Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: O9BJbJsinQvKKIelWcsJBswo84JkI85KRgWeWvsI2zE=
Subject key identifier: D1:32:D6:FE:54:B3:37:FE:8B:69:4B:B3:D0:B6:0E:82:2B:2A:68:6B
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019A522CA763C000BFF40C36BCF16EE62EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 15A4
Signing time: Wed 05 Nov 2025 04:00:49 +0000
Manifest this update: Wed 05 Nov 2025 04:00:49 +0000
Manifest next update: Thu 06 Nov 2025 04:00:49 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: RDJeke4qMw2T9buQizkXJxztq1Y43VxmO7RFRQ+MnPw=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a7:63:c0:00:bf:f4:0c:36:bc:f1:6e:e6:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Nov 5 04:00:49 2025 GMT
Not After : Nov 6 04:00:49 2025 GMT
Subject: CN=d132d6fe54b337fe8b694bb3d0b60e822b2a686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:68:bb:cb:7d:75:8b:cb:75:39:d7:a4:fc:
96:70:1c:e4:78:1f:a1:45:06:0b:fc:71:a0:9c:48:
39:24:f7:9e:6b:b8:35:0b:7a:30:12:4d:85:2b:a3:
62:dd:88:fd:9b:0c:0d:b2:85:54:45:78:b5:ec:c7:
cf:82:e3:30:bf:6b:87:ba:d7:95:d7:6e:d7:6d:85:
f2:1f:1b:34:9c:0d:4c:fc:8e:43:b1:2b:bb:55:65:
ff:4a:92:5d:3d:23:5c:5b:0a:12:20:b0:ee:2c:9b:
83:c1:6b:a7:32:0e:18:1e:6b:c6:84:36:d4:99:93:
b3:08:b9:47:97:97:3d:29:cb:de:c7:25:b2:13:e8:
f8:84:58:9a:61:c5:7e:f2:97:5c:92:16:95:a3:25:
8d:04:3a:d9:2a:24:29:33:8b:bf:e4:99:39:36:5c:
49:c5:7b:2b:63:d5:14:56:81:83:c3:1f:5e:a4:7d:
02:cf:c8:cf:8b:cc:41:89:a9:4a:43:a4:d6:2a:f6:
d9:58:65:e0:6e:df:7f:3a:cd:27:80:b9:7f:4e:be:
98:dc:5c:76:b0:ca:40:84:a7:26:0d:6b:10:0f:ed:
32:c7:31:58:e6:21:62:c7:2c:08:d1:2e:f5:6d:3b:
00:75:b9:a1:89:b4:ee:5b:d1:02:21:27:be:14:28:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:D6:FE:54:B3:37:FE:8B:69:4B:B3:D0:B6:0E:82:2B:2A:68:6B
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cb:b6:85:11:7e:2d:8f:06:20:68:83:8e:d7:6f:aa:68:43:
dd:70:40:bf:f8:94:2d:1d:1d:8d:19:d2:d9:d6:a7:53:67:47:
aa:f7:5a:86:cd:ad:c4:dc:6b:73:d9:8e:f4:25:67:20:6a:54:
43:da:02:fc:0b:da:cc:06:a3:4e:d6:ed:34:e2:e7:d7:11:5d:
6d:07:87:98:0c:b6:ad:bb:5d:28:95:4d:06:71:18:0b:8e:c0:
c0:b7:de:0c:28:d3:32:c8:01:b5:4c:b2:02:11:ec:c8:66:b8:
e7:67:fe:b8:34:f5:5d:f5:c0:84:ae:72:52:af:f8:96:0a:7c:
25:c1:68:05:b7:d9:56:37:45:a3:c7:58:2a:c8:9f:27:81:17:
62:ca:43:aa:b9:6e:82:f6:7c:f1:27:82:14:7a:b4:36:c9:61:
89:70:52:8e:be:3d:c1:c0:5a:e0:d4:d0:ed:3f:e5:88:05:22:
94:e3:08:f0:21:70:7c:c3:2f:3f:b5:28:52:85:1c:df:f6:a5:
af:e7:06:1e:1b:ec:db:d3:2d:fd:03:5c:ef:ad:fa:8f:24:00:
2b:98:35:d5:4f:64:5b:27:a7:28:95:7d:5b:05:1a:7e:db:c6:
c6:35:a0:41:f5:5d:97:9f:8a:44:87:44:d8:c9:4d:09:dd:00:
81:4c:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:22 2025 by rpki-client