Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: wTv26aD411g6xG8ts3njIZLXMtCvE5PhcHHFdriCyvw=
Subject key identifier: 8A:CF:E8:AF:BD:7F:56:1C:19:E0:53:B3:69:88:E5:4B:76:B1:D7:2F
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019A4EF5E63E03FAD35C5E0B143E7A515A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0CFC
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: ap+AvZBAjm5aC7k/5++m7g3zURD84K+z/L7Nn7gf5BM=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e6:3e:03:fa:d3:5c:5e:0b:14:3e:7a:51:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=8acfe8afbd7f561c19e053b36988e54b76b1d72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:57:c7:23:b9:64:cc:e1:2a:66:e7:7f:17:
6b:8f:90:21:d1:48:36:cf:b7:23:92:87:bc:c2:32:
d6:c7:07:f7:7a:a2:fd:ae:a8:59:52:92:d0:8b:a3:
cd:42:f5:b6:86:56:5a:5a:2a:c7:12:44:44:b4:b5:
5f:f2:d2:e1:32:47:84:6b:80:d6:6f:0c:a0:b0:5d:
32:84:4a:89:67:68:4b:ff:57:ac:09:aa:4c:e1:d8:
fc:e8:aa:8e:f3:de:2c:16:6a:ac:b2:cd:4d:34:5e:
10:5f:cc:45:af:1a:55:f8:84:fb:a3:13:e7:29:ee:
c9:2f:64:75:b0:aa:48:84:ee:e9:1d:3b:84:74:d6:
bb:78:0c:10:91:82:11:40:31:02:74:0c:2f:49:c4:
27:99:b0:7e:ff:61:e1:27:c0:cd:b8:c8:6b:b2:de:
75:26:b3:3f:d7:fc:64:9e:e6:78:c9:43:55:a6:42:
bd:10:16:e8:cb:47:5f:d5:10:61:0c:66:22:00:3a:
50:4d:e5:e4:3a:b7:c9:69:96:b4:08:71:ca:86:ad:
44:0f:5c:06:17:db:1f:e8:ee:f4:51:1d:b1:71:70:
53:26:c2:5c:57:a7:77:02:5d:d8:ce:bd:bc:a0:60:
64:0d:09:70:ce:ba:a5:75:82:4b:83:cd:9a:fc:19:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:E8:AF:BD:7F:56:1C:19:E0:53:B3:69:88:E5:4B:76:B1:D7:2F
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ff:40:03:a2:e2:82:ce:c9:3a:da:a0:32:1e:8f:55:01:87:
d2:0f:9c:b6:d6:23:29:b5:d4:0b:2b:52:ed:3d:db:a4:e9:69:
21:05:2e:df:5b:23:d7:72:cb:9a:68:6d:6d:a7:63:df:95:54:
2c:b1:a6:f8:56:62:94:31:8a:a8:33:88:4a:50:3a:e9:ed:c5:
39:b8:dd:a3:40:ca:f8:c7:1e:dd:bc:6c:92:28:2e:a1:9e:ac:
38:74:ab:d9:d5:c4:0a:1c:71:41:6b:8c:e4:1a:ea:6f:e1:2b:
27:42:5e:d3:c9:c1:0d:6d:4b:1e:44:af:2c:b6:11:eb:91:2a:
14:ab:5e:b1:40:37:37:49:05:79:bb:b7:f5:e5:1c:4b:1c:b5:
08:5e:46:d5:f6:c1:5a:b3:24:a9:73:4b:c5:2d:2c:ab:95:7f:
ce:a6:47:4e:e4:e2:87:ba:dd:ca:b1:5c:e1:b0:29:c5:4b:d8:
77:ca:d1:81:6a:99:e1:43:7b:76:c1:18:68:fa:78:97:73:f4:
3c:8f:dd:e5:d8:81:00:ed:59:c5:61:58:26:dd:d0:2e:5b:45:
83:44:5d:66:b8:17:81:84:fa:7c:1e:ac:c0:86:ae:83:48:be:
56:c2:37:58:1d:2d:8d:af:82:7d:b4:5a:4d:2d:4f:ba:13:81:
78:0b:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:56 2025 by rpki-client