Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: vP6tZ7Yi9Z24OJasT0n4Z0ctqR5Ih++W0h+zD4U0FS0=
Subject key identifier: 76:85:E4:3D:28:E7:9A:F7:56:64:21:16:63:0D:CA:0C:61:31:4A:6C
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 019897816076CC87141C79E4E765DFD7DC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 05:01:35 +0000
Manifest this update: Mon 11 Aug 2025 05:01:35 +0000
Manifest next update: Tue 12 Aug 2025 05:01:35 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: YbDPs5c+QUhwz9ziPwZn9R+hK90EWXDxE7HPjmp7904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:60:76:cc:87:14:1c:79:e4:e7:65:df:d7:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Aug 11 05:01:35 2025 GMT
Not After : Aug 12 05:01:35 2025 GMT
Subject: CN=7685e43d28e79af756642116630dca0c61314a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:09:cb:01:68:2c:69:dd:47:f1:95:e6:bf:
82:56:3d:ef:e7:e7:d4:43:69:58:41:0d:ed:4e:11:
9b:56:1a:9d:d6:c5:ba:63:3d:51:de:d4:45:a9:c6:
c9:e0:94:da:a6:3c:4f:57:9d:d2:91:19:14:23:1d:
be:02:4a:9f:c0:65:f9:65:5f:2a:2a:e7:45:b6:7f:
dd:f7:6d:4b:91:c1:31:be:20:38:34:fd:d7:f0:c3:
d0:3f:1d:31:cf:08:b2:9e:2b:c6:c1:73:95:b2:ad:
e8:b2:70:ec:e8:8b:4a:b5:60:e7:ef:ff:02:d2:8d:
3d:b4:a3:f7:66:8e:15:ad:ad:ab:83:f8:72:82:4b:
21:bd:12:3f:79:97:3a:5b:4c:43:39:dd:3a:d3:ec:
16:44:b3:46:fa:b3:a2:2d:8d:f6:b4:6c:b6:c4:80:
5a:82:a8:f4:e9:6d:c8:0c:31:2a:02:22:df:a4:37:
76:06:f8:46:7c:65:a9:aa:b4:d2:40:37:c0:66:43:
29:63:a4:7e:17:42:9a:28:0e:9b:77:68:a3:6a:fb:
1d:82:58:3d:c4:8a:76:6d:b6:77:08:55:a8:d4:06:
00:ac:d5:e6:29:b3:32:2c:93:00:c8:77:97:ce:34:
e8:45:4d:07:87:f1:55:f6:b0:fd:47:14:78:51:bf:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:E4:3D:28:E7:9A:F7:56:64:21:16:63:0D:CA:0C:61:31:4A:6C
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:1d:15:68:a9:84:af:e3:b0:a3:eb:e5:7f:56:80:1c:fb:
b7:19:24:de:b5:3c:0c:98:b0:3a:59:f9:de:d6:5c:46:b7:75:
dd:83:79:8d:82:ee:42:c7:f6:fa:24:14:e1:6d:89:b3:c1:ee:
43:4a:1a:70:5c:50:3f:ea:a1:d9:6e:cb:f2:b8:c8:e1:55:57:
82:25:fe:5c:07:4d:d0:21:25:1a:8f:c4:70:e7:e2:70:8e:0a:
57:bc:33:49:8d:4a:b4:4b:93:30:a4:e6:6f:fb:03:66:6a:33:
04:92:41:4d:d9:89:07:90:92:c9:68:55:8f:54:f3:74:1e:07:
77:6f:e6:41:0c:66:3f:68:b6:30:48:89:06:32:62:f0:34:f2:
e7:21:d3:b5:f3:9b:5b:fd:69:d7:d3:e9:18:2a:05:15:a5:ea:
7b:94:76:12:b8:11:f6:c7:53:5e:51:c7:40:9b:17:73:0c:8e:
7b:ea:81:ae:64:e4:d2:8b:1e:e7:7f:80:0d:fc:d9:9b:2b:60:
44:bd:ec:5a:4a:50:7d:41:be:20:ed:36:2f:68:2f:2e:7c:a4:
3d:6a:3b:3e:34:7b:61:89:d4:8d:bc:d1:0a:47:03:19:61:1d:
87:7a:c4:04:95:fd:9e:b3:48:ca:7e:86:0b:cf:88:2a:48:1f:
c0:44:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:08 2025 by rpki-client