74:5c:
10:a5:a7:dc:35:b5:67:f0:c8:f2:d0:fa:77:c2:f8:
8e:eb:45:60:19:fa:fc:b0:ba:99:30:e3:3f:74:71:
73:d9:ac:90:81:ff:06:a6:ea:de:56:53:1b:cc:8c:
20:c5:70:08:23:86:35:e4:47:fb:97:7b:a2:d7:5d:
7a:a7:c8:e5:5a:dd:54:44:22:c9:9c:18:7b:b4:a2:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:C4:2E:34:06:6E:12:20:96:90:19:AD:AE:85:42:1D:84:FE:3A
X509v3 Authority Key Identifier:
keyid:FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:10:04:d6:2e:f0:a0:88:9b:00:df:5c:44:6c:b4:c5:ec:59:
cf:62:24:0d:70:b4:68:f5:4b:80:d1:8e:70:64:94:70:61:a8:
51:f1:5e:fb:ea:f6:08:0b:2f:c9:3d:22:4a:3f:1c:5d:98:0a:
73:29:b6:6b:5f:6a:d6:63:0e:18:db:7d:b6:15:06:34:f0:ee:
68:11:d8:e7:66:ea:e9:50:0a:30:0f:c1:39:57:d1:03:7a:a2:
9e:89:03:d0:44:9f:50:d0:08:f6:f2:c2:08:97:15:f4:ea:88:
bf:e3:28:90:d5:b7:39:4b:e2:a1:47:31:3b:58:ef:8c:c6:55:
1b:38:7e:43:30:f7:c3:73:bd:28:d0:db:13:e6:d3:cd:57:3e:
31:74:2e:cb:6c:72:18:0f:29:e4:ca:9d:3b:3a:90:3d:1f:ab:
1a:2b:f5:25:b5:f5:d4:0a:35:4d:c9:4c:e0:33:d9:f6:65:27:
de:b9:9f:a0:22:ff:23:b3:9c:29:e1:b9:1c:86:ab:10:11:49:
f2:d2:61:06:4f:df:31:d8:36:7d:54:60:05:64:a4:17:91:67:
ee:c4:5a:78:72:47:a3:32:17:8d:4c:9b:8b:47:8e:5a:ef:c3:
a2:5c:c6:84:d3:6c:73:49:20:61:6e:1b:53:04:b4:fa:39:e0:
2e:0f:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:53:11 2025 by rpki-client