Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: Qb1FkcAPn4Dv0DKFc/SLhs6uH72NB8aUiBcaMe8L764=
Subject key identifier: 88:7B:FD:52:24:C8:89:1B:DE:CF:2A:06:B2:BB:3A:A7:31:82:E0:9E
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 01977007CA9B3A7EC66FC1F5A2C7F077E61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 20:00:48 +0000
Manifest this update: Sat 14 Jun 2025 20:00:48 +0000
Manifest next update: Sun 15 Jun 2025 20:00:48 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: uTUF51SG5WaLr1JVpv1hWflb95dX2pDiPPx5pz9NJAk=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ca:9b:3a:7e:c6:6f:c1:f5:a2:c7:f0:77:e6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jun 14 20:00:48 2025 GMT
Not After : Jun 15 20:00:48 2025 GMT
Subject: CN=887bfd5224c8891bdecf2a06b2bb3aa73182e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:14:85:f1:d7:43:29:d3:fb:c0:b8:65:a3:
81:f9:9f:a7:8b:98:37:6b:f8:f1:18:92:8f:bb:4e:
53:36:4e:45:8e:29:e8:b3:90:94:d2:48:7a:d9:23:
d6:87:ef:ce:55:08:75:95:83:97:57:68:f1:5d:9a:
91:0a:43:e4:a1:99:c6:2a:b8:d1:ed:58:5f:bc:20:
48:7a:59:00:3a:9e:55:96:df:39:df:ba:41:80:7c:
64:dd:e2:ef:b6:d5:9a:b8:d8:90:81:60:c6:81:09:
bd:11:ae:61:e5:66:5b:f8:f1:c1:98:c8:5e:bc:5e:
12:9e:c7:ad:98:41:55:db:b2:60:5e:a8:72:68:42:
42:c6:c2:cc:c2:9f:36:ef:56:e1:5c:28:66:7d:e3:
dd:85:0a:b0:d6:ea:81:22:3f:5b:85:0a:79:20:65:
dc:93:2e:32:76:da:7f:fc:b7:d6:98:7c:1b:ff:1b:
f1:18:7b:f9:6d:54:c6:32:bd:82:ea:7d:a0:ba:24:
84:05:24:76:c0:96:db:01:ec:be:7c:bb:ed:ca:69:
fb:3e:5a:f1:82:2d:95:3e:5c:7e:ad:7c:88:8c:ac:
df:dc:1a:64:43:9d:22:16:3c:0d:68:45:25:39:42:
aa:a1:13:42:50:f1:83:05:e8:dc:af:f4:67:a6:b0:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:FD:52:24:C8:89:1B:DE:CF:2A:06:B2:BB:3A:A7:31:82:E0:9E
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:73:db:8b:74:1d:f8:fe:83:85:ad:3b:19:d1:80:cb:2d:
23:ac:2b:5e:16:e2:4a:81:c3:f8:63:31:dc:e6:5e:5d:53:a1:
aa:f4:ab:d9:eb:84:c8:8c:e6:27:b0:18:8e:c9:0b:83:a3:8d:
15:e1:46:82:ad:b0:30:4e:2d:2e:ec:b4:bc:5a:e8:72:fc:2e:
e1:ed:ab:5b:e0:75:4b:1e:8b:49:f2:9a:63:ed:da:34:3c:bb:
7e:17:19:f8:95:43:fe:c6:90:ff:e9:84:a9:29:fd:24:03:3f:
41:cb:69:ee:88:31:68:fe:d8:32:87:50:a6:71:b0:fe:c8:65:
65:2c:ea:5b:d9:19:90:7b:95:a3:a4:88:55:19:51:32:1e:f3:
a9:b7:b5:78:ec:4d:6a:9b:25:0a:d5:67:ac:1d:24:7a:ed:57:
10:9e:33:91:bd:dd:8e:cb:45:9a:ec:ae:d8:a9:00:66:1c:8b:
73:74:c0:c5:e3:1c:ea:fb:65:0f:df:a5:c7:e8:ca:16:de:ad:
33:c2:ce:5b:55:bc:b0:c0:a0:52:46:91:7c:e7:6b:a0:e8:9a:
09:6f:21:e3:24:ca:88:7b:91:e4:9f:f4:32:52:d9:73:43:7b:
fb:f1:1d:66:b7:7e:4c:25:e9:f9:77:72:22:69:66:03:df:f3:
d9:76:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:14 2025 by rpki-client