Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: QnnNM30+dELgbVwXkEI0bEEBwwUEORYi8cjwl0WXCOY=
Subject key identifier: 3C:60:27:5B:6E:B9:6F:18:6D:A8:1A:1F:70:30:52:39:9A:A8:30:5A
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 0198733D9A263AE3CE01EF2EA2E4E6180E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 14AC
Signing time: Mon 04 Aug 2025 04:01:13 +0000
Manifest this update: Mon 04 Aug 2025 04:01:13 +0000
Manifest next update: Tue 05 Aug 2025 04:01:13 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: zF9LgmJEr7eKhB21CRvx1LLAY7RqUqgzTmLHOyeFGOQ=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9a:26:3a:e3:ce:01:ef:2e:a2:e4:e6:18:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Aug 4 04:01:13 2025 GMT
Not After : Aug 5 04:01:13 2025 GMT
Subject: CN=3c60275b6eb96f186da81a1f703052399aa8305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:f0:2a:8f:c3:fd:cd:ec:47:46:9d:eb:0d:
8d:34:0c:fc:3e:94:f0:30:d0:e9:2e:18:fa:33:81:
74:7a:2f:e8:a0:ae:86:c9:86:98:a2:7d:f4:2e:8a:
72:34:bb:3a:11:93:f9:bd:63:85:71:15:7f:68:8a:
63:09:95:91:c4:75:04:22:18:cf:2a:ac:6e:8b:da:
44:f4:b8:74:66:04:bf:db:a2:db:60:90:36:20:5f:
11:d5:e2:23:e5:9e:2c:06:55:b4:1e:8f:c0:ec:d3:
d5:52:b2:41:f0:c8:57:b6:3f:e7:da:bc:7e:07:04:
09:ea:b0:ba:40:ba:f1:ee:6c:6e:a7:a3:c6:d1:f0:
b4:fe:5b:ce:1a:08:2b:28:f6:8f:32:d9:e8:5a:aa:
e3:64:22:b5:f9:54:0b:f1:6a:15:ab:52:73:c9:84:
49:3f:82:27:75:9b:15:9e:c5:09:96:06:92:32:5d:
1c:f2:ba:6d:13:49:47:6c:8b:a6:de:96:00:70:bc:
6d:b0:02:95:37:3b:62:ae:ed:a4:ad:d4:6a:1e:f7:
ab:39:92:c4:a3:a7:05:53:c9:ec:45:08:b0:0f:0a:
ad:b6:9d:71:4f:59:d8:88:5c:e4:a6:05:c5:4e:88:
da:cb:6b:ab:7d:c7:6d:6c:14:7c:ae:c8:db:6b:0e:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:27:5B:6E:B9:6F:18:6D:A8:1A:1F:70:30:52:39:9A:A8:30:5A
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1a:cb:ba:d7:42:a5:de:c0:89:cd:d7:10:63:ad:67:f6:38:
d2:ba:e6:f9:0b:30:8b:5b:01:61:86:4d:c4:5e:c4:75:8c:c6:
b7:32:1b:7e:9b:0c:68:e2:aa:7c:dd:6f:01:d5:bb:31:e4:14:
0b:b4:d4:06:cc:b5:f5:56:d5:aa:1c:b6:9e:d7:57:82:f0:f4:
6d:c3:b8:e6:74:ec:70:9d:40:0f:10:66:a5:a3:2f:cd:52:2d:
a7:be:e6:9a:36:62:a1:36:c7:14:63:f9:23:f2:01:ce:29:0d:
38:b7:30:b6:9d:6f:0d:fb:8f:38:39:f8:11:93:b7:56:7e:5f:
7c:94:04:97:dc:05:55:ff:da:2b:de:3d:04:9b:dc:69:18:ca:
f6:d4:5e:a0:f9:7a:b7:ba:2e:60:f9:b8:a4:fc:af:30:41:22:
17:3b:43:55:c4:e7:79:db:80:07:ac:36:7c:12:c9:58:43:4e:
7e:13:94:68:e0:e1:14:f5:5b:95:aa:ce:a8:81:a4:8a:5d:3a:
71:13:6c:cf:0f:80:96:24:58:2e:8d:bd:df:36:8b:85:ec:d6:
c1:52:d8:d0:e4:2e:cd:e9:35:d0:0b:59:57:f1:1d:18:a2:c0:
90:2d:9f:38:65:42:75:46:4f:c5:60:e4:76:14:89:7f:a1:dc:
57:30:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:30 2025 by rpki-client