Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: NndRRJNtI+TN2oe45qZVllJjBoUON4xNZkGy3mPMdmI=
Subject key identifier: F5:23:7A:3E:EC:99:82:F9:90:BA:E7:CB:56:BE:AA:BF:05:8C:30:7C
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 0199FC583BD0615B9095CF7CD930AA5CD199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: mraRI/bQlItMZ/DEDr9tjjWydmrZl6CX7zqp0bq+So8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3b:d0:61:5b:90:95:cf:7c:d9:30:aa:5c:d1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=f5237a3eec9982f990bae7cb56beaabf058c307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:30:74:75:76:e5:5f:62:56:e3:ec:42:49:
9e:96:9b:ae:4b:70:fc:2c:93:b0:2a:5b:b1:c8:1c:
f8:4c:30:c5:2e:8b:65:18:40:12:be:7f:33:c3:6b:
a1:fb:ba:cc:ec:38:d9:a2:28:f0:d6:24:48:5c:89:
56:2e:6f:fe:dc:a0:d8:f1:b2:93:b5:8a:8f:a9:11:
31:01:a1:64:40:05:34:7c:9e:28:d5:99:b9:d8:96:
fa:19:90:5d:01:e9:75:bb:d3:06:07:f5:da:2a:6e:
02:83:00:57:6a:3a:1f:92:b1:30:1a:84:3f:99:33:
45:67:e8:dd:a1:46:73:1b:86:58:a3:1f:1f:ff:84:
12:4f:c1:77:76:6b:f8:91:77:ec:f5:11:6c:20:b4:
ce:08:00:80:ca:77:90:e1:fb:73:c1:c0:00:4b:b4:
9b:81:71:e8:77:09:dd:e8:47:a2:3e:99:c3:f6:f0:
9f:ef:56:fc:aa:5e:60:3c:72:0f:59:c2:1f:91:d8:
11:1c:19:cb:af:ba:75:a2:7b:2b:12:91:e3:06:c9:
81:72:7d:25:4f:32:ae:09:7f:f7:b5:13:d0:b8:57:
55:ad:e0:56:f7:46:fb:6c:36:d9:6e:4f:fd:9b:78:
8c:f3:5b:64:51:a5:70:89:e5:6e:d7:b1:c7:88:cc:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:23:7A:3E:EC:99:82:F9:90:BA:E7:CB:56:BE:AA:BF:05:8C:30:7C
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:42:45:2e:90:6e:c1:39:7c:19:7a:6d:66:ea:12:a5:d4:97:
93:7d:4e:db:d6:0a:98:ce:a9:22:e2:8c:66:72:3b:01:f4:46:
3a:b7:7a:9c:73:58:dd:6a:80:33:2e:66:b1:05:94:8d:33:a2:
1d:b9:2c:39:b4:9a:af:0d:9c:0e:10:10:74:77:a5:9d:06:ba:
95:87:74:a8:5a:93:c7:e5:a7:6d:c8:5d:28:af:08:c5:a2:98:
f7:c0:83:66:ff:f1:14:bb:3d:01:9f:b7:24:bf:c4:8f:13:f0:
61:30:c1:8e:a2:96:37:ef:de:24:96:37:27:31:d2:56:e5:4f:
cb:f4:7b:ed:a0:52:94:62:d4:99:5c:ee:bf:c8:cc:af:cc:97:
24:06:db:af:c0:81:90:2d:f8:e4:91:54:f6:f7:fb:23:ce:be:
48:42:2e:65:ea:ad:c0:75:b3:c8:6e:11:8d:ff:0a:18:ab:49:
10:59:3f:7c:f2:ae:b5:68:ce:8b:e1:11:ba:f5:47:d1:f1:d2:
a3:5c:2d:ba:f3:3c:1f:26:ac:dd:40:62:72:b0:a3:ec:47:2f:
f0:1b:db:b0:42:d8:39:55:e7:15:c6:90:27:ef:68:80:0f:cf:
2c:e4:fe:49:29:5d:86:36:e0:7a:fa:57:c3:71:60:ef:ed:e5:
84:9c:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:10 2025 by rpki-client