Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: AXgRQNRKPJnh8rX5YyquQTBBaMF5tPgVjHXaqFnL5Lg=
Subject key identifier: A2:AD:48:0F:CC:06:7B:31:1B:A2:C0:E3:E2:A3:45:0E:C5:4A:9C:70
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 0199228CC1EA1509D9120C1D96B2B9657681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: 9OAukqJ/5Pst38D++2MsPi3X21r0MqA9dohSTT3Tgoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c1:ea:15:09:d9:12:0c:1d:96:b2:b9:65:76:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=a2ad480fcc067b311ba2c0e3e2a3450ec54a9c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:cc:36:bc:5e:e6:17:25:33:c1:df:54:e3:
9c:c5:41:f5:ea:3e:53:1a:91:37:bc:bd:a4:86:a5:
cc:d6:55:e6:06:d3:51:52:3b:17:ec:28:d8:c4:58:
48:52:a4:2d:15:3f:cf:2b:f0:42:34:b9:7b:6f:27:
20:37:61:0f:ad:94:31:85:e8:03:39:2c:24:72:77:
bb:2f:cb:6a:9c:54:ad:2a:56:4f:f1:bd:9e:09:b9:
ca:43:13:bb:9a:d7:7b:6a:8a:68:d8:e1:82:44:bc:
b9:b7:97:2f:5d:d2:0b:bf:64:a5:01:15:90:aa:5c:
1a:04:83:8d:28:21:bf:80:12:f7:51:21:3d:57:88:
c7:1f:28:2b:09:c5:fc:f9:64:07:d9:30:f2:89:91:
2e:b0:ab:7c:0f:4f:bd:68:1a:d3:b6:5f:50:78:ac:
b2:9f:a5:06:95:da:49:ba:15:29:40:15:21:06:d9:
72:c1:34:0e:8f:61:bb:a2:94:ee:76:6a:40:74:3b:
d7:33:1f:10:33:e8:71:d9:ba:4f:25:6a:3c:48:96:
f1:f3:e2:28:2b:ad:bd:df:03:b3:13:36:09:75:26:
ab:f4:5d:d5:f3:bc:bd:85:6e:f6:f3:80:a0:82:61:
38:60:45:ba:f7:5e:3f:18:bb:85:f0:db:ae:d6:e5:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:48:0F:CC:06:7B:31:1B:A2:C0:E3:E2:A3:45:0E:C5:4A:9C:70
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:e3:6a:77:c3:28:69:70:fe:8a:db:49:b4:19:38:6b:66:
01:42:fb:2e:cf:28:6f:e9:99:a4:e6:97:02:ea:3f:14:94:7f:
1f:bc:ad:fc:43:21:9d:3a:c8:df:6d:84:2f:03:e3:a6:57:b8:
58:5f:cf:82:01:f9:58:03:b6:a3:5c:9e:4e:53:1b:a0:ae:d2:
29:6d:b6:dd:f6:55:00:f1:9b:b2:7d:0b:86:43:df:28:37:60:
d3:98:5a:b1:24:7e:c8:67:0c:01:87:e5:60:4c:3d:ce:4e:80:
87:28:eb:6c:63:83:28:7b:7c:b3:fb:03:02:cf:cb:6f:51:36:
11:e2:7e:2c:5c:24:88:b0:e7:e3:54:3a:74:23:12:24:84:28:
7a:55:c2:b9:39:29:55:51:4f:16:be:64:5e:43:91:03:5a:e9:
0d:8e:8f:2d:84:cd:54:34:bf:8b:7e:7f:31:e0:a2:85:ff:3a:
58:a3:9e:21:a0:b3:52:79:13:c4:63:5f:e5:5c:e4:14:6e:3d:
45:f6:65:dc:78:ac:a7:80:15:ba:cf:c1:3f:3d:dd:4f:8e:45:
a3:ec:23:90:db:15:78:db:3e:78:fa:47:85:79:96:9f:ac:6c:
3e:6c:6e:c5:cf:c6:5f:36:c2:c5:88:57:da:76:bc:40:e1:a0:
12:14:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:21 2025 by rpki-client