Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: ZGhTQXyXz8TNfL3Yn2Hw+o5/btvBmgAiyDPdGUz+gLo=
Subject key identifier: D8:93:86:E5:1A:CB:26:FB:FF:4B:A3:70:7A:5D:F0:ED:5A:C8:F2:0C
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 0199FD6AE538A0B63F3CB7A97438D49AE1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: kVy70lsHdyZ32z9nGWhIboD4FWMFK+3rh3ogCxZYO1w=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e5:38:a0:b6:3f:3c:b7:a9:74:38:d4:9a:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=d89386e51acb26fbff4ba3707a5df0ed5ac8f20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:e9:b9:b4:5e:d7:67:e3:f5:70:cc:ba:89:
eb:e0:04:d1:ff:9e:88:6b:fb:48:c3:bd:bd:42:e5:
f9:b6:00:1c:db:3a:8b:3a:cb:d1:ff:0b:ff:bf:9f:
e8:ea:2d:91:60:b8:dc:b2:53:30:ab:85:56:c4:e6:
97:5d:72:f7:e3:20:e8:7e:65:2c:2c:89:e0:1d:4a:
58:82:86:98:e7:e7:eb:8f:43:8f:46:fc:f7:ec:b0:
28:66:fd:49:09:24:73:1b:73:0a:e8:0c:77:2d:54:
41:e5:67:eb:97:e7:0c:99:cb:12:3e:93:0f:e9:06:
54:5f:54:0d:5f:0c:6d:5d:5d:93:2c:1d:c6:ed:b4:
1e:34:9c:84:ce:98:20:07:f4:1f:d2:1a:b6:e2:68:
5c:96:89:80:78:08:5e:41:40:f9:f9:c1:6d:73:06:
f8:c7:4a:c6:c4:e5:90:66:fa:64:6f:0c:98:ad:28:
f7:72:17:3d:27:5e:d6:21:67:a6:d6:c7:82:f1:af:
9a:31:05:9a:a1:3e:cb:74:83:a2:ff:c5:1c:c5:7d:
4a:e2:a0:9a:ca:ec:40:f5:0d:53:8c:cb:91:83:11:
5f:0d:2c:9b:aa:83:86:9a:ab:0c:e0:f7:d6:5d:b5:
56:a9:40:47:f1:1d:59:c4:8b:e8:97:ed:72:d8:3d:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:86:E5:1A:CB:26:FB:FF:4B:A3:70:7A:5D:F0:ED:5A:C8:F2:0C
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:73:71:ff:6b:bd:61:b3:d2:a3:3e:73:f3:d5:8c:6c:e4:df:
ca:01:4f:ea:38:d5:e4:47:81:d8:b4:d6:ad:eb:00:29:8b:c5:
38:e1:5e:ae:97:d5:dc:33:72:f3:ec:c0:9a:56:37:c3:1c:e2:
91:4a:f2:24:f9:9a:68:b2:1d:b3:e3:cd:d6:24:2a:af:ab:ec:
b2:6c:80:69:c8:a9:91:e3:98:cb:b5:6f:57:05:61:78:1d:eb:
e6:dc:de:49:5f:f4:8e:66:97:ab:1c:b9:bc:7e:f7:71:6e:0a:
d4:04:52:fd:57:b5:a1:a1:02:1b:80:ed:6e:fd:aa:f6:eb:98:
62:f5:70:fb:b6:3d:c4:71:36:06:0f:2e:53:4b:17:cf:73:73:
60:04:03:8c:1a:4e:4d:56:58:c2:51:f6:e2:47:13:17:94:5d:
c7:6b:d7:87:64:a5:f7:67:70:56:09:f1:c7:af:53:b1:52:04:
b9:61:79:7f:bd:e9:93:e1:95:b1:1d:18:08:45:8a:0e:f5:64:
03:26:2c:82:13:19:7a:fe:3a:4c:4d:df:20:74:9a:74:4e:fe:
98:00:49:32:47:6c:d1:16:6c:a8:8d:28:35:ec:be:2c:e8:bd:
59:c6:cb:83:db:bd:02:35:3b:b6:d8:e0:5e:a1:fd:3c:37:95:
99:d1:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:18 2025 by rpki-client