Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: e84I5y4pZp0vSf0EM0DmMnGqTYyDWgMW4BLcTfHjO1c=
Subject key identifier: 56:3A:E5:9A:64:89:26:48:63:04:72:FC:4F:C6:43:0F:C9:8F:79:36
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 0198A04E7B8083D4DA295A248F7DF54062A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1633
Signing time: Tue 12 Aug 2025 22:02:34 +0000
Manifest this update: Tue 12 Aug 2025 22:02:34 +0000
Manifest next update: Wed 13 Aug 2025 22:02:34 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: yIyG9UjfxIR4XvXcmbioFslqJjZmxySzssMSTU49lYQ=)
2: m44GNveevFDTA8nmcPYOXfbfye0.roa (hash: LxZ8Y1vKBLraQ0pr7LBU+yQaRz7ynKnNqrqFmveq5Fk=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:7b:80:83:d4:da:29:5a:24:8f:7d:f5:40:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Aug 12 22:02:34 2025 GMT
Not After : Aug 13 22:02:34 2025 GMT
Subject: CN=563ae59a64892648630472fc4fc6430fc98f7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:e9:78:a8:c0:63:17:c9:d1:fc:cc:da:03:
c3:d2:b2:bf:cc:30:56:df:cd:98:80:81:31:ef:fe:
72:7b:a5:66:c1:93:d8:0c:22:18:5d:c4:3c:9d:44:
a4:76:ec:68:ef:9f:f5:88:1e:fa:10:e6:b8:b0:a1:
c6:e4:57:52:f9:09:57:23:df:e4:a0:e4:1d:b0:7b:
2a:c9:68:bd:f1:cc:7a:f9:4b:95:47:12:2d:33:d2:
d9:da:88:c7:57:ff:4e:ec:ea:31:4f:f9:b2:98:43:
01:55:d1:12:4b:89:36:30:cd:07:af:e2:fe:09:55:
e0:c3:b4:59:e2:de:5a:1d:b3:c0:e6:89:34:4f:33:
4e:43:ab:5e:05:63:6b:2d:d7:3a:f9:a0:8c:ca:80:
c0:2f:a3:78:cd:7a:0f:97:a0:ac:f6:e9:e2:ff:50:
e8:b9:15:d1:46:30:8d:5c:a7:5a:57:b1:33:fe:9b:
5a:37:52:95:37:09:09:a0:d9:55:bb:a8:49:e3:80:
be:36:01:45:57:5f:26:f2:76:ab:eb:d4:b1:fa:42:
e1:96:5f:88:fa:7d:bf:57:a3:f3:56:4b:7b:e4:a2:
2d:12:7e:59:c2:a8:50:84:b7:a7:97:af:1f:c7:fd:
04:b6:4a:80:41:6b:26:ca:04:b3:e7:10:14:1a:21:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:E5:9A:64:89:26:48:63:04:72:FC:4F:C6:43:0F:C9:8F:79:36
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:7b:0e:0f:3b:a2:5e:b3:32:c3:68:06:86:fb:59:ca:6a:
05:ce:fb:54:81:71:8c:eb:9e:7a:bf:f3:25:4f:af:d1:86:8b:
29:62:b2:be:fa:f4:aa:59:cd:44:92:ac:d4:cb:cc:eb:68:da:
0d:ce:fd:f8:8e:f2:e7:9b:b6:43:57:00:72:b3:ab:cf:4a:9b:
84:51:aa:e9:17:f2:ba:e9:d3:45:cc:fc:c9:8b:93:5d:15:30:
fa:31:91:36:2c:03:3d:c3:70:b2:cd:bc:0a:5e:6d:ec:fc:7e:
de:a1:80:b6:4b:26:c3:37:ab:43:80:ff:e8:28:52:09:ea:74:
fa:18:38:d3:27:1d:b4:4d:48:0b:3c:04:a2:88:87:6b:7b:26:
cf:04:95:89:af:8d:b2:2f:8d:5d:0a:93:b0:4e:35:e8:5a:9f:
c0:73:bc:ab:c1:02:d2:f8:e2:e1:75:16:61:2f:a3:70:01:5e:
17:5d:2c:21:87:47:79:b1:d3:97:64:71:3c:40:87:37:37:ea:
4d:09:a8:66:21:cf:8b:9f:fe:a6:c3:1e:7b:2f:7d:1e:2a:9e:
fa:4c:ba:05:c6:8a:bc:6d:c6:8f:ce:06:da:52:e4:d5:e8:0e:
09:d4:14:ec:2b:e9:19:c8:b1:34:e7:38:67:31:a8:87:45:de:
35:32:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:34 2025 by rpki-client