Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: oNvvpnKDNIHUSsNtPQZvJzi9ItAu305LvFSrcDn5Wzk=
Subject key identifier: 63:98:A7:09:6C:E8:36:69:9D:C7:25:E1:D1:C7:B5:5D:2A:B3:71:DF
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 0199FDD920CFA82BC46CAFEBB81A783A67CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0CD2
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: 2mbi0FzzQUxYVMA12EUIblcKwZyFXjk3/OI/H3KisZg=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:20:cf:a8:2b:c4:6c:af:eb:b8:1a:78:3a:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=6398a7096ce836699dc725e1d1c7b55d2ab371df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:61:84:07:9b:09:37:40:f8:40:cc:d4:4c:
fe:25:f6:2e:87:0e:4f:14:2c:10:e7:a2:18:1a:a0:
10:99:22:b5:e8:ee:32:47:80:7d:44:5e:30:36:ff:
fb:e9:ff:5a:a9:8b:be:4e:97:3a:1a:18:de:6e:52:
39:82:53:55:c1:2b:3d:16:df:d7:0c:65:da:d3:74:
90:b2:0d:9b:cf:42:1c:83:a1:25:8a:63:fd:87:ea:
3e:a8:f8:21:da:95:bf:6c:4a:f0:15:ad:28:1e:18:
c4:f3:c1:33:b7:2f:eb:26:90:45:97:f7:d9:19:6c:
cd:ee:a9:7f:86:15:9a:3c:e9:12:e7:cd:8a:f9:ef:
12:8d:df:ea:26:a9:f2:89:fb:15:db:1f:0d:b1:2c:
2f:69:82:86:b9:62:1c:80:74:de:44:2d:3d:c4:f3:
66:a1:dd:25:4c:89:4a:ea:03:c7:01:d2:4b:99:e9:
fb:2d:1b:df:fe:b3:4d:66:ab:6f:d0:b6:bf:cd:53:
5d:13:f0:39:54:c9:d1:b7:14:ce:e9:25:c4:c3:41:
82:c3:ce:80:8a:be:e8:67:2f:7e:be:7e:91:36:c3:
14:19:bc:c9:85:f2:14:fd:ec:89:1e:11:5e:03:b9:
c3:e9:ae:f1:77:29:98:61:21:a1:22:ea:41:20:f2:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:98:A7:09:6C:E8:36:69:9D:C7:25:E1:D1:C7:B5:5D:2A:B3:71:DF
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:31:c6:d2:78:16:2a:18:25:e2:b2:35:6a:d9:b3:9e:fc:
61:a2:ea:47:b8:ec:5b:ca:80:98:a0:77:28:ad:fb:21:89:7d:
c9:72:09:5c:a5:ca:9d:64:9d:57:a5:02:8b:0c:15:9d:df:28:
1a:b4:08:89:33:5c:6b:0a:59:e8:d8:f4:9e:a9:18:44:d9:f7:
96:cd:2a:23:78:39:f8:e1:ef:58:d8:93:69:2b:35:ce:56:0a:
88:21:a4:8c:54:33:43:1b:87:23:6a:d6:7b:a6:56:b2:e1:2a:
73:47:01:20:d8:10:49:7e:b8:05:69:80:47:60:c0:05:41:7d:
eb:60:72:33:87:61:ad:ad:b1:e3:a1:a5:73:05:4b:5e:ac:7e:
1a:5a:2b:bc:9b:51:5c:fc:b6:7d:6c:d9:12:75:56:af:73:0e:
e3:9b:7f:95:8b:25:ea:33:4b:b5:f8:d3:27:c8:6b:32:2f:bd:
dc:10:b8:d0:cb:35:da:8f:98:eb:dc:f3:85:d0:84:37:e7:93:
a8:24:f2:a2:31:3a:14:7c:e2:3f:97:63:d6:99:48:40:8b:d9:
56:98:64:fc:bb:4e:f7:fe:74:3f:2f:4b:a9:aa:2a:61:5b:7a:
96:36:09:a8:39:77:2c:10:26:9f:27:25:51:89:6f:22:65:03:
84:f1:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:54 2025 by rpki-client