Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: x5o0UimauRfRazdLElcX7XZZM29Il/yjtGYiulBRnxQ=
Subject key identifier: BF:42:00:74:08:84:2F:7C:B0:B2:27:19:F2:F5:4F:C6:A1:1D:EB:4F
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 0199221ED8FB23C443099E15267AC994B865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: qehyRU/Lawf+WQXQQ8xb/w4Nk/L1KrskTKuAPmbahVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d8:fb:23:c4:43:09:9e:15:26:7a:c9:94:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=bf42007408842f7cb0b22719f2f54fc6a11deb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:94:a2:97:e4:e1:b8:cc:9b:95:e7:db:db:
df:84:b8:28:95:af:f0:ac:ad:5e:0d:0f:35:52:b1:
62:37:c7:09:cf:7d:a4:9e:3f:da:fb:fa:65:62:cb:
54:2d:33:44:87:d1:82:68:13:f3:f2:2f:64:5b:52:
e0:7f:b2:08:e3:c3:37:bf:d5:fd:68:dc:85:af:5a:
97:61:4d:79:bc:88:44:04:8d:eb:96:71:67:78:c8:
2f:b9:2c:89:b8:1a:dc:11:05:c5:4a:e3:77:e6:26:
6b:c4:83:1c:a1:35:eb:ee:06:56:cc:b8:ac:f7:fb:
9e:21:3b:80:6b:33:2d:64:5c:da:cf:6d:6e:9b:01:
55:76:f5:e5:89:e7:4b:cc:cf:21:d4:38:3e:51:6b:
5e:08:f0:01:2f:f9:5b:46:3a:53:14:71:04:73:ef:
d8:d3:1a:c8:14:47:55:20:d1:7e:74:b4:3b:4a:82:
ac:ac:74:e9:83:05:8f:16:15:69:da:3e:91:89:2d:
f0:2e:c8:fe:2a:ff:e7:0d:af:4e:4e:98:b2:14:64:
21:bd:10:a8:6a:84:85:91:1b:7c:79:a5:02:c1:3a:
43:dc:83:f3:9e:e0:c1:15:fe:59:6e:7e:03:9c:3b:
8f:d9:88:ca:90:54:d6:5d:66:c0:71:b8:b2:e5:7a:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:00:74:08:84:2F:7C:B0:B2:27:19:F2:F5:4F:C6:A1:1D:EB:4F
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:42:13:3e:10:61:ab:b5:b5:2a:2c:1e:f8:a0:94:4b:cb:
33:e4:64:32:c0:f5:00:f4:77:da:19:20:d2:a2:b9:79:db:5b:
2b:19:20:90:10:8a:90:ed:d3:30:06:c0:c6:a0:1a:f9:c9:72:
f6:3b:ea:dd:24:ce:06:8e:2b:1f:e5:ef:73:bf:f7:7e:bf:33:
4f:a0:46:a1:d7:df:7f:db:d1:79:65:c6:23:e3:22:dd:f9:65:
36:ba:b8:62:01:f1:4b:4d:ba:59:34:11:c8:ca:75:18:75:ce:
93:d7:1e:da:f3:d1:41:19:c8:d6:ae:08:2e:82:f0:d6:a3:41:
c6:41:00:a1:41:0e:08:1c:d9:3e:f2:e8:27:ee:18:2c:81:1e:
e9:e3:d5:ec:a1:0c:f5:63:d4:df:ab:3f:96:b3:cb:d9:71:5d:
c5:f2:56:3e:96:0c:1d:1a:23:e1:01:5d:3e:38:84:42:21:9f:
38:3f:ce:72:c9:17:76:d5:c2:52:69:87:f5:a4:44:34:1e:ce:
7f:5a:aa:29:15:cf:be:0e:6c:d8:77:0c:18:b0:a5:da:ef:64:
52:a8:b5:4b:73:e7:4c:ca:94:f8:bc:79:e6:5a:9f:67:00:f5:
a3:72:7a:75:65:82:c0:56:0a:02:19:dc:7c:82:7b:b0:37:89:
15:11:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:07 2025 by rpki-client