Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: CI4SwMYyX//tETG5k39NSH1Spn1m77gLv/DaWcZc5VU=
Subject key identifier: 4C:E5:42:8E:44:75:33:A7:89:17:58:23:C2:C1:AA:1F:12:4E:A5:C8
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 019A71B7A3B477C3A391FEC972937F424928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: LKgOLHGWj+QlYzUMadN6UWySxAyasWch40sfcZFkAuc=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a3:b4:77:c3:a3:91:fe:c9:72:93:7f:42:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=4ce5428e447533a789175823c2c1aa1f124ea5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:6c:57:5a:a9:f3:88:62:db:e2:f3:3b:67:
51:e6:94:13:7a:dd:dd:56:d2:4d:74:03:98:9c:31:
91:cc:9a:b3:6c:c0:de:6b:f0:d6:c4:2f:fd:47:83:
c1:87:6c:33:34:6b:b3:3d:40:e1:69:a5:dc:3c:51:
cc:64:24:1c:55:fe:96:11:de:ac:a7:f9:79:c1:dd:
fb:f4:3c:cc:54:e9:56:1a:56:8c:70:2d:1c:e9:c2:
b0:73:00:fe:17:9c:d7:29:86:1e:7b:d3:fb:53:7e:
b1:cc:f5:dd:a0:6b:9e:0d:6c:ff:10:06:33:5e:c7:
6a:bb:49:7b:86:68:0a:40:bd:dd:56:78:0c:6f:f1:
8f:4f:71:ba:7c:7e:d0:8a:3b:1b:48:6a:9f:71:54:
73:17:26:9e:56:6c:f0:1e:1a:00:68:01:fb:8b:0a:
51:5b:95:1a:7a:53:c6:08:90:75:a9:c1:ec:f0:50:
77:ad:61:a0:ce:3b:9f:23:2e:85:d9:f6:29:13:7e:
5a:cb:59:a1:0f:71:45:4a:98:29:60:3b:d6:e6:1d:
23:3d:2f:d9:d3:45:e7:b2:7e:20:b7:cb:ac:11:dc:
1a:10:f2:21:48:71:d4:b6:97:03:71:22:44:1c:1d:
46:d3:e4:96:49:da:16:ca:e9:63:20:76:5f:d2:5e:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:42:8E:44:75:33:A7:89:17:58:23:C2:C1:AA:1F:12:4E:A5:C8
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:13:a7:70:94:e3:6b:bd:0a:0c:48:9b:52:34:5d:7f:86:
ca:e1:dd:a6:63:4a:88:5c:26:0a:ea:90:94:0d:b8:0f:58:42:
12:b4:0a:1d:e8:88:e9:ae:06:f6:72:be:79:f9:90:c5:70:d9:
ba:6c:0a:24:dd:da:6d:20:44:5a:2d:9a:d3:7c:1d:1e:9c:04:
97:dc:bc:e7:a0:f4:c3:38:e1:13:9f:9d:e8:8d:f4:39:e5:d9:
9b:91:e2:73:9a:1f:04:7d:ad:e7:ef:6f:7a:04:34:f6:21:84:
c8:a4:eb:9b:58:01:f5:61:38:9f:9f:87:d9:a6:93:e2:59:37:
b1:1d:32:56:65:67:b9:9c:a7:75:7f:3b:10:d9:47:2e:35:ca:
31:62:2d:27:32:b4:ed:84:a4:12:30:24:7e:df:28:4d:c8:40:
0d:18:9e:65:30:c8:a8:36:c2:a4:8d:03:e3:4b:af:48:2e:e8:
9f:5d:b9:13:f7:8c:e1:1d:82:04:99:8c:aa:9c:fd:70:25:cc:
33:63:35:e0:26:42:a2:36:1d:5d:8a:ea:03:e0:06:ee:91:e5:
de:14:89:be:40:d1:3b:22:3a:d6:96:98:47:9e:7f:84:c3:7d:
3a:a3:fb:0a:02:8f:f4:10:99:13:fc:56:75:47:ba:33:e9:8f:
3a:29:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:01 2025 by rpki-client