Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: 1PE04Pebm5KE41/YU1UbDYeY5dMt4Ahym1/z6fm6VVU=
Subject key identifier: A8:6D:F2:8E:C9:84:72:D7:18:56:E7:8E:73:41:58:78:6C:79:DA:9D
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 019A4DAAEF574867BA11DBF51BFC7F6B4E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:39 +0000
Manifest this update: Tue 04 Nov 2025 07:00:39 +0000
Manifest next update: Wed 05 Nov 2025 07:00:39 +0000
Files and hashes: 1: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: dDKIAqDOZQBrVE1gz+9s+pGkXjosnmm63VV7KQV93o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ef:57:48:67:ba:11:db:f5:1b:fc:7f:6b:4e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Nov 4 07:00:39 2025 GMT
Not After : Nov 5 07:00:39 2025 GMT
Subject: CN=a86df28ec98472d71856e78e734158786c79da9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:cf:10:62:d2:e4:c4:4c:6a:31:25:03:a1:
33:0a:55:26:f4:e8:d6:95:1e:70:c5:34:15:e6:68:
ff:fb:d3:0d:b4:f4:d6:e2:4b:8d:ea:ef:ee:81:0d:
25:72:81:40:ff:2d:e2:3f:cf:d6:ef:7b:0e:af:d6:
e3:09:71:cb:8b:38:ea:5c:37:0d:d9:fa:83:03:fc:
ed:3c:54:18:f6:96:a5:6b:ee:30:63:13:22:cb:05:
06:6b:25:33:53:42:1d:ad:bc:0c:3a:93:37:aa:94:
a6:b2:ab:e5:76:61:76:22:5b:9e:fa:4e:4b:79:78:
39:d7:5e:d1:43:db:1e:f4:71:ff:9a:6e:dc:3e:53:
d3:fa:49:90:fb:5f:f8:b5:39:23:eb:e8:22:48:12:
eb:84:cb:9d:b5:7f:58:84:a3:c2:b7:4b:31:85:a6:
a4:45:e0:71:88:e5:b9:1e:ac:18:7b:e6:42:f9:c9:
8c:2d:07:2a:e0:22:a2:7d:50:ef:74:20:f0:06:d5:
66:19:00:9a:e3:2b:07:ff:dc:12:ab:ee:8a:70:2f:
72:19:2c:ce:cd:c2:7c:bf:21:46:89:25:f4:0f:64:
bd:79:39:fa:03:03:e1:db:4f:1e:3b:75:7b:30:ba:
b0:e0:a6:2e:fb:02:a6:5a:0d:ca:b1:d9:1f:ae:ae:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:F2:8E:C9:84:72:D7:18:56:E7:8E:73:41:58:78:6C:79:DA:9D
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:31:1f:ea:ab:a8:46:10:a8:90:f7:e9:10:06:29:46:d9:
6d:e6:9d:13:7f:e1:42:0e:7a:99:da:a2:07:04:57:59:50:4c:
d1:45:e1:e5:98:61:65:a2:ea:49:8a:44:b9:48:3a:f6:58:e1:
0d:53:a9:ff:26:cc:18:0b:22:6f:8f:ad:36:69:5f:3f:6c:c0:
a2:03:49:1a:71:e8:05:4a:d4:74:06:62:5e:36:77:7d:48:3c:
0b:8f:ea:99:04:b3:78:b6:a5:bf:16:7e:37:45:0c:d3:47:51:
e6:a4:a1:7c:11:51:88:be:0e:cc:31:53:f5:86:8c:f7:f6:13:
ee:6f:5f:fd:72:d9:54:61:55:a9:c2:8a:10:af:5c:f9:02:4c:
ae:50:86:b7:4f:f2:73:da:ce:af:73:6f:1c:9a:1a:ff:b8:80:
72:9d:18:f1:81:c0:b0:c0:6b:b1:7d:bc:d4:7f:dc:81:c5:d7:
b4:6e:a1:03:da:17:9f:ed:0a:5e:54:ec:7b:e3:13:e2:9f:1e:
25:17:73:05:1e:ea:7a:18:6f:3b:6f:77:fb:bc:c9:08:02:8c:
dc:55:a3:e4:dc:c1:36:d7:77:3d:df:93:ee:3c:4c:4f:97:f3:
6a:e3:15:86:18:01:f2:fd:6e:44:40:07:95:49:f9:f5:90:97:
2f:b7:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:38 2025 by rpki-client