Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: qFD6tdSMn2FHyALem0e4Z3OIpIDl0eh+9LWf+eYX/iY=
Subject key identifier: F8:6F:27:E9:1B:03:9C:D3:F2:6A:6B:1E:64:E6:25:E3:EC:F2:29:B8
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019A7149D4E6110642C06B68F438C3DD4152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1421
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: iL9v8fghJemc93BP2ygE0t5XGLOUBkDSjYhzIhnvJHs=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d4:e6:11:06:42:c0:6b:68:f4:38:c3:dd:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=f86f27e91b039cd3f26a6b1e64e625e3ecf229b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:2a:57:47:ec:b0:22:90:80:12:ee:00:7c:
85:e1:6b:b7:42:54:5c:08:92:5e:78:88:6d:58:ff:
cd:93:cc:2e:67:0b:cd:96:5b:43:ca:28:ed:4f:c5:
ea:9c:a3:f6:ad:69:58:f5:ef:e9:8e:58:d1:3d:37:
93:09:71:0f:56:35:98:89:f5:61:4f:ac:ef:d8:56:
6b:cd:93:54:35:1c:2e:06:6c:c8:52:f7:68:5c:fe:
3a:c5:63:6d:14:9d:d7:78:d6:20:54:13:43:17:de:
e4:99:de:65:7c:5e:dd:f7:f1:9a:a7:97:10:1a:07:
6a:c1:b5:9a:5f:40:94:7b:41:9c:c1:f2:19:cd:47:
28:d0:52:aa:23:32:8f:f1:5c:a0:af:ee:8d:3f:37:
95:a9:fd:d7:50:d4:78:b3:61:09:42:37:28:9a:60:
02:c1:6d:eb:08:32:28:e4:67:99:d5:25:46:7d:7a:
c6:cc:ed:d6:6c:0b:51:3b:b1:59:ba:35:d6:cf:29:
fb:2e:0e:41:ac:07:6e:21:41:c0:34:41:02:c5:31:
e4:33:8c:f1:73:b6:bd:7c:de:29:6c:12:b4:f4:a2:
e0:12:7b:03:08:73:33:14:89:10:e6:f3:68:3b:13:
33:d7:1b:95:14:5a:3d:a8:1c:d9:c4:ca:4b:c6:cf:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:27:E9:1B:03:9C:D3:F2:6A:6B:1E:64:E6:25:E3:EC:F2:29:B8
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:7d:6e:74:66:8f:bf:00:5d:06:81:86:bd:c2:5b:b4:a8:
f8:6f:79:f6:0e:27:54:eb:24:74:ce:48:b2:3e:d2:95:1e:04:
06:25:ed:a9:9a:f7:e1:77:ef:74:aa:af:e8:fd:23:96:6b:d7:
61:ea:e4:bf:c9:1c:e7:bf:71:12:a4:32:6e:c3:52:2c:07:74:
db:3e:c7:64:84:7d:f5:7b:3a:f1:d3:57:71:ff:de:e4:e8:e8:
84:0f:54:e5:49:57:27:0c:bc:f3:69:de:d6:56:f6:db:ec:57:
59:92:55:47:f3:4e:28:0a:fa:84:e0:60:3e:96:9f:40:eb:2e:
28:d6:29:d9:3c:03:ff:3d:10:74:bb:61:de:b6:c7:12:bd:95:
a7:3f:c5:07:ee:d5:43:8c:b8:65:c4:f6:c1:c0:4d:f0:de:fc:
2a:7a:23:67:e5:6b:28:02:fe:5e:82:69:19:f9:b2:4e:2c:30:
65:20:7b:88:74:89:d4:5b:c9:db:ec:4a:7d:a7:78:a0:cf:51:
29:f2:09:b1:2a:fd:70:d4:20:03:c6:86:bd:2d:35:aa:3e:41:
78:df:d3:d0:42:33:b3:79:a7:01:3d:1e:90:e1:5c:d3:9e:09:
86:e0:ae:88:1e:fd:e0:86:cb:30:f6:47:d4:d7:8b:1f:ee:68:
c0:f4:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:55 2025 by rpki-client