Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: KD0SJFKlCdGoafdxzMjdoVW54MvcYaioARC5+351Xtg=
Subject key identifier: 53:80:DF:8F:1F:3C:0F:10:1F:BB:F0:E8:33:9D:01:C6:E9:E9:CE:75
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0197B77C5490E81D0CF71B5AAD2E146D72C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: My687JPz5VYUZH4sNDSsuGf6IfFoTLgj/mESJAFH994=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:54:90:e8:1d:0c:f7:1b:5a:ad:2e:14:6d:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=5380df8f1f3c0f101fbbf0e8339d01c6e9e9ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:2f:21:2b:8b:e6:7b:3f:13:cf:32:b0:b4:
a7:e5:dd:5c:69:d9:3f:b6:e8:47:fe:7c:23:a5:90:
1e:e9:14:cf:f7:fc:fe:aa:33:e3:30:b4:59:b5:22:
32:2a:a2:e0:66:cf:ea:43:3c:aa:02:3c:0a:74:a3:
b8:93:3d:55:3d:ee:1d:74:4a:b9:a1:c3:5c:51:a5:
d4:a0:0b:6e:ed:60:c3:af:7e:31:bf:08:5e:60:f5:
6b:db:f1:69:aa:5d:64:75:59:ac:de:9b:bf:9f:18:
96:3a:7d:70:ad:46:13:72:22:f5:bb:af:d6:cb:56:
28:ec:2d:a4:a3:ae:e5:a1:fb:1b:6d:95:0f:65:17:
dc:9b:d2:ee:52:31:7b:64:07:92:82:4d:7f:0e:ac:
1d:d2:4d:48:d1:64:f1:be:ae:65:39:91:36:b0:84:
04:66:dd:77:31:16:a5:54:28:fa:87:ea:e3:41:90:
e4:5d:af:fa:ce:98:3d:f4:9a:3b:25:da:da:82:7a:
ef:a0:20:7d:8e:0e:9b:35:32:a8:c6:e4:b9:08:81:
99:25:43:18:d2:b2:2b:c8:a2:68:45:bf:07:11:be:
98:47:e1:85:53:e8:b9:85:9a:ff:02:96:a9:57:81:
6c:b0:0c:df:73:fb:0f:03:40:31:fa:87:9d:31:f7:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:DF:8F:1F:3C:0F:10:1F:BB:F0:E8:33:9D:01:C6:E9:E9:CE:75
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:86:33:1f:e6:65:b0:35:ff:7c:dc:a1:b9:c1:9e:39:cb:41:
b3:24:8d:34:13:2d:2c:7a:20:35:1a:0c:78:c3:a5:f9:5a:1a:
6e:9a:d4:3a:33:28:7b:9e:2b:24:e8:e4:74:ae:9e:ca:e0:dc:
fa:8b:73:54:a6:0b:c8:a6:93:22:a1:45:aa:2f:ec:f3:3b:8a:
fe:06:be:81:bb:ce:f2:37:58:9e:72:72:d4:2d:c4:c9:29:37:
5f:4a:6b:b1:54:06:00:c1:c3:30:d0:37:b0:11:65:c4:49:29:
59:09:dd:fc:61:06:71:90:3b:98:e0:48:5a:18:00:d2:f1:7b:
f4:76:39:71:f0:f3:c3:b6:50:93:b6:95:d2:22:76:0d:c6:9f:
26:9a:c2:ac:d0:a6:af:e8:8e:6f:bd:84:9a:ab:21:25:f2:68:
ae:e2:fb:bf:e1:27:ad:01:93:2c:dc:4e:ae:6c:d1:64:7d:d3:
d2:c2:1e:6e:26:d7:cc:be:2e:18:27:a7:19:b7:b6:e2:42:3c:
ee:02:99:fe:08:50:03:15:8c:14:57:51:33:92:3e:e4:2f:7b:
40:44:2d:01:56:da:bc:e2:32:70:96:cf:52:32:16:a1:4e:df:
25:c8:35:f9:0e:d6:c8:51:15:49:1d:b6:d4:6f:40:72:30:eb:
ee:88:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client