Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: n8fiEdKM+DQKoPaEezzyftuvdLtegmr1/nBpn2NS2Co=
Subject key identifier: C8:88:BE:99:02:63:2C:EC:F4:78:10:73:8D:59:BB:69:D8:EF:93:33
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019A72261E00D577D34FAFC410256EDC8481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: ptS2NFlY9ma4+6By6Z1G1tZBZAiLzukGlpY7m6muj4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1e:00:d5:77:d3:4f:af:c4:10:25:6e:dc:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=c888be9902632cecf47810738d59bb69d8ef9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:c9:c7:6b:55:ee:45:d4:af:15:72:8b:24:
54:a6:2d:51:59:0a:8d:75:1a:8c:19:a1:6e:28:d0:
fb:e1:22:82:0c:c1:8c:2c:6b:e6:d2:24:8d:fa:72:
7d:e2:de:80:3d:69:fb:96:4c:97:54:40:18:0c:8b:
6e:52:e5:d5:f2:71:82:e4:ef:ad:79:0c:9e:95:ee:
6a:7e:4b:e6:37:0c:ae:4a:cc:a2:14:2a:db:3a:32:
a9:af:07:75:ff:33:0d:31:ca:0f:b0:6d:71:4e:a2:
a4:eb:e8:4f:73:83:2d:76:01:33:99:61:f9:dd:53:
0b:63:6f:04:b9:f1:32:c1:40:77:cf:8b:ef:a8:9a:
e8:43:b9:2c:61:13:13:78:b7:ee:22:a0:3b:28:db:
13:1a:8f:b0:09:1a:c2:e6:18:43:fe:96:96:09:05:
42:cb:06:c0:2f:65:30:18:91:16:24:e4:38:14:d0:
71:31:e1:a8:b2:ee:89:9e:cf:99:ca:3a:6e:02:dc:
86:48:08:c1:48:71:31:5f:a5:b2:ff:f6:3a:01:ca:
9b:2d:31:f5:ba:97:b3:af:20:8b:31:b4:75:93:a4:
91:47:d0:17:22:61:53:d0:72:9b:a9:ea:a4:a8:58:
1c:a7:3d:4c:a2:a0:9a:5a:fa:9c:21:2f:31:76:04:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:BE:99:02:63:2C:EC:F4:78:10:73:8D:59:BB:69:D8:EF:93:33
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:9e:00:24:db:55:70:b7:5d:31:19:f8:9d:c8:3d:0b:ca:
66:6e:0b:e4:7c:9c:bb:74:94:c7:31:bf:84:6c:2f:23:82:cd:
49:bf:1f:97:99:35:af:41:b3:90:cf:f2:8d:c5:d0:f5:31:6f:
dd:3d:2c:59:cf:f0:63:e3:22:39:46:91:bd:e4:39:ed:60:9e:
3e:f8:fa:07:a8:72:86:ec:d7:bd:e4:35:a9:a0:c8:10:29:95:
21:76:e6:63:b3:8f:2e:30:19:59:55:6e:d3:a4:4b:00:fb:10:
ff:d2:b9:40:d1:6d:d8:23:2e:89:94:94:84:06:a6:2a:b2:01:
9b:cf:18:68:4b:79:fc:6a:ec:f9:cb:64:64:b0:bb:b3:e4:82:
5f:4a:92:95:a2:d1:28:fb:0c:23:a4:f2:43:a3:b4:34:16:25:
50:fe:59:79:0e:19:4c:e3:65:9e:16:58:e5:f3:67:1f:1c:a1:
97:92:bd:02:71:45:1f:aa:e0:c4:75:da:b1:ef:22:7d:04:9c:
b0:1d:cd:06:aa:07:0c:a0:7e:48:7e:1d:07:01:8a:23:68:a2:
ed:03:99:ad:f1:59:ec:ef:b3:db:38:9d:b1:a3:6b:69:31:44:
ba:69:bb:15:6e:8a:dc:63:e0:d7:40:8a:15:c7:c6:48:b2:21:
cc:b1:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:03 2025 by rpki-client