Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: us5dS4XXpSXk2Qhg3P83SIu9bj43qou8qIf4u0xpTwI=
Subject key identifier: 1C:9E:D7:0F:D5:45:17:E5:FB:9B:DB:9B:63:60:75:17:5D:B6:FC:74
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 01986091EF5AEEFEF08BF05EF8F8576A76BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 1432
Signing time: Thu 31 Jul 2025 13:00:33 +0000
Manifest this update: Thu 31 Jul 2025 13:00:33 +0000
Manifest next update: Fri 01 Aug 2025 13:00:33 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: RXhZFYfBRi83uGeQa/UFRKZKVEYIPDDCrJef6AfWKGU=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:91:ef:5a:ee:fe:f0:8b:f0:5e:f8:f8:57:6a:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jul 31 13:00:33 2025 GMT
Not After : Aug 1 13:00:33 2025 GMT
Subject: CN=1c9ed70fd54517e5fb9bdb9b636075175db6fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:5e:07:aa:e6:31:62:a7:10:ff:9b:12:d5:
6a:87:f3:2c:fa:89:e4:dd:44:b1:83:97:e8:4f:d0:
04:16:04:3e:8e:57:0f:72:fa:8f:0a:66:2d:af:cb:
94:4f:1b:7f:ee:f4:39:a3:fc:63:14:f6:cb:34:b0:
ef:e1:84:5f:60:85:e1:c9:6a:79:34:e3:63:52:c6:
b3:10:59:44:fd:be:31:ae:da:25:11:ca:2e:59:67:
8e:bc:2f:0f:20:23:c6:7f:13:b8:00:d4:5f:0c:49:
c4:81:5a:43:3a:f1:0d:f5:6b:24:84:76:93:60:04:
f3:04:dd:fa:a5:b3:19:ea:44:4c:6c:6c:a7:7b:32:
aa:9f:4e:55:ac:63:bb:77:fc:e7:65:6e:e7:c2:e1:
fb:a8:6b:1f:a1:ed:f1:24:38:f6:ca:6a:95:01:4f:
cd:4d:9d:d9:1a:3e:58:56:f2:7d:f7:81:de:6d:43:
4f:d2:c9:ba:c8:25:dd:c4:b3:4b:a2:b2:b8:53:4f:
8e:69:c4:10:d1:59:28:f6:3b:13:6b:b6:91:13:43:
6e:33:82:b8:79:97:f0:e3:9b:d5:3d:5c:ff:04:bf:
b0:4b:5e:63:52:09:9e:1e:07:9d:67:ae:c0:a5:af:
4e:25:4b:77:cd:7e:fd:c4:bf:0c:d6:ef:0c:79:ea:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9E:D7:0F:D5:45:17:E5:FB:9B:DB:9B:63:60:75:17:5D:B6:FC:74
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:c5:40:f2:81:f7:8a:5f:f5:c2:73:bf:6e:d1:67:db:a9:
ae:b7:5c:32:0a:39:23:6d:dc:1a:34:f0:59:21:f2:84:72:31:
83:1a:c9:1b:27:76:63:51:70:1d:13:84:9a:37:f7:3e:de:a8:
f7:ab:d9:77:92:81:31:d4:18:74:40:f3:f3:89:89:6f:c9:db:
1c:4c:2a:99:3d:b4:24:73:0c:56:09:c0:98:75:5d:1b:f0:91:
50:dc:73:47:d6:82:07:6c:a8:30:37:67:20:71:dd:20:8b:f0:
3a:01:83:8d:43:ef:81:8e:38:14:cf:a1:dd:d0:71:91:4c:fa:
68:e4:46:4e:88:53:a1:8c:0f:ac:ca:68:03:d0:43:1d:cb:c6:
e0:02:ce:bd:5d:09:9e:21:67:9a:e4:10:28:5e:c7:08:eb:e4:
56:b9:f2:11:e1:db:84:26:5b:c6:4c:83:e1:5c:a0:95:ad:45:
7c:bc:f2:e5:0e:83:d1:a0:52:b8:f1:ff:8e:1b:cd:0e:41:fe:
ee:e8:f1:6c:0b:51:4e:3e:b9:b4:41:74:6e:b9:a0:7c:ab:3d:
09:62:72:31:19:2f:6c:a6:47:40:9d:de:1c:5d:ae:3f:ba:83:
46:f7:89:3f:c2:b9:a8:2c:56:29:a4:e6:5d:c4:db:67:db:e7:
02:59:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 15:08:17 2025 by rpki-client