Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: Y8YmtL3+nw1cZXyAf2iciMK7n3al55iJRW44J6go5i4=
Subject key identifier: 55:73:DD:43:41:EA:69:94:4A:1F:DB:3F:55:13:1B:61:49:1B:CA:60
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019A4D739F966F12E69C0F17E81317B320D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: b0oFqZwwiUkZhEOrLBHbvtmqMPT1Eq7ks7rR9hfjplA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9f:96:6f:12:e6:9c:0f:17:e8:13:17:b3:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=5573dd4341ea69944a1fdb3f55131b61491bca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:55:7c:6d:8f:b9:3a:e3:7f:82:c9:6e:5d:
21:b8:34:4a:17:1e:8d:0e:13:6b:0b:cc:76:5e:d2:
87:b8:58:90:ee:89:7f:53:bf:13:fd:c1:24:db:9f:
b6:1b:58:8e:d9:c9:1f:ed:3a:c4:65:21:6f:0c:13:
8d:ef:f4:dd:dc:25:7d:e9:0d:15:49:97:45:8c:73:
6a:6c:f4:77:64:4b:7d:0d:9a:3c:f1:2f:41:f6:f6:
a4:56:d0:dc:30:2b:a4:52:39:75:82:3e:b8:a1:a5:
f1:33:1d:60:3c:c8:12:55:95:62:62:4b:30:09:59:
51:91:34:63:03:92:47:f6:3a:3a:9f:46:22:35:3f:
a5:3c:58:5c:0a:a4:b8:4b:6a:6c:9a:a6:8b:ce:83:
11:41:14:02:2d:c1:33:df:e1:91:a9:cf:2b:54:a4:
b6:2a:0a:c8:41:9c:d1:e0:d1:e2:82:bf:67:3c:6c:
02:62:01:72:7c:de:9d:0d:4c:a8:56:87:34:e9:b8:
85:d9:c3:17:bf:d7:f1:9f:e7:36:0a:8f:45:ad:31:
ab:cb:99:27:9b:84:41:c1:0e:17:e3:1d:bf:e2:b3:
ae:15:71:32:d3:ee:0d:0e:b7:fb:fa:91:52:02:0a:
61:53:3c:cd:44:6d:fa:fe:03:6b:c2:2b:f5:12:14:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:DD:43:41:EA:69:94:4A:1F:DB:3F:55:13:1B:61:49:1B:CA:60
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:c6:1a:d3:4f:48:50:e4:11:3d:4a:49:cd:e7:6b:37:a1:
74:c4:33:5c:43:d2:68:dc:e0:75:ca:83:d7:18:78:b9:d6:a5:
5b:32:29:47:b7:56:10:a9:ca:66:05:94:95:36:3b:dc:51:2c:
6b:80:9d:b7:db:21:0b:22:eb:fa:d3:1c:d7:93:05:5c:ab:9e:
f9:c4:25:5c:18:c5:49:b7:a6:83:40:60:77:a4:02:fb:25:6b:
d7:bb:8e:ec:ac:47:c2:f9:5a:5e:49:7f:84:4f:9a:7f:2f:17:
4c:82:1a:7a:04:b4:05:20:7e:73:77:f4:2a:fe:17:5f:8c:16:
be:3d:53:70:46:6d:37:a3:fa:7c:33:6e:a2:2b:bf:7c:bb:ce:
f0:cf:18:d9:59:6e:de:ac:47:ea:ed:4a:fa:e2:50:6e:78:11:
95:7e:e6:d8:79:6f:be:20:e4:8e:50:a4:8b:8e:19:45:8c:30:
e9:df:39:63:bf:d5:8e:a2:a6:7f:f8:be:87:25:08:be:02:c1:
89:5f:c4:47:56:7a:17:78:3b:e1:3a:46:07:4d:16:1e:98:76:
7b:e7:9b:28:97:5e:68:e2:e6:9e:8b:c4:b7:f1:cc:ae:91:dc:
06:6a:01:c0:2b:c2:8a:7c:8e:c5:99:f5:5b:84:ed:86:f6:99:
c5:e5:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:34 2025 by rpki-client