Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: HxU/2mFUNhuSGdQ97pCiQUFQFE0UFnrJ52X2T8lmoKk=
Subject key identifier: CC:BE:17:08:2C:0A:EF:A4:C9:5C:A9:BD:FF:D2:D4:EC:31:EE:71:76
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019A722624286F759A9C1F8FDAB258E1EED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1730
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: UwOb06xrvo4lFhybT6sA2JAT+bSrhjsfD1pMzcsWE0o=)
2: g5O-sJkZnNA68mGJtGD2tO2hre0.roa (hash: w9zj7kKoXrvbGgUWDgKatfpf3enPGG2iU/OVqfPxOKA=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:28:6f:75:9a:9c:1f:8f:da:b2:58:e1:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=ccbe17082c0aefa4c95ca9bdffd2d4ec31ee7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:0c:07:f6:4a:05:63:95:73:ff:b3:d1:9b:
4f:b5:f6:53:58:e6:1d:c5:9e:71:2c:16:da:10:18:
8a:bd:ab:85:02:af:fc:65:e4:09:d2:2f:5e:71:64:
d4:50:46:8e:1b:5b:57:d5:8d:92:2e:d5:c7:8c:24:
27:65:ca:34:c6:82:e9:06:c2:b7:82:03:40:bc:c5:
91:43:6a:66:26:34:0f:8e:12:0e:c1:48:50:d3:61:
0e:8a:f8:2a:81:f0:4c:6d:ba:3a:30:e1:1d:6b:0a:
81:5e:19:da:51:94:4b:3f:96:4d:ab:ff:46:cd:f4:
13:f5:09:56:8a:82:98:6c:05:fd:88:73:c2:cd:66:
db:09:2d:0a:22:88:22:05:9d:fe:e4:7e:a6:24:6f:
3f:98:9b:ec:1c:7b:ad:68:7d:71:69:cc:b8:a7:14:
4a:30:5c:bf:b2:f8:75:e9:d9:c2:c0:11:61:82:72:
44:e7:56:43:84:f5:8a:43:8d:2b:35:13:e9:fc:6c:
cd:f3:26:5e:bf:fc:e2:3b:23:18:6b:15:0a:6e:3e:
4d:d6:35:d9:d3:2c:d5:6d:95:55:ea:3c:79:67:a1:
6d:81:15:e7:aa:3d:3b:a9:0f:cc:9e:4c:60:25:cb:
ae:1e:37:2d:e8:25:90:9d:11:6e:03:18:0b:fd:be:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BE:17:08:2C:0A:EF:A4:C9:5C:A9:BD:FF:D2:D4:EC:31:EE:71:76
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b4:55:5d:e3:89:d0:26:fa:b2:d6:92:c8:e7:37:b0:4c:b2:
ad:ad:55:38:f0:7e:f9:b9:ef:2e:b3:1a:b7:c5:8a:a6:48:e7:
e2:40:aa:8d:cb:71:8a:1c:17:80:99:cd:8d:9c:3a:b0:60:62:
58:a1:ff:9c:5c:f3:81:1f:f3:e7:23:da:b8:c4:1c:7c:e6:a0:
3d:d1:0f:cf:b2:eb:c2:f3:cb:17:09:6f:84:69:48:39:c7:e6:
e0:a0:b9:2a:43:d8:dc:b4:a2:bc:3f:2f:ef:ab:f1:65:00:e3:
4e:b8:71:2c:08:71:71:40:73:27:a7:2b:e0:81:8e:71:7f:61:
5a:a7:32:ef:1e:f5:96:6c:40:91:72:ff:39:56:e9:cd:3f:6b:
ff:2c:08:8d:f8:de:aa:c9:5e:d7:7c:4e:3b:47:60:77:67:38:
f5:1d:66:0d:15:0d:9f:90:6b:42:cb:0a:6c:a0:d0:e9:75:d1:
fc:26:6f:9a:4a:4b:8e:f7:8a:79:1d:11:47:e0:8c:5b:25:e8:
69:ad:52:37:31:56:4b:ef:11:0d:d8:c7:a0:2c:80:04:74:97:
3b:57:98:47:01:39:72:f9:2d:73:2d:21:46:d7:3b:bd:44:b7:
22:a6:9f:10:55:74:84:1a:75:d5:55:00:54:7e:66:f4:4f:d3:
e1:5b:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client