Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: cK5k8hmDZKNaUZRQC7U6P3GJYWHG1hMrzhn6XVbiin4=
Subject key identifier: 94:9D:73:D9:6C:A0:5C:13:71:5C:FD:18:C9:3C:FC:C4:48:EE:88:7D
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 01984965B860739FE4885258BAA6582A0B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0BF0
Signing time: Sun 27 Jul 2025 01:00:59 +0000
Manifest this update: Sun 27 Jul 2025 01:00:59 +0000
Manifest next update: Mon 28 Jul 2025 01:00:59 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: VOALn5WLL8yExtLXyBSQuH0yXHfMKSfDqTrbzdbkaZc=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b8:60:73:9f:e4:88:52:58:ba:a6:58:2a:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Jul 27 01:00:59 2025 GMT
Not After : Jul 28 01:00:59 2025 GMT
Subject: CN=949d73d96ca05c13715cfd18c93cfcc448ee887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:58:f5:82:10:03:20:3d:05:b9:f5:d0:cf:
39:a3:6e:95:e4:55:d5:09:a0:e6:5e:82:21:56:dd:
10:65:58:e1:57:bf:a8:95:af:39:a0:5a:9e:d0:99:
d3:c0:72:63:e1:72:ee:ca:36:36:ef:6b:c1:98:9c:
41:99:7a:7b:b1:16:d1:2f:52:fa:fb:62:9c:36:f7:
e2:ad:36:90:ca:67:3a:cb:b0:d7:00:07:de:7c:18:
20:fe:83:ed:c2:32:1b:f9:db:46:1c:52:b4:c5:3c:
4e:65:58:5f:51:e9:35:c6:cd:b7:96:0f:56:4f:be:
53:a2:ac:ac:55:7c:7c:0e:38:a0:69:e3:bb:9f:a0:
0b:9c:3e:34:a3:90:81:16:56:11:c9:35:c0:ae:59:
67:8f:8b:1f:72:b3:d9:8b:6d:a1:6d:04:06:31:df:
af:7f:81:db:17:46:a3:1c:26:a3:64:8d:e8:8e:61:
d9:e7:4a:c0:76:ec:21:89:13:a6:1a:4e:13:2c:ae:
f6:29:8e:28:3d:a4:ff:19:7e:51:ce:1d:31:da:eb:
33:73:b5:09:38:0b:fe:1b:8e:ea:43:8e:2c:8d:f5:
e7:5e:7a:a8:b1:d7:bd:0a:b1:f2:9a:d4:ca:ed:27:
3d:11:1d:1d:47:96:7b:48:07:2d:a0:78:24:a4:a8:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:73:D9:6C:A0:5C:13:71:5C:FD:18:C9:3C:FC:C4:48:EE:88:7D
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:41:29:56:42:71:8e:b5:72:2b:c0:50:41:8b:08:d5:f1:dd:
ab:c8:3b:21:0f:ec:00:c5:5b:fc:51:48:ef:db:8f:2e:84:62:
e3:7f:e3:c8:d0:99:d8:a3:89:f8:4a:5d:5b:eb:5a:9a:01:ef:
16:e8:4d:2c:88:04:d8:42:70:6a:e2:a9:b6:b1:a2:16:7b:df:
98:91:38:67:0f:51:13:e6:f7:d2:9a:97:93:b6:76:bc:4c:e7:
c3:80:25:75:fa:7d:39:75:ec:95:31:97:b7:e9:d0:5f:8d:7a:
bf:31:2f:59:8a:b7:cc:ca:8e:69:10:68:e4:3f:e1:b7:00:83:
18:0b:ae:ca:72:ed:86:ef:c2:35:ae:e6:01:86:b4:73:ff:45:
87:b8:ac:1d:7f:f2:91:6f:60:0e:3d:82:0c:a1:65:f7:6f:09:
b9:90:71:65:13:80:64:f1:90:2e:18:48:0b:97:4f:fa:6f:43:
38:66:2d:06:70:15:06:d6:8d:b8:04:e9:20:ca:f5:ad:27:85:
65:46:7f:3d:05:98:1a:bc:08:e5:cb:e4:8e:34:7e:4a:68:eb:
32:6b:3f:02:ef:c7:cc:d6:02:06:b9:83:66:0d:0a:95:f4:12:
55:5a:5a:e8:18:2d:50:d2:c2:c9:ac:49:10:6f:13:ef:01:4a:
ee:75:62:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbhgc5/kiFJYuqZYKgtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Yjg4MGM1YTQ1YzNkNDAxYjkyZDViNDI2MDhlODU1NzUx
ODU5ZGUwHhcNMjUwNzI3MDEwMDU5WhcNMjUwNzI4MDEwMDU5WjAzMTEwLwYDVQQD
Eyg5NDlkNzNkOTZjYTA1YzEzNzE1Y2ZkMThjOTNjZmNjNDQ4ZWU4ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CVY9YIQAyA9Bbn10M85o26V5FXV
CaDmXoIhVt0QZVjhV7+ola85oFqe0JnTwHJj4XLuyjY272vBmJxBmXp7sRbRL1L6
+2KcNvfirTaQymc6y7DXAAfefBgg/oPtwjIb+dtGHFK0xTxOZVhfUek1xs23lg9W
T75ToqysVXx8DjigaeO7n6ALnD40o5CBFlYRyTXArllnj4sfcrPZi22hbQQGMd+v
f4HbF0ajHCajZI3ojmHZ50rAduwhiROmGk4TLK72KY4oPaT/GX5Rzh0x2uszc7UJ
OAv+G47qQ44sjfXnXnqosde9CrHymtTK7Sc9ER0dR5Z7SActoHgkpKiH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSdc9lsoFwTcVz9GMk8/MRI7oh9MB8GA1UdIwQY
MBaAFAW4gMWkXD1AG5LVtCYI6FV1GFneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUt
YzM2NTc5NGNlZmY3LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUtYzM2NTc5NGNlZmY3
LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEEpVkJx
jrVyK8BQQYsI1fHdq8g7IQ/sAMVb/FFI79uPLoRi43/jyNCZ2KOJ+EpdW+tamgHv
FuhNLIgE2EJwauKptrGiFnvfmJE4Zw9RE+b30pqXk7Z2vEznw4Aldfp9OXXslTGX
t+nQX416vzEvWYq3zMqOaRBo5D/htwCDGAuuynLthu/CNa7mAYa0c/9Fh7isHX/y
kW9gDj2CDKFl928JuZBxZROAZPGQLhhIC5dP+m9DOGYtBnAVBtaNuATpIMr1rSeF
ZUZ/PQWYGrwI5cvkjjR+SmjrMms/Au/HzNYCBrmDZg0KlfQSVVpa6BgtUNLCyaxJ
EG8T7wFK7nViOg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:36 2025 by rpki-client