Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: MfVf7+C8BCgfqcUoorhAzx6xRC8Vpk8BGIDEfYKNidQ=
Subject key identifier: 6A:7D:33:3C:66:B6:86:7B:7E:64:01:0E:6B:36:16:5C:B2:89:8B:23
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0198D54E3F60725273622D3D08A2856B25FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: 7dGQmjX2aqNyjQXGghbtcdWhxEel6OxeSWtwKH/tFpY=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3f:60:72:52:73:62:2d:3d:08:a2:85:6b:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=6a7d333c66b6867b7e64010e6b36165cb2898b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:37:99:c4:19:4c:17:f3:eb:87:4d:0b:84:
af:5d:a4:52:2b:95:22:b4:51:c6:8d:02:6e:47:43:
69:9f:fd:a3:68:88:b7:b7:90:2c:c2:c8:45:29:d1:
49:54:16:48:b6:c5:11:ad:a9:5f:c6:db:1d:c9:62:
c1:fc:70:03:1d:c7:b6:8d:bf:6f:c9:23:4d:0a:77:
a1:6d:2c:1f:d0:1b:46:96:79:a4:77:ef:59:07:af:
f7:bb:19:60:9c:de:56:57:11:eb:7d:b1:8b:34:1f:
6b:d1:17:cd:4d:13:bc:68:df:17:a8:d4:02:94:05:
f1:dc:1b:77:1a:41:56:bb:cb:78:e9:b8:96:16:2f:
61:a6:56:ce:a1:8e:c5:22:f4:3e:b7:9d:aa:0c:90:
69:d4:b8:34:23:fb:99:8c:88:bd:95:e8:fc:f5:89:
37:a0:9d:18:94:5e:e4:45:92:d7:32:68:44:81:83:
62:76:70:86:11:92:72:a7:a6:9f:20:76:68:7b:bc:
85:32:35:16:2a:39:67:3c:55:58:81:0e:0e:9d:63:
e7:97:21:4b:93:8c:3f:47:a7:e5:67:4f:f3:58:ba:
2b:9f:5e:87:a1:42:76:a0:ce:8a:2e:54:26:e4:2d:
b2:ef:ae:ed:a5:39:71:b2:08:1d:bf:60:ef:d2:c4:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:33:3C:66:B6:86:7B:7E:64:01:0E:6B:36:16:5C:B2:89:8B:23
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:79:38:20:a8:c4:18:2d:33:81:09:00:8e:97:a9:eb:e8:56:
5b:2b:55:e0:5a:15:c3:b6:c9:5d:87:77:3b:3f:a9:b5:21:ca:
1a:70:3d:b6:d7:31:3d:cd:2e:08:2c:dc:e1:36:59:30:11:d0:
2f:f9:17:ba:89:56:21:d8:62:0b:52:1c:db:39:7b:49:9d:92:
13:34:99:39:ea:22:05:93:68:a3:5c:a5:57:48:6a:68:09:e9:
f6:81:b0:46:79:0f:76:e6:e2:dc:59:18:a6:3f:82:43:a2:9f:
43:bd:2b:20:6e:2d:43:e9:ab:ea:a8:03:7c:6d:78:1c:63:8c:
83:5b:0e:58:e0:45:01:9e:d9:b6:86:de:7f:bf:88:fd:b4:b0:
65:8f:15:bd:e0:53:d7:c2:3e:a2:53:19:0a:6e:11:ae:88:f7:
74:6b:0f:a6:be:ae:17:77:30:7e:11:cf:dc:ec:56:e2:35:a6:
4d:36:f7:ce:7a:62:61:6e:b1:8f:93:fe:71:f4:62:98:1e:aa:
7c:2f:40:79:97:79:0c:37:c9:e5:4a:bf:2e:75:7b:43:19:27:
45:35:cd:c4:7e:be:82:e5:8e:b7:c3:69:91:d4:ea:f2:78:d7:
f0:0b:89:c2:27:65:dc:88:3d:42:1d:b3:53:1f:b9:be:37:0d:
08:0b:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:29 2025 by rpki-client