Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier: E7ky352wZp8NKJx+kzy5AQvdF+itVC3JHX000QykJVU=
Subject key identifier: 6B:B3:96:60:8F:26:C3:2B:A6:8B:A0:16:D2:CE:D9:8F:BD:3F:A0:C9
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 2C7DC9554D1AB799B49B12C7BA79B82BAFD5CC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number: 044A
Signing time: Tue 09 Sep 2025 00:49:08 +0000
Manifest this update: Tue 09 Sep 2025 00:44:08 +0000
Manifest next update: Wed 10 Sep 2025 01:06:08 +0000
Files and hashes: 1: 38342e33382e3235342e302f32342d3234203d3e20323134343332.roa (hash: TnW3zKmNDxY1s+JdH67yvpdfB6A0/qDHS7IbwvxOzo8=)
2: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: E3jf1DMm8yC4Kr724/kxjTzcibXQYTdLnUilkJ/3wtY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7d:c9:55:4d:1a:b7:99:b4:9b:12:c7:ba:79:b8:2b:af:d5:cc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Sep 9 00:44:08 2025 GMT
Not After : Sep 10 01:06:08 2025 GMT
Subject: CN=6BB396608F26C32BA68BA016D2CED98FBD3FA0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:24:1b:1e:5b:40:65:96:93:b9:3e:83:ae:
b3:b1:44:9b:5b:f1:be:88:0e:22:9b:e0:e9:47:08:
38:c3:14:4b:c9:13:fe:62:c1:0c:47:cf:37:57:e4:
12:a1:02:65:f1:7c:98:29:16:1e:e8:42:ce:0b:51:
2e:1d:9e:2f:68:ce:5c:49:e5:24:7e:e5:1f:04:5f:
31:d2:08:0a:21:03:95:13:fe:bc:59:28:f6:7b:a4:
e6:53:c6:83:c2:13:5f:37:4f:e9:f9:2a:d9:88:d4:
0a:49:25:57:ef:5c:0c:be:a3:c5:db:57:2a:34:36:
5b:f1:24:97:48:17:62:ec:7a:9d:f7:f5:8b:86:84:
74:3e:e5:18:a4:cd:8d:79:21:73:43:41:0e:b9:50:
e0:d6:12:69:c3:6a:bd:76:b2:d8:64:63:0d:61:83:
e0:c9:c0:9f:d8:6f:b4:18:6d:64:d8:fc:80:66:c2:
31:81:84:fe:a1:96:b9:a0:ab:38:f9:24:a5:33:bd:
35:03:31:fb:22:7e:da:60:d5:7e:fa:e1:2e:1f:58:
e5:59:30:2d:dd:d2:77:4f:a4:4e:56:55:63:2c:47:
da:94:19:06:bb:8f:a1:d6:61:7a:14:7b:ae:49:8e:
de:90:6b:18:4b:6c:e8:f2:23:44:5d:74:59:30:6b:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:96:60:8F:26:C3:2B:A6:8B:A0:16:D2:CE:D9:8F:BD:3F:A0:C9
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:ab:15:6a:e8:26:51:f4:f5:b8:11:e2:3a:59:e8:fb:90:
40:73:d4:57:72:67:aa:f6:4d:fa:a9:e9:3c:ff:7e:cb:c9:94:
24:37:b9:5e:71:53:f1:3f:24:67:a4:fa:25:ce:1e:f9:9f:38:
b5:2b:c5:80:3d:54:69:73:a6:30:7e:55:19:2b:e5:fd:f5:96:
5d:95:c0:ec:b6:c3:76:f7:72:b2:90:29:29:3a:c3:cd:ff:67:
53:cd:ca:ed:69:b0:71:fa:43:4f:f5:94:a3:71:61:db:a3:a5:
2d:f7:91:65:4a:f1:5f:11:9b:d3:cf:b2:3f:b2:4a:57:79:89:
15:4b:3e:53:03:eb:15:a6:89:cf:86:48:ea:d9:0d:99:a6:c9:
18:36:55:87:82:a1:ec:26:bb:94:fe:7a:33:6c:79:e2:33:d4:
27:00:dc:ef:cf:cb:18:c5:47:5a:5a:ee:e4:ea:91:87:0b:5f:
e9:fc:15:fb:44:2f:d9:ac:64:b7:35:f6:63:27:e3:49:9b:d2:
cc:5a:a2:c6:dc:c2:29:f6:0e:ff:35:7f:f1:a5:cb:0d:80:e9:
c3:47:1f:4a:be:df:56:4a:09:b9:28:f0:86:56:c5:b3:d7:5b:
a0:0d:6c:4c:35:4d:e2:5a:89:94:77:40:6e:64:04:e6:5c:ed:
d3:1f:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:12:47 2025 by rpki-client