Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: UE2yHC/rAh1JPvg3jlgOIydgPiNcM8e2tzx4Q+W3jAQ=
Subject key identifier: AF:FA:C3:63:FF:84:D3:88:F2:7D:2E:90:9E:BA:90:0A:73:09:15:29
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 0198D54E0F44CE8B105E21493F4507FECC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: w6WDECyM0qvG0Wq19TUMwGk6QT50Btw5JTQHDduR3Gc=)
2: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
3: yXyHyUciMlXcXjcenr1TUrD7i8k.roa (hash: d9ok+mML2m4czXnRfsRnkqCrtKjymbnxAuG9XAiMcCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0f:44:ce:8b:10:5e:21:49:3f:45:07:fe:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=affac363ff84d388f27d2e909eba900a73091529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:8a:ee:78:d6:85:01:53:2d:04:80:80:90:
b2:7a:c9:78:42:c1:37:c9:de:24:cc:72:19:15:cc:
05:5d:51:12:54:c7:e3:1b:98:3e:a4:66:ce:d5:34:
ac:4a:05:92:8e:99:07:a2:e9:23:c6:cc:2d:bb:e6:
c6:09:81:5d:e8:14:a9:8a:9f:e9:8d:79:1d:5c:56:
08:dc:69:a9:0e:db:b3:46:fe:08:c7:80:82:5a:6b:
90:e3:47:a7:f5:72:87:45:f2:a6:3a:8b:4e:bc:41:
cc:98:d8:a1:40:bb:6b:84:65:76:b9:fd:26:00:78:
94:ed:16:a0:e4:42:96:90:bb:6a:de:6d:ae:bc:61:
bf:5d:21:ff:a7:1d:56:e5:c2:d5:af:ab:23:97:96:
cf:e2:4e:a8:ae:73:7b:27:d2:c1:ae:d6:b2:3b:e6:
79:f9:f8:d9:ce:bc:99:da:c8:12:38:d4:75:d8:47:
59:e5:bc:4a:48:ce:96:26:74:cc:26:e3:ca:30:08:
98:2f:3d:86:70:ed:52:51:66:c0:35:86:84:f8:c4:
9e:77:e4:93:5e:d6:96:78:c1:eb:e2:6f:56:fe:f1:
60:a0:e7:4f:63:71:f5:cf:ad:95:17:6e:63:b0:4e:
c3:ed:f4:88:24:1a:5d:93:7c:c3:1c:37:b9:75:c2:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:C3:63:FF:84:D3:88:F2:7D:2E:90:9E:BA:90:0A:73:09:15:29
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:de:59:74:f4:ce:e1:90:b4:3d:a3:04:c2:6e:27:45:91:
97:c3:5a:6a:0e:78:09:8b:a2:53:50:94:85:ca:e8:c6:ce:2b:
28:a2:c3:cb:e6:cf:8f:6f:7c:51:6c:e3:7a:21:cb:04:a9:68:
67:5d:ee:19:c7:97:04:05:d3:f5:a0:16:73:4e:4f:73:fc:5b:
87:66:7b:8f:ed:da:1f:fe:be:63:e2:7e:33:05:f6:5f:b0:de:
27:7d:97:b5:91:38:d5:69:65:3f:6e:d9:b5:d4:00:88:9d:4a:
47:d6:48:75:7e:5f:90:23:42:0b:b0:d2:e1:5e:f1:f4:83:7f:
ca:75:5d:cb:e5:c9:e5:99:e2:90:f3:c4:4c:2e:36:5f:cd:52:
77:db:0f:a4:a0:07:53:61:40:57:0b:28:5a:d8:95:c8:85:b4:
b4:1c:fd:7f:66:64:7b:b5:62:62:17:81:46:62:23:24:94:8f:
ac:57:69:db:3f:09:79:ee:2a:6a:f2:a3:2d:ba:76:da:1f:04:
2d:b8:a8:79:48:73:a5:8c:ea:7a:04:74:37:a6:5b:15:ef:93:
3e:cc:55:21:0f:0b:ef:45:bf:8b:fb:77:45:58:fa:75:14:e6:
a3:a0:3f:56:e5:5c:9e:a6:90:25:49:cf:75:6e:bd:39:b3:42:
cc:53:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:31 2025 by rpki-client