
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: NFQ+VROCQ4fYoWCdk9p2DC3FiQiuxjvX+r7mAOXCeE8=
Subject key identifier: 5B:E9:70:0C:39:8C:6A:C8:CB:EE:CD:08:92:0B:A0:4D:29:98:06:98
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 01984852CDF97D1B5F5295BAE284B3A6A31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 20:00:42 +0000
Manifest this update: Sat 26 Jul 2025 20:00:42 +0000
Manifest next update: Sun 27 Jul 2025 20:00:42 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: qvubTKyLpS+pO4xuwu5s4HOIZk/lNOWxjtleyVxmQtI=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:cd:f9:7d:1b:5f:52:95:ba:e2:84:b3:a6:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jul 26 20:00:42 2025 GMT
Not After : Jul 27 20:00:42 2025 GMT
Subject: CN=5be9700c398c6ac8cbeecd08920ba04d29980698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:ea:48:e3:d6:36:2e:0b:59:a2:a3:61:96:
c1:92:5e:88:6d:bd:12:5d:41:62:6a:a4:ae:80:93:
45:fa:05:6e:58:f0:22:44:df:6d:3e:b8:cc:57:d0:
b8:a3:31:b6:db:78:b2:a9:8e:46:7f:4c:76:3d:d4:
3f:ba:65:11:c3:9f:a0:fe:b4:95:81:6e:53:94:7d:
99:35:d3:5d:48:68:10:3c:38:3a:ab:bd:73:85:d4:
4c:75:68:ff:fd:16:56:2e:1c:a2:89:22:0c:c3:4c:
6e:96:19:9d:b2:ff:ed:f5:3c:3e:7c:e2:fd:74:49:
75:b7:a6:15:fb:d8:1f:b2:7b:85:5e:92:99:f3:41:
60:bb:cb:01:0e:76:5f:ac:f2:3e:ba:2b:67:35:89:
54:97:1c:27:7a:61:25:a9:58:3a:d5:b3:ad:c3:82:
46:b3:34:78:a8:39:0d:6c:e4:f5:5a:ac:2d:e2:8e:
39:b6:98:5f:11:7f:9f:57:90:32:e0:3f:f6:d3:f6:
10:00:14:cc:5e:a2:e7:95:52:dc:d5:54:60:8d:a1:
4f:43:eb:00:e3:8a:c6:db:5b:40:d7:42:33:e9:09:
65:a3:ad:36:c4:4c:3e:2e:2b:51:2b:aa:94:7c:85:
f1:a3:c5:ee:9e:a4:94:bd:25:72:67:8c:59:ec:40:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:70:0C:39:8C:6A:C8:CB:EE:CD:08:92:0B:A0:4D:29:98:06:98
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:ad:d9:76:91:59:2a:7f:c5:f3:f2:a3:50:32:a9:b2:0f:
2f:4d:9b:29:4d:5b:d3:ac:8b:29:9b:c6:87:85:6d:85:eb:3e:
05:d7:fc:b3:8c:2e:e6:1f:10:9c:a6:52:9b:05:c9:06:57:a5:
7d:43:6b:ea:09:e4:7a:3b:20:60:11:b9:5c:50:ee:e4:07:2d:
1d:7d:7a:a7:f3:5c:12:7b:3b:d7:2b:ab:36:ee:27:ca:e6:23:
96:47:f0:cc:3f:d1:b8:0e:31:40:3d:84:93:e7:e5:86:d8:00:
a7:05:72:a2:95:0b:20:a5:90:e8:55:97:50:31:9e:40:b9:83:
86:3f:a2:6d:e3:bc:0a:d9:e9:3a:f4:1a:f6:2e:80:31:47:93:
dc:65:bc:4f:4f:54:73:e7:7f:5a:b0:fd:77:d0:04:ca:21:f6:
ec:78:49:fc:d4:26:e7:7c:9d:3c:f6:46:1f:75:53:ea:88:8d:
9d:67:40:61:5c:a4:c8:fb:e1:0e:4a:16:c9:73:90:92:87:a4:
13:ca:d3:c2:43:0f:85:32:9c:03:b6:ff:21:2d:28:19:67:39:
c7:38:71:05:19:72:35:80:0d:89:07:68:11:f0:5e:54:9f:83:
fe:6c:56:9d:a9:ac:43:d9:d5:75:b9:bb:ec:c8:d7:c8:78:21:
07:71:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:52:19 2025 by rpki-client