Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: r5yXwuUWHZdGChKkRCMUKAPU21JLW8n4MuYLwvJDqRI=
Subject key identifier: 1C:4E:BD:E6:C3:49:36:65:29:A2:82:32:C9:A5:B7:C3:41:DA:CB:20
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019A7112AF1BE224E8C03930F866948E2641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 15B4
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: ef7uXlG4f2e00rA/Mcx4WaZ3QQu9EnqLwkOTxXl/Aek=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:af:1b:e2:24:e8:c0:39:30:f8:66:94:8e:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=1c4ebde6c349366529a28232c9a5b7c341dacb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:5a:04:3a:7e:da:06:9f:89:02:2d:ac:3f:
e5:a5:1b:06:28:c6:ef:b5:d3:8f:e8:e3:25:a6:b9:
26:05:10:1d:22:f8:1b:d7:d4:13:20:04:8e:e9:3b:
95:b8:67:ff:d8:f2:a7:e9:7f:7d:06:a9:b3:06:36:
91:c9:f0:20:19:d0:5e:5b:33:29:bd:4d:cd:34:e6:
37:d3:12:58:bc:79:d2:21:e7:a1:a6:b5:e6:2d:79:
81:97:58:9f:5f:d6:3f:dc:65:70:6b:91:1a:8a:1f:
3c:44:d0:f2:c4:1b:7e:dd:b1:f6:83:b0:c9:c9:b2:
19:4c:91:c9:40:81:dd:4b:a4:e2:44:55:1e:ab:5e:
8a:3d:d0:cf:28:b2:3f:59:98:b4:dc:a0:4b:dc:91:
ed:e2:02:75:a8:a6:01:1c:84:57:36:d9:33:a8:31:
18:73:cf:87:ba:d7:81:29:7c:ed:08:12:88:09:46:
f0:b7:0a:58:f5:39:2a:00:5e:0f:c1:92:57:aa:ec:
85:65:b2:02:46:86:f9:85:c7:35:d6:fd:d5:1e:e5:
d3:9d:d2:af:d5:e7:e2:dc:d9:c1:2e:37:b6:08:11:
f7:fc:89:18:13:51:8c:ca:85:e3:a9:9b:7e:25:5b:
e8:76:4e:ac:42:d9:03:14:d0:8c:7b:2a:aa:d6:b8:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:BD:E6:C3:49:36:65:29:A2:82:32:C9:A5:B7:C3:41:DA:CB:20
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:31:90:c0:6d:f3:f1:22:8d:da:f8:77:b8:f3:39:e6:03:
c4:ef:fd:14:57:a0:53:79:42:e2:c7:6f:93:31:e4:82:00:90:
ac:88:0d:fd:e7:9c:24:91:19:28:49:6e:b5:0c:db:fb:67:55:
a2:6b:b8:ae:12:44:01:c9:5e:96:8f:15:56:b0:74:dc:cb:e5:
fb:78:fe:5d:1a:b1:c8:87:a1:b4:11:cf:d0:1c:aa:67:5a:0d:
eb:f2:96:d5:42:d7:d5:14:74:63:4b:fa:a8:7c:f5:76:c8:3e:
ee:48:ef:d6:18:0d:47:8d:f6:db:3e:b1:ec:45:ef:f2:79:02:
7a:b6:ed:3e:53:9c:e2:a8:c3:ba:18:97:20:b8:88:47:b1:b9:
be:24:f4:8f:7b:ac:9f:7c:06:50:a9:4d:ff:22:75:11:72:5f:
0f:60:b8:ff:33:cf:ea:08:a4:c6:09:f4:c5:3a:e2:d9:fa:08:
58:46:13:c3:53:b7:c0:7c:74:bf:66:e3:9c:7a:8b:9c:3e:c4:
5f:e2:49:aa:c5:0e:8e:8e:ad:76:79:64:d3:24:c9:8a:6a:85:
69:00:78:c0:64:41:97:af:4b:cc:be:c4:e3:b0:41:d2:34:44:
63:2c:90:8c:50:54:43:8b:80:30:65:4f:f2:79:34:99:b4:40:
d0:1f:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:52 2025 by rpki-client