Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File: Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier: bm0pYVgbJUkbJv5YsvQrsa13dVw7RsvsR+lmebKGyeA=
Subject key identifier: 72:16:31:78:FD:CF:8E:CA:F7:BA:14:52:63:62:A2:E1:3E:9F:EB:A5
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019A07B6F4E40CAA8E97850A7F817FC5CD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number: 133B
Signing time: Tue 21 Oct 2025 17:00:22 +0000
Manifest this update: Tue 21 Oct 2025 17:00:22 +0000
Manifest next update: Wed 22 Oct 2025 17:00:22 +0000
Files and hashes: 1: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: jN5CyaEdcdiKyF/aG2CAWDPmqyEX2XDggzjxEc+8+lU=)
2: MxjgQVEyLUBzSi2i-cH1sG1IdKo.roa (hash: 8LNKG3dpw7agrIcT1/uNRMjFLgdNdlZRqC/P4DL6cXY=)
3: XTKb5jjsemI8Q2Ca76y7N4lXQqI.roa (hash: tivOFI2qSptqUQXTYm844jiz5RuZRuPHvKP0hwKgSjk=)
4: blptCtJln9odT-Zd9-yg_1kpfAM.roa (hash: jTOEd7Yoo5SD4hM2M0pRKqn/WaRYdVO39YkKNQ4ET5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:b6:f4:e4:0c:aa:8e:97:85:0a:7f:81:7f:c5:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Oct 21 17:00:22 2025 GMT
Not After : Oct 22 17:00:22 2025 GMT
Subject: CN=72163178fdcf8ecaf7ba14526362a2e13e9feba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:38:58:93:a8:94:c8:c2:73:e6:f1:7c:0e:
a0:be:b4:06:9b:1e:84:06:21:bf:0e:73:e4:81:49:
d6:34:8f:a0:b3:91:b1:a8:0a:1c:a8:19:a4:1c:d6:
2a:7c:fe:16:08:bf:ec:e0:dd:1d:e1:56:3f:b6:1e:
1f:94:4c:a7:0d:c9:e0:f6:d6:7a:79:ad:90:98:c5:
c4:b4:a2:7d:8a:ba:88:ae:1c:d3:55:6b:21:5f:0e:
ef:4f:e4:c4:52:82:56:db:ee:b4:ec:4f:97:9d:14:
e9:b7:70:c2:77:73:81:25:fd:b4:4d:1a:c7:71:43:
4f:3c:c1:b0:72:82:2f:68:77:35:85:34:b4:2d:97:
03:35:23:d6:9f:30:00:0b:b7:a2:47:94:6a:89:e1:
af:33:e0:61:db:f1:d9:8b:a5:10:1d:3e:04:e8:d8:
fc:44:3a:18:68:d8:69:91:27:3a:54:ee:3f:b6:42:
e8:29:c3:08:a7:de:ff:97:8c:e5:5f:fb:03:9a:0d:
3e:17:a6:c5:a9:fa:d1:48:cc:96:ad:76:5b:ec:af:
35:15:8f:70:5a:15:22:a6:a5:e4:1e:e9:d6:00:61:
33:f3:29:e5:34:28:cc:0e:b5:be:4c:c8:a7:51:2f:
ed:1d:7b:cc:1f:e6:bd:da:c1:49:f5:17:63:63:c9:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:31:78:FD:CF:8E:CA:F7:BA:14:52:63:62:A2:E1:3E:9F:EB:A5
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:80:e1:92:23:f0:37:58:e1:c0:31:39:2a:52:fc:8d:b5:71:
75:52:e9:9c:1b:b3:3e:72:0c:a1:8c:e0:c6:ac:5f:bb:00:89:
32:83:58:19:76:c4:23:73:65:82:07:9d:e8:e0:ec:a0:56:13:
08:25:ee:fa:58:32:df:fb:e1:d5:cf:67:4d:05:b8:aa:29:56:
f6:2f:92:48:c1:ad:20:bd:b3:1d:bc:13:20:7e:bd:c1:15:b3:
68:72:0e:00:70:c6:21:88:05:f3:91:f3:48:8c:5f:b3:ae:77:
d7:18:75:66:9c:48:cb:04:02:5f:92:76:9e:79:d0:f5:b5:0d:
ce:24:f5:bf:fa:cf:4f:ca:fb:84:c1:c9:9c:c9:a6:9d:21:bd:
e2:74:08:04:21:f6:13:4c:f7:04:b6:0a:56:39:bd:7b:5b:e4:
43:4b:70:45:7d:17:84:11:14:4e:83:79:15:99:d6:97:0a:14:
04:2f:77:d1:0c:7a:c9:f3:7c:f6:62:07:08:eb:d9:aa:f2:bf:
85:fb:28:e9:3e:f9:ee:9b:4f:87:83:e2:83:8c:84:63:d6:7e:
7f:fe:99:54:c5:ad:e1:e4:c0:fa:24:36:be:ad:9a:b3:b2:7e:
4f:28:8b:b0:df:c6:8b:cb:40:e5:52:65:ee:19:24:9e:21:9c:
d8:da:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:25:33 2025 by rpki-client