Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: Q9baLvzCq1/9NWRg1B/0Evf/eB7+IP8IDrbQ1+ykLeo=
Subject key identifier: 8E:0A:B9:33:7E:18:08:0B:DB:29:48:22:14:E6:60:6C:81:A8:8F:F4
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019A71B7D5A40AC305644A0194E12402B59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0D0E
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: UCV7UpRV631yoNCA0CHmb6oEAorXawc0IFLxvoM81Io=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d5:a4:0a:c3:05:64:4a:01:94:e1:24:02:b5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=8e0ab9337e18080bdb29482214e6606c81a88ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:c2:52:c7:d4:10:e8:50:b9:e6:76:7a:4b:
8e:cc:96:35:4a:12:9e:e9:f5:20:ad:d9:3c:ef:88:
5d:31:c7:3a:37:af:58:0e:bf:e4:47:e9:29:4c:04:
fa:53:38:cb:ed:ad:46:9f:5e:dd:ad:06:95:2b:14:
f2:3a:91:ab:20:59:ca:f4:ba:b7:b6:92:1d:23:b2:
dc:83:3b:e0:3f:f3:1a:43:ff:66:be:96:f5:4e:db:
d1:8d:27:46:b9:86:ed:33:89:dc:7d:f5:95:e4:83:
bf:5e:13:75:46:d6:c3:77:f6:85:d4:43:89:85:92:
5c:c1:52:8a:02:db:08:eb:5c:50:f0:f4:0f:55:ba:
94:ad:e9:e8:53:d7:b5:75:8f:cc:46:20:86:e4:91:
9a:64:66:6b:31:58:f0:e8:bb:f4:ed:16:33:2d:fe:
0a:36:cc:d2:b1:bc:07:4e:1e:fc:23:f9:8c:9a:42:
72:bf:40:f9:4f:9c:70:5c:71:78:13:a1:65:15:fd:
70:b4:34:19:b7:9f:16:06:6f:ec:48:4b:10:3b:77:
67:3f:f4:65:ed:bd:56:52:49:c3:65:dd:19:21:50:
f8:a7:46:18:16:4e:2e:48:d0:b9:5e:7f:d5:22:e6:
02:d3:57:54:ce:c4:a8:b0:84:4f:f7:16:18:b4:71:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:B9:33:7E:18:08:0B:DB:29:48:22:14:E6:60:6C:81:A8:8F:F4
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:62:30:21:da:86:20:96:e7:a0:6e:3d:57:8e:10:e6:be:59:
5f:4d:e5:7d:de:b5:08:9a:4c:5d:71:6f:79:a9:8b:34:c1:5a:
5f:cc:d9:ad:71:25:b4:ad:a5:82:4e:18:10:32:fc:e3:46:7f:
88:c3:40:c0:cc:aa:f6:22:32:53:88:ee:2b:18:e7:13:fb:13:
3f:78:84:e4:6e:cd:96:6f:f3:14:8f:b3:4c:bf:df:4e:d1:0d:
7d:96:ca:b8:9f:36:32:1d:7f:c4:e6:a0:9b:e8:16:ba:9f:e2:
ed:55:4f:e9:62:e8:05:1e:70:bc:3e:32:88:c3:a1:30:8a:78:
b9:a2:c3:a2:df:64:75:2c:d8:35:32:35:1d:be:a6:24:f5:67:
f0:dd:04:ea:87:21:0a:4f:f2:cc:e9:5e:d8:73:e4:13:90:c4:
f3:3b:3b:cf:4e:a1:a4:ed:89:32:f5:59:c1:68:3a:74:cd:65:
c6:50:f9:18:6d:40:d7:ca:7c:2b:9f:a8:ea:4f:ac:11:66:eb:
bf:11:10:b7:5d:de:10:c6:a2:b7:39:7b:aa:3d:bc:65:35:7f:
94:19:41:15:7d:79:24:d2:64:db:59:c7:89:c5:16:7e:60:77:
cb:61:31:17:4b:3f:0f:7b:62:21:38:91:b6:6c:d5:4c:9d:c1:
13:62:8e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9WkCsMFZEoBlOEkArWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Yjg4MGM1YTQ1YzNkNDAxYjkyZDViNDI2MDhlODU1NzUx
ODU5ZGUwHhcNMjUxMTExMDcwMTA0WhcNMjUxMTEyMDcwMTA0WjAzMTEwLwYDVQQD
Eyg4ZTBhYjkzMzdlMTgwODBiZGIyOTQ4MjIxNGU2NjA2YzgxYTg4ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6nCUsfUEOhQueZ2ekuOzJY1ShKe
6fUgrdk874hdMcc6N69YDr/kR+kpTAT6UzjL7a1Gn17drQaVKxTyOpGrIFnK9Lq3
tpIdI7LcgzvgP/MaQ/9mvpb1TtvRjSdGuYbtM4ncffWV5IO/XhN1RtbDd/aF1EOJ
hZJcwVKKAtsI61xQ8PQPVbqUrenoU9e1dY/MRiCG5JGaZGZrMVjw6Lv07RYzLf4K
NszSsbwHTh78I/mMmkJyv0D5T5xwXHF4E6FlFf1wtDQZt58WBm/sSEsQO3dnP/Rl
7b1WUknDZd0ZIVD4p0YYFk4uSNC5Xn/VIuYC01dUzsSosIRP9xYYtHEc2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4KuTN+GAgL2ylIIhTmYGyBqI/0MB8GA1UdIwQY
MBaAFAW4gMWkXD1AG5LVtCYI6FV1GFneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUt
YzM2NTc5NGNlZmY3LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUtYzM2NTc5NGNlZmY3
LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWIwIdqG
IJbnoG49V44Q5r5ZX03lfd61CJpMXXFveamLNMFaX8zZrXEltK2lgk4YEDL840Z/
iMNAwMyq9iIyU4juKxjnE/sTP3iE5G7Nlm/zFI+zTL/fTtENfZbKuJ82Mh1/xOag
m+gWup/i7VVP6WLoBR5wvD4yiMOhMIp4uaLDot9kdSzYNTI1Hb6mJPVn8N0E6och
Ck/yzOle2HPkE5DE8zs7z06hpO2JMvVZwWg6dM1lxlD5GG1A18p8K5+o6k+sEWbr
vxEQt13eEMaitzl7qj28ZTV/lBlBFX15JNJk21nHicUWfmB3y2ExF0s/D3tiITiR
tmzVTJ3BE2KORg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:31 2025 by rpki-client