Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: zsoBxRmL/ByC0hJeqfx1YnC6wC+Kz2QyuhNF+dv3WZE=
Subject key identifier: AE:41:6B:4C:32:19:CA:13:8E:77:A9:A6:EC:E7:38:8C:8B:E0:73:E3
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019848C01F7CC9C81AF42C7BE03DA58A40E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 1496
Signing time: Sat 26 Jul 2025 22:00:07 +0000
Manifest this update: Sat 26 Jul 2025 22:00:07 +0000
Manifest next update: Sun 27 Jul 2025 22:00:07 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: zRfo3ZYyshSPhq3y0WC2+dTx22PH50zxuAKCz38b42s=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:1f:7c:c9:c8:1a:f4:2c:7b:e0:3d:a5:8a:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Jul 26 22:00:07 2025 GMT
Not After : Jul 27 22:00:07 2025 GMT
Subject: CN=ae416b4c3219ca138e77a9a6ece7388c8be073e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:ff:d1:33:d0:2b:a6:d2:87:75:b3:1c:83:
d3:cc:9a:64:d1:7e:6d:ad:71:06:69:15:43:af:ba:
e6:41:da:f5:9c:12:fb:31:49:c8:07:3b:c8:d7:dd:
d9:82:fe:45:bc:f6:1c:75:84:9f:14:ab:aa:b3:5f:
a2:01:82:5c:08:e9:b6:16:cd:ef:5a:68:c9:ba:17:
af:46:fe:6a:5a:7d:af:64:cc:97:df:d3:da:f9:60:
d4:1e:a4:63:86:7c:ff:ef:49:d6:a8:29:f2:6f:c2:
6d:e8:2a:0f:ec:a9:7f:3e:91:4a:3c:55:e3:e2:67:
f5:10:f7:89:41:51:c2:2e:20:32:a8:5f:4d:f8:b5:
aa:fd:68:9c:1e:e4:11:c5:78:70:bf:e2:2a:d6:2e:
02:b9:a1:5e:31:05:bf:21:90:ce:9d:e2:50:8f:0f:
90:21:aa:4e:36:7d:f8:ee:9f:09:ce:77:51:7c:c7:
ba:a3:43:fa:1f:3a:31:e6:02:46:9d:7d:6b:a7:08:
f2:30:44:b1:16:87:91:fc:3d:e0:fb:a1:f7:0e:a9:
46:8b:3b:d4:35:e0:a9:18:f9:0d:00:ad:ee:d1:08:
e1:30:fc:e4:21:ae:a2:15:4b:6b:60:92:1c:72:5b:
0e:54:ec:94:a6:ca:c0:e3:46:2b:22:d5:95:2d:3d:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:6B:4C:32:19:CA:13:8E:77:A9:A6:EC:E7:38:8C:8B:E0:73:E3
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ad:9e:00:1e:74:9e:55:a3:03:3f:bb:d4:dc:04:dd:6e:7d:
0e:5e:cf:3b:f8:1c:cd:23:16:3a:8f:a6:30:34:9a:ad:c1:a9:
be:0f:a4:e7:27:c2:f4:d9:c2:21:18:a7:46:e4:ed:9f:27:af:
03:2f:3c:0d:9b:6d:56:26:5a:3c:34:97:1f:3b:55:14:bb:8a:
7a:8a:83:0a:72:d7:12:d5:75:42:28:d2:b8:8b:06:5a:c0:37:
d5:9d:92:77:2e:c7:e1:b2:cc:2a:e4:43:06:67:8a:34:ff:7c:
c1:57:91:da:f0:68:00:61:3a:6a:02:7b:9b:6f:d6:dd:d6:13:
77:f1:6b:f9:73:52:73:c2:84:00:67:98:b9:54:f0:6d:a1:7a:
7f:77:e7:63:35:19:ff:cd:7c:1a:9f:eb:5e:cf:5d:93:55:0a:
23:c9:27:39:fb:c7:83:33:2e:21:b9:f1:5c:da:4a:a2:17:cb:
de:4c:e8:da:a5:8c:75:f7:dc:56:75:cf:1d:ac:22:50:da:8f:
34:37:72:6c:f5:58:ab:df:0f:0b:85:c0:09:1c:3b:93:12:c8:
99:34:9b:80:6b:ff:27:b9:56:36:6a:29:42:f1:19:76:44:a1:
33:e0:7c:e3:cd:63:e4:8c:78:aa:95:3c:3a:b4:29:51:75:1a:
70:f7:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:23:13 2025 by rpki-client