Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier: Bp2W2yT/20fgrf0VZJ2v+jZcEb8xjx26xcAlLxlnAZ8=
Subject key identifier: 84:1B:7B:D6:45:A3:47:56:40:A6:E3:A5:25:02:4F:4F:2C:13:F2:5F
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 625F87596F32DB292E4D34A44A125FE95E24D13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number: 047F
Signing time: Sat 18 Oct 2025 21:11:31 +0000
Manifest this update: Sat 18 Oct 2025 21:06:31 +0000
Manifest next update: Sun 19 Oct 2025 21:45:31 +0000
Files and hashes: 1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: ySz75QeBef3V+D4pP3pKTihOD7QeSVPwArBF8wb7ksM=)
2: 38342e33382e3235342e302f32342d3234203d3e20323134343332.roa (hash: TnW3zKmNDxY1s+JdH67yvpdfB6A0/qDHS7IbwvxOzo8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5f:87:59:6f:32:db:29:2e:4d:34:a4:4a:12:5f:e9:5e:24:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Oct 18 21:06:31 2025 GMT
Not After : Oct 19 21:45:31 2025 GMT
Subject: CN=841B7BD645A3475640A6E3A525024F4F2C13F25F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:74:10:45:b3:43:b7:5d:95:83:c0:5e:f2:
17:de:cd:28:45:6e:23:7c:3d:82:b2:84:9a:e4:f6:
13:72:c0:93:80:17:8b:d7:ac:14:38:fb:fd:da:fe:
64:08:29:7e:e3:ad:e5:05:40:e0:4f:9b:e6:47:d7:
a1:0f:8e:4a:bd:51:62:a4:72:42:37:e4:3e:07:a3:
1f:19:16:b6:37:1a:a9:71:c0:d3:e0:9c:d6:da:53:
02:ec:7d:34:a7:5c:88:f3:04:1d:25:68:aa:85:de:
ef:3a:1b:39:c1:24:0e:79:46:49:a6:26:de:8f:c4:
77:32:2c:1a:5a:c3:49:37:0c:d7:f5:22:78:5c:52:
e5:f8:00:89:c5:45:ce:60:7c:1d:19:38:c0:1e:5b:
6c:66:97:f0:c7:77:3a:53:26:e2:54:40:c7:f1:03:
43:33:04:2f:cc:4a:cd:a5:0e:1f:ff:15:7e:15:23:
ce:7a:97:2b:3c:13:30:00:94:87:5c:60:f2:e0:e2:
92:83:f9:81:0b:bc:d0:9d:14:1f:d5:db:44:66:93:
6f:8d:9d:1e:b6:1a:19:22:ee:ad:66:6f:ac:c3:f6:
cf:cb:e5:6c:66:49:1b:a1:86:0a:a0:12:e7:04:42:
83:e4:00:53:5d:f4:1f:74:3c:5b:79:c3:cd:79:27:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:7B:D6:45:A3:47:56:40:A6:E3:A5:25:02:4F:4F:2C:13:F2:5F
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f1:62:ce:b3:13:d6:84:21:68:08:0d:52:e8:71:32:af:ef:
64:e1:55:94:f3:a1:97:81:2b:ae:eb:48:7e:ed:fd:10:e4:ae:
2b:c7:3c:95:df:13:f8:b7:f2:ea:aa:15:a6:99:33:f3:c6:ba:
fe:78:40:6d:ab:0f:90:9f:5f:3a:6d:bf:ef:67:d3:b2:06:97:
cf:eb:d0:9b:1e:b8:ce:df:b2:07:7b:88:7e:a9:2b:d4:e6:e4:
e0:63:00:6c:71:c5:47:bd:cb:a3:d0:8f:05:6c:e1:42:8a:d8:
77:38:6b:23:03:9b:4c:75:8c:71:67:e6:09:a0:3d:63:83:31:
a2:c3:8c:f8:61:26:3a:a5:d5:1f:1a:c2:c7:60:96:68:05:be:
d2:7c:4d:b6:db:0d:5f:c8:f8:0d:c4:36:a5:1b:13:a1:38:e4:
dd:10:50:82:f2:bc:6c:a5:b4:29:cc:a5:e0:2f:64:03:d7:b9:
f9:94:a9:65:6a:85:df:67:18:83:37:4e:cd:52:2e:89:ee:0a:
34:30:dd:f8:67:39:08:fd:65:86:8a:41:97:87:8c:a9:b4:e6:
de:62:f3:d5:a9:bd:80:c5:01:b1:d6:9b:b8:64:ce:80:9d:7e:
48:cf:30:06:86:c1:9a:d7:ed:bc:33:31:41:42:8d:bb:3a:0d:
80:37:4c:cc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYl+HWW8y2ykuTTSkShJf6V4k0TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDViYmRiNjI5ZmRkMGYxYzMzYmZiMWFjN2NmNDQxMjFi
YzVlNmVhZDAeFw0yNTEwMTgyMTA2MzFaFw0yNTEwMTkyMTQ1MzFaMDMxMTAvBgNV
BAMTKDg0MUI3QkQ2NDVBMzQ3NTY0MEE2RTNBNTI1MDI0RjRGMkMxM0YyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbxXQQRbNDt12Vg8Be8hfezShF
biN8PYKyhJrk9hNywJOAF4vXrBQ4+/3a/mQIKX7jreUFQOBPm+ZH16EPjkq9UWKk
ckI35D4Hox8ZFrY3GqlxwNPgnNbaUwLsfTSnXIjzBB0laKqF3u86GznBJA55Rkmm
Jt6PxHcyLBpaw0k3DNf1InhcUuX4AInFRc5gfB0ZOMAeW2xml/DHdzpTJuJUQMfx
A0MzBC/MSs2lDh//FX4VI856lys8EzAAlIdcYPLg4pKD+YELvNCdFB/V20Rmk2+N
nR62Ghki7q1mb6zD9s/L5WxmSRuhhgqgEucEQoPkAFNd9B90PFt5w815J4d9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUhBt71kWjR1ZApuOlJQJPTywT8l8wHwYDVR0j
BBgwFoAUBbvbYp/dDxwzv7GsfPRBIbxebq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTNmMDgzYjctNzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2
MTZhLzAvMDVCQkRCNjI5RkREMEYxQzMzQkZCMUFDN0NGNDQxMjFCQzVFNkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JidmJZcF9kRHh3enY3R3NmUFJCSWJ4
ZWJxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85M2YwODNiNy03
ODE4LTRjY2YtODY2My05MTkxZjhhODYxNmEvMC8wNUJCREI2MjlGREQwRjFDMzNC
RkIxQUM3Q0Y0NDEyMUJDNUU2RUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfFizrMT1oQhaAgNUuhx
Mq/vZOFVlPOhl4ErrutIfu39EOSuK8c8ld8T+Lfy6qoVppkz88a6/nhAbasPkJ9f
Om2/72fTsgaXz+vQmx64zt+yB3uIfqkr1Obk4GMAbHHFR73Lo9CPBWzhQorYdzhr
IwObTHWMcWfmCaA9Y4MxosOM+GEmOqXVHxrCx2CWaAW+0nxNttsNX8j4DcQ2pRsT
oTjk3RBQgvK8bKW0Kcyl4C9kA9e5+ZSpZWqF32cYgzdOzVIuie4KNDDd+Gc5CP1l
hopBl4eMqbTm3mLz1am9gMUBsdabuGTOgJ1+SM8wBobBmtftvDMxQUKNuzoNgDdM
zA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client