Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
File: bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft (raw, json)
Hash identifier: K40U1O/o0pv4UmKx49OtCb9ZOg8VcH9T2c6vd9Phcag=
Subject key identifier: C9:50:4E:E3:5D:B5:85:28:C4:1E:D1:41:2F:FA:2A:7D:A4:66:C0:44
Authority key identifier: 6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
Certificate issuer: /CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Certificate serial: 01984E548D2C76E46DA30FABC0EC423D3737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
Manifest number: 0524
Signing time: Mon 28 Jul 2025 00:00:20 +0000
Manifest this update: Mon 28 Jul 2025 00:00:20 +0000
Manifest next update: Tue 29 Jul 2025 00:00:20 +0000
Files and hashes: 1: 1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa (hash: Z9j2Ppjp4Qt36VWExXtwgn0OhYcd4t+T5FV+FimtPqA=)
2: bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl (hash: vqsSrB3pSlBa4TiR8h41L1R4FNbz1eLRGuNB7wmMZBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:8d:2c:76:e4:6d:a3:0f:ab:c0:ec:42:3d:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Validity
Not Before: Jul 28 00:00:20 2025 GMT
Not After : Jul 29 00:00:20 2025 GMT
Subject: CN=c9504ee35db58528c41ed1412ffa2a7da466c044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:32:a2:f2:f2:8b:fa:19:ae:66:4b:72:3a:
b5:81:b3:e4:a6:8e:15:de:f1:90:ef:44:41:af:34:
a6:c7:e7:91:f3:4d:d0:65:d0:75:03:ac:b0:c8:5f:
4d:7f:e4:1b:bf:b5:d5:28:4a:53:1e:55:75:1d:e6:
93:68:31:72:48:7b:27:60:83:b4:2b:ae:c3:7b:39:
7e:95:04:b0:39:2d:f1:56:c5:39:03:9a:ab:dd:d9:
31:54:3d:54:8f:ee:e0:a2:d6:49:eb:e9:81:ed:d8:
f1:8d:a3:28:d3:7f:13:b2:c7:f9:50:7c:97:bd:e5:
b4:bd:ee:d6:69:c5:a2:fe:f6:fe:a3:eb:bd:58:3d:
45:bd:ff:f6:2b:8c:7f:18:1a:9b:7c:82:12:c3:5d:
2b:c4:00:58:5e:cc:e7:25:c8:e8:fc:4b:63:7a:39:
c6:b7:43:c6:b7:96:fe:6d:c2:c0:0d:88:44:b4:98:
5e:29:7a:37:e5:e0:14:09:7a:30:a9:84:01:6f:45:
c6:6d:53:24:ad:73:a4:04:9c:85:48:dc:2a:65:00:
34:b0:9c:db:cc:44:b7:68:bf:57:eb:5a:bd:34:eb:
ad:a5:1d:eb:6b:a9:15:a7:86:f0:d4:d3:26:5a:62:
51:24:22:90:64:a6:ca:b8:e2:43:6e:15:53:92:ce:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:50:4E:E3:5D:B5:85:28:C4:1E:D1:41:2F:FA:2A:7D:A4:66:C0:44
X509v3 Authority Key Identifier:
keyid:6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:db:3e:8b:6b:ed:32:1d:2e:5c:41:82:6f:20:27:66:08:b3:
93:5a:b2:a1:7b:85:2d:9b:61:fa:de:55:21:7c:f7:56:e5:40:
a4:a8:ad:84:e9:67:97:c3:20:57:cb:db:36:ca:46:94:7b:98:
f2:00:57:75:14:cf:12:aa:31:af:59:b9:cb:d3:58:35:45:15:
c1:70:79:d0:62:39:de:53:33:45:06:87:04:b7:48:cf:8f:5f:
51:c8:9a:f6:61:34:8c:34:25:6f:5a:14:e0:0d:8a:61:eb:ea:
19:27:14:83:15:a9:87:31:0a:0f:f1:6c:c1:90:a0:57:bf:84:
3d:a5:b7:2f:ae:ea:78:08:99:0d:08:1e:76:6b:18:46:52:92:
fe:cb:f5:5e:0b:eb:57:80:72:fa:4a:c7:d7:70:75:9b:3f:45:
ad:6b:75:2b:7f:f7:b9:1d:cb:ca:56:9e:79:97:52:d7:a1:bc:
8a:6a:41:42:c6:0c:1e:36:2f:e2:35:59:57:55:a3:25:1b:7f:
a3:9a:f7:ee:c9:73:bd:3f:9b:75:ba:83:b7:20:3a:8a:db:61:
2d:78:d9:60:0f:fa:c5:86:ab:4b:34:08:87:aa:38:13:cf:fc:
62:27:58:0b:ba:33:71:e7:78:67:c7:b0:41:d5:91:f2:b9:73:
5b:13:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:08:42 2025 by rpki-client