Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: JQ6f5SdWCmhJpIiMyExH/8B5pTFQAJU7kTgSNHOkfoc=
Subject key identifier: 86:0E:B8:FD:CF:4B:58:EF:5D:C7:E0:15:8D:D9:31:42:2F:D4:10:AC
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0199FC8F8868C5BE76FE97B44255146E67D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: 7GYQ2/0Gb3EL2IkyM9vBpHgJP0H0Cml0t/E6jkfznnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:88:68:c5:be:76:fe:97:b4:42:55:14:6e:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=860eb8fdcf4b58ef5dc7e0158dd931422fd410ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:48:33:0a:c8:fa:99:94:ee:7b:67:5c:76:
b0:97:37:6d:44:89:7e:92:b6:77:53:77:f0:9c:57:
d6:da:45:71:d1:02:ad:89:76:07:21:30:49:cf:78:
5f:25:19:41:c1:dd:66:7d:b4:70:65:43:3c:2f:f9:
a4:c4:50:a3:4e:2d:0e:ad:7e:5a:ac:df:72:27:a9:
d1:20:47:2d:75:b8:12:1a:5b:82:a5:a9:d2:52:29:
03:98:97:d9:cc:74:b6:5f:0f:b8:71:6d:71:41:3a:
22:30:76:36:cb:79:d2:01:aa:47:13:17:47:5a:59:
db:c4:ff:90:31:a8:d1:d5:1c:0f:59:fa:81:a0:16:
ab:1a:b0:6d:bf:57:27:9c:e0:0c:81:6d:5a:14:6d:
96:0c:14:19:3f:24:8f:ce:92:de:4d:3f:5d:58:98:
38:67:c7:88:ae:0f:5f:33:3b:66:20:6d:a2:24:86:
4e:5a:49:69:2f:49:ee:6f:e8:cf:78:69:bf:59:07:
34:36:3a:d0:ff:9b:2b:ad:99:4e:2f:10:e9:f2:74:
86:23:d4:b3:e0:ae:4a:e3:0a:33:6a:d2:de:da:42:
8a:c5:ff:0a:04:e0:31:4b:e7:d6:bb:47:e6:15:a7:
78:47:1a:89:29:c2:18:1e:cf:42:7f:df:49:55:25:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:B8:FD:CF:4B:58:EF:5D:C7:E0:15:8D:D9:31:42:2F:D4:10:AC
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ea:d2:33:4e:15:63:58:f0:18:a6:dc:53:6e:a5:28:31:8c:
38:65:7e:53:e3:eb:9e:b4:a9:55:de:23:49:f4:b8:17:b0:f8:
f5:92:2c:40:12:e4:e6:e6:a6:ee:2a:4f:db:19:21:23:4a:66:
82:ee:16:20:24:30:82:ec:00:c9:a1:0b:e3:72:f0:5c:e3:bf:
8c:a3:c3:27:ae:ba:15:bb:ee:75:c9:c2:b6:f9:e7:32:90:3b:
37:f6:46:55:6a:ba:a1:f0:dc:37:39:24:4b:29:96:b7:33:86:
2d:a9:b6:e0:5d:b7:e8:2f:fa:0a:72:33:8e:f6:bc:e0:20:5e:
ef:a0:cc:2a:89:fd:21:f5:e1:3e:c0:1b:cf:a9:99:fb:20:fd:
4a:3b:bf:56:2f:7b:f9:e5:62:5a:6c:a1:8b:2e:6d:a1:c4:9d:
59:e5:77:ed:80:4d:eb:34:db:d1:5c:98:08:37:b6:38:e0:60:
8a:d3:3e:bd:c6:90:a2:9f:30:ee:96:7f:d8:78:6c:c6:8c:e5:
2d:f9:1b:bc:68:f6:0f:50:61:9e:fb:f0:c4:eb:cd:b0:2b:d7:
11:4c:6b:42:a2:67:80:db:1b:75:a4:0c:e2:af:d8:cf:fd:bd:
e1:33:98:cb:bd:4b:de:eb:7c:f7:4f:dd:6e:96:04:bd:5a:60:
fd:4f:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:13 2025 by rpki-client