Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: +LjYpQjWIB51FNtVrdCUGEjD7Ojpjk3NnxRh+VeTwMI=
Subject key identifier: D5:A1:C7:43:92:40:B3:71:F1:E1:E3:73:31:49:98:54:10:2C:80:94
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01984E54BCB2195BFC463CD74B114D9C00B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 00:00:32 +0000
Manifest this update: Mon 28 Jul 2025 00:00:32 +0000
Manifest next update: Tue 29 Jul 2025 00:00:32 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: SZTvl+D32KuiHSHmyK4UCfCkwEr9JmdBnsal/SczL34=)
2: nkQ4J-al4-TNNhx5kwAxDyydYxY.roa (hash: Nn7gIavrac29qJqe8wBIjZprs44Pop6hbalpdBelYLI=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:bc:b2:19:5b:fc:46:3c:d7:4b:11:4d:9c:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Jul 28 00:00:32 2025 GMT
Not After : Jul 29 00:00:32 2025 GMT
Subject: CN=d5a1c7439240b371f1e1e37331499854102c8094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:57:f1:ec:cd:6b:f3:7a:49:27:08:43:23:
1f:fb:8c:2d:bb:a2:ff:7c:28:c4:f0:ab:f0:33:ca:
9a:a7:90:92:34:86:e4:04:a0:59:a2:c8:9c:72:8b:
a2:aa:19:82:54:10:d9:a7:81:26:47:73:52:46:9b:
04:75:af:7f:36:03:93:a3:cf:71:15:b9:5c:42:a0:
d2:42:63:8b:ff:05:f0:e4:2d:f0:ff:1d:6b:04:53:
2b:b9:94:7a:44:3c:8c:82:0e:ae:f1:0c:bb:b9:9d:
e8:da:c4:c8:8b:01:a0:c2:85:b0:e3:14:0d:10:f4:
29:66:42:d7:90:1c:a7:cd:16:9e:b1:2f:02:b1:08:
45:27:f6:3e:dc:33:db:28:39:0d:1a:38:fa:b8:ab:
f3:4e:0e:7e:0b:48:49:3e:dd:94:a6:f9:ce:04:90:
0c:99:89:8e:87:72:88:43:2f:0e:0e:bf:86:43:81:
9a:1f:a0:28:9f:39:db:33:3a:aa:71:76:55:56:3c:
6e:29:a4:e9:1f:18:9e:92:ab:4a:39:a1:b5:4a:bb:
3a:23:d6:51:13:4f:d1:3e:9d:ab:7b:dd:45:e2:05:
7e:63:5d:59:fb:cf:ab:2d:89:58:ca:a7:b8:4a:ff:
92:56:2d:95:19:29:e2:e5:a4:6b:61:4c:a9:57:b8:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:C7:43:92:40:B3:71:F1:E1:E3:73:31:49:98:54:10:2C:80:94
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:17:8a:79:f6:65:ec:49:a7:b7:12:9a:66:3d:87:0d:7f:
60:41:e4:25:ac:df:c0:98:60:a8:15:bd:ab:b7:6d:10:2c:0e:
e6:2b:3a:4f:67:af:08:de:08:d7:56:91:08:3d:e0:61:37:6b:
77:ed:8a:6e:f2:21:1b:6b:09:42:cf:dc:2a:4d:93:f0:d7:69:
73:16:24:4e:51:b7:1d:2d:95:cd:58:5e:84:12:18:dd:ef:75:
e2:a6:75:b0:03:29:b7:38:71:1f:7b:6c:be:2a:7c:58:f8:12:
5c:98:75:14:85:f7:15:b2:3d:a5:2c:6b:62:96:b1:ef:0d:8f:
d2:de:38:8e:ca:14:ca:4b:da:22:84:6b:1c:e8:41:a7:a7:be:
03:0a:d0:60:2c:f0:cc:98:9a:0f:ca:3c:b4:0a:b9:2c:fe:56:
8a:a7:f6:53:33:83:1c:b5:60:2a:71:20:ac:6c:9b:3c:33:75:
04:ed:5b:58:ab:2c:09:50:50:68:8c:9e:39:29:ec:11:e3:a7:
b4:a6:89:e7:40:2d:83:0b:4c:f9:03:c3:68:24:8e:d3:9b:92:
e3:e8:81:1f:44:21:2f:ff:c8:79:c1:de:df:cf:21:37:44:9b:
c5:e8:ab:53:c4:36:3e:22:46:1c:57:e0:2b:30:83:b9:7d:a2:
fc:a8:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:02:39 2025 by rpki-client