Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: xVGwDFSSZTl0bL/cGqyXRdlRl+nKRPGBxuHu0yznKRQ=
Subject key identifier: A6:C9:C0:46:3D:D9:EA:B2:A9:4F:80:69:88:84:CD:4F:0B:28:D2:32
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 0198D4E03EF7F5C71D7CFECD4E5425D35B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: foh1YMJFj2VFxQCQ16QNWjjtI26voNJ06b18fqRKWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3e:f7:f5:c7:1d:7c:fe:cd:4e:54:25:d3:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=a6c9c0463dd9eab2a94f80698884cd4f0b28d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:32:9d:0f:fe:94:a8:62:e9:b3:23:36:ce:
94:35:15:be:fc:a3:81:e7:f3:d0:5b:d9:d7:4a:04:
ec:0a:72:eb:30:3f:cb:6e:c0:ca:0b:c0:dd:5a:39:
e9:73:73:14:2b:e7:51:1a:ba:73:4e:dc:1d:57:09:
82:31:a8:86:97:02:e3:d4:d9:aa:16:8a:d9:fd:bc:
b0:6f:16:6b:2c:cf:34:2b:4e:1d:de:84:23:9c:95:
d1:1b:61:16:3c:04:a6:8c:8a:ae:1d:13:82:ec:8f:
f0:42:c8:de:0a:a4:a9:75:52:4a:a2:8d:ac:39:4c:
be:76:b5:b3:28:d8:4d:29:a2:f1:3e:26:a2:e7:74:
b1:a2:60:0b:fd:d5:09:cc:f5:b3:e1:bf:36:cb:0c:
29:c5:cf:70:b7:ab:d2:d1:f1:e2:0e:c1:fb:60:ac:
1b:4d:e5:e1:6b:dc:2d:a4:37:af:83:11:6f:02:eb:
73:16:89:bb:01:88:e8:8b:21:00:20:31:b7:5a:82:
4c:18:aa:b7:e0:86:38:c5:7a:d2:68:64:92:e4:75:
b1:41:86:d4:bf:f9:47:3c:67:a3:05:fe:aa:e5:fd:
40:4b:98:5d:33:c6:48:16:35:5b:54:ca:2c:48:b4:
eb:b5:be:e9:ad:30:87:f3:84:84:8c:e4:17:83:fa:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:C0:46:3D:D9:EA:B2:A9:4F:80:69:88:84:CD:4F:0B:28:D2:32
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:69:1f:5c:62:89:6f:b8:a7:55:b0:f3:9a:72:c9:5f:cc:17:
ad:9c:70:a1:7c:cb:f0:56:3e:a6:ab:64:62:26:e1:fe:be:20:
2f:16:c7:29:b5:43:51:87:40:59:09:09:01:80:a3:f1:44:48:
0b:16:d8:49:a3:0b:d9:27:64:9f:a6:c4:6c:ea:4a:b8:2b:b6:
96:9b:0b:8a:4c:3a:16:e4:5c:a1:73:5d:c0:ca:6b:42:e9:69:
3e:98:ef:79:89:31:bb:63:81:65:0e:8a:4b:4b:34:59:04:8a:
ab:4e:9e:7f:f1:65:b1:60:ce:74:cd:0d:8c:c0:02:71:10:bd:
29:ef:ca:4f:4a:8c:dc:4a:23:c1:92:45:84:fd:7c:89:5d:22:
ac:15:f3:26:82:36:3e:ed:84:82:42:d5:7d:57:f2:dd:4f:84:
b8:39:4f:f3:95:12:47:a7:e9:c5:7e:b9:13:5b:78:79:5c:a8:
77:d0:01:01:be:78:2d:9d:25:95:a2:dd:76:38:d0:b1:93:c8:
b8:d3:52:12:37:a8:23:37:3a:bb:70:4a:cc:e2:19:0b:bc:39:
67:c6:48:06:12:74:d7:e2:f5:fc:80:cf:5a:cc:44:5f:53:1b:
8f:94:95:b5:82:6a:7e:1d:76:98:30:cb:c7:e2:16:c8:45:4a:
75:04:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:57 2025 by rpki-client