Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: S5mil0POYjvzXGNDED104gN1UUJeAztKjjvDOi4bYAY=
Subject key identifier: 2D:17:9C:E6:33:5B:1F:C4:13:A5:90:F8:DF:47:C6:7D:C5:65:3C:83
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 019844ACFD2770528BBD98545AF302965357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 14BB
Signing time: Sat 26 Jul 2025 03:00:44 +0000
Manifest this update: Sat 26 Jul 2025 03:00:44 +0000
Manifest next update: Sun 27 Jul 2025 03:00:44 +0000
Files and hashes: 1: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: e1APK2BGDTglIv6/E7N5SYbs8oxX0I61WI6EViDxrXs=)
2: RyM0TaDcy3MATcF4kZgnomIhcSc.roa (hash: u1hwu96g0Ti3Leptf/8mOz/le6P/VB383vy/UE8/YqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:fd:27:70:52:8b:bd:98:54:5a:f3:02:96:53:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Jul 26 03:00:44 2025 GMT
Not After : Jul 27 03:00:44 2025 GMT
Subject: CN=2d179ce6335b1fc413a590f8df47c67dc5653c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:13:cb:26:ea:72:a1:23:a5:a0:5b:c1:87:
ec:b0:31:45:17:34:76:cd:b0:4c:b1:cc:5c:d0:7a:
58:8f:05:72:50:a2:96:ea:80:cf:27:92:f4:0f:07:
91:12:98:f5:04:1f:98:22:99:71:a0:14:ba:c4:7d:
e2:51:f8:d5:05:f7:17:a1:1c:44:a4:a9:73:9b:7b:
13:17:35:62:ab:36:2a:2a:b2:40:10:1b:cf:6a:2c:
9b:70:3f:35:d8:03:51:d8:fd:a2:6f:ab:f1:e9:21:
f4:f9:12:70:a6:1e:04:7b:eb:85:1c:a0:0c:93:35:
39:62:82:73:b8:93:45:71:a9:0c:99:a2:55:95:f4:
f0:88:5a:9e:35:b0:ba:0f:5f:59:61:a7:14:09:92:
89:42:16:fe:82:98:31:30:85:20:ef:87:a6:a6:c8:
05:6b:cb:09:c7:9c:4f:f0:44:24:f6:4e:1d:82:9e:
c0:7d:eb:72:39:44:71:7b:1d:f3:57:22:a2:5f:a7:
ef:24:f5:9a:fc:7b:5f:76:20:71:9e:22:47:1f:8e:
c1:ce:e9:26:cd:ff:55:2c:49:c3:a3:30:5c:ba:50:
b6:61:5f:42:93:d0:4c:d3:8b:62:5f:a8:0c:01:d9:
81:ed:de:4b:03:55:7c:7a:35:c9:f6:58:24:49:8a:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:9C:E6:33:5B:1F:C4:13:A5:90:F8:DF:47:C6:7D:C5:65:3C:83
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:ba:54:50:08:7c:16:3a:d3:64:99:f8:ab:79:35:aa:6c:
87:98:0f:42:86:eb:89:1b:a7:f3:20:2d:80:46:f9:23:e0:68:
00:6d:49:04:e1:91:7f:01:ef:6f:86:f2:88:e8:c8:ac:53:de:
83:fe:aa:fd:15:a9:0c:d3:e1:10:54:59:45:f9:a6:40:ac:5f:
3e:99:8d:24:f2:13:bf:78:74:1b:07:5c:9a:1d:28:80:77:ad:
cc:0d:09:23:84:4c:da:3a:cb:93:74:97:13:12:df:0c:a9:c6:
07:83:e7:1d:cb:bb:47:c7:57:96:21:79:f8:01:d7:c4:16:1c:
ed:fb:a3:30:be:69:f7:b8:92:00:cd:01:a7:74:e7:54:c9:28:
0c:b7:e9:87:c8:00:f0:0c:d5:cd:e7:75:92:0f:86:f2:8e:38:
0e:82:1f:c5:40:7d:91:3d:70:15:ec:f4:73:8c:73:83:8c:dd:
06:a4:d5:07:f5:40:e9:c9:72:35:bc:c4:88:69:81:cc:17:a2:
25:e0:81:24:90:2a:e4:89:aa:11:e5:58:7d:57:6e:a5:ca:db:
d4:04:0c:ab:2f:11:9b:8e:bc:1a:d3:83:57:4e:c7:46:51:a6:
e3:18:76:c3:da:4a:83:4a:54:e7:e7:51:82:35:1e:b9:f3:8d:
8b:8f:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:51 2025 by rpki-client