Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: cTTMCN3yhHFrQiAYvDY1NLR9PxSftZzzdEf360myLKM=
Subject key identifier: 86:37:37:DC:3F:9D:2D:B9:F8:91:52:78:31:B2:40:EA:11:84:EC:B9
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 019849655E43CBBE0146895A4EA722F0BA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 12DB
Signing time: Sun 27 Jul 2025 01:00:36 +0000
Manifest this update: Sun 27 Jul 2025 01:00:36 +0000
Manifest next update: Mon 28 Jul 2025 01:00:36 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: WxThZNGWBbRke2u33Smtavf5S0nigMQTBObEC3sLwh4=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:5e:43:cb:be:01:46:89:5a:4e:a7:22:f0:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: Jul 27 01:00:36 2025 GMT
Not After : Jul 28 01:00:36 2025 GMT
Subject: CN=863737dc3f9d2db9f891527831b240ea1184ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:02:c6:0c:6b:c5:41:32:3d:b1:fe:35:93:
dd:6e:ce:47:2c:2a:4d:df:15:35:d8:e0:8a:ec:8f:
df:a8:60:93:78:f0:5c:70:a2:fa:74:62:e0:06:91:
a9:fb:2d:12:b1:d2:c6:b3:dc:c3:25:0b:dd:fc:70:
6b:05:2e:54:79:a3:a4:3b:83:25:27:b8:cb:94:cd:
a7:8c:45:1b:3b:a8:61:34:f6:80:00:79:40:4b:27:
fa:ab:92:21:93:46:7e:27:6f:6b:1e:05:16:6d:49:
eb:f8:7c:29:a3:38:84:20:b8:fd:57:ad:99:cf:90:
d2:f2:78:08:2f:f7:59:d0:04:ec:79:fc:ee:20:8f:
8f:c2:a1:15:76:9c:3f:cb:06:04:a6:6b:c8:60:4b:
ae:18:9e:1d:fd:18:ac:fb:a2:65:b1:fe:0c:96:0e:
0d:d6:98:54:fa:3a:98:56:9d:e8:dd:c8:6d:cc:4a:
db:56:6f:fe:55:10:40:c0:e0:c7:0c:a5:bf:34:8c:
9b:98:6e:58:5d:97:1f:c9:73:b1:f5:5f:e4:5a:3b:
9a:a4:50:15:e6:ba:74:20:44:ff:93:74:a4:43:ba:
c4:b5:ff:43:7d:81:3b:5d:a8:c4:74:d0:af:98:4b:
ed:5a:12:a9:4f:47:ea:07:b3:bd:f8:17:0f:54:6b:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:37:DC:3F:9D:2D:B9:F8:91:52:78:31:B2:40:EA:11:84:EC:B9
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:11:60:a2:11:d4:ae:73:a3:7f:8f:23:ed:fc:70:16:a4:
46:c4:d6:9b:66:38:d2:c8:60:72:a2:3f:b5:a4:e7:67:ff:ed:
97:cc:60:58:72:38:19:d9:ed:ba:5a:56:0b:62:6e:70:28:be:
0b:ca:b7:9e:95:24:a3:de:37:d5:3c:8f:3a:b6:5a:e7:ca:eb:
8e:1d:72:a2:a8:2c:6e:3d:b2:9b:51:3f:a6:a9:bc:66:32:ac:
a0:26:cf:a9:25:c0:90:ab:cc:9b:3e:84:8f:5b:c6:70:bb:21:
23:e2:44:d5:e7:d5:47:d2:d2:28:b8:33:a8:a9:20:74:d3:9f:
4f:a8:58:bf:5c:ed:96:09:6f:6e:df:85:94:9b:e5:c1:df:2b:
27:18:20:4a:9a:0e:1d:d6:09:ea:5b:b1:7a:39:a0:49:0e:58:
28:86:ad:ba:d8:50:ff:c9:51:a7:c6:bd:91:85:ae:64:ad:f5:
c2:ae:5b:76:5a:44:73:19:98:94:1e:f6:e2:2d:d1:ab:00:1a:
f2:e0:dd:55:42:27:90:aa:76:25:39:0d:6e:24:b3:5d:5d:d2:
3e:c3:64:b9:ba:63:71:c9:20:90:9e:ef:03:f5:58:16:95:6c:
b3:16:19:70:1d:ec:6d:90:97:69:ac:a4:92:62:8b:57:da:ab:
59:af:15:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZV5Dy74BRolaTqci8LpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2NjMThmYzcwNmRmNWE5OTMzYjBiZTIwZGNjYjA0Njc1
YmY0NzQwHhcNMjUwNzI3MDEwMDM2WhcNMjUwNzI4MDEwMDM2WjAzMTEwLwYDVQQD
Eyg4NjM3MzdkYzNmOWQyZGI5Zjg5MTUyNzgzMWIyNDBlYTExODRlY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4wCxgxrxUEyPbH+NZPdbs5HLCpN
3xU12OCK7I/fqGCTePBccKL6dGLgBpGp+y0SsdLGs9zDJQvd/HBrBS5UeaOkO4Ml
J7jLlM2njEUbO6hhNPaAAHlASyf6q5Ihk0Z+J29rHgUWbUnr+HwpoziEILj9V62Z
z5DS8ngIL/dZ0ATsefzuII+PwqEVdpw/ywYEpmvIYEuuGJ4d/Ris+6Jlsf4Mlg4N
1phU+jqYVp3o3chtzErbVm/+VRBAwODHDKW/NIybmG5YXZcfyXOx9V/kWjuapFAV
5rp0IET/k3SkQ7rEtf9DfYE7XajEdNCvmEvtWhKpT0fqB7O9+BcPVGvyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY3N9w/nS25+JFSeDGyQOoRhOy5MB8GA1UdIwQY
MBaAFAc8wY/HBt9amTOwviDcywRnW/R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MzNjNDctYmYzZS00NzI4LThiOTMt
YjA3MGVjMzRkNGMxLzEvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MzNjNDctYmYzZS00NzI4LThiOTMtYjA3MGVjMzRkNGMx
LzEvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKkRYKIR
1K5zo3+PI+38cBakRsTWm2Y40shgcqI/taTnZ//tl8xgWHI4GdntulpWC2JucCi+
C8q3npUko9431TyPOrZa58rrjh1yoqgsbj2ym1E/pqm8ZjKsoCbPqSXAkKvMmz6E
j1vGcLshI+JE1efVR9LSKLgzqKkgdNOfT6hYv1ztlglvbt+FlJvlwd8rJxggSpoO
HdYJ6luxejmgSQ5YKIatuthQ/8lRp8a9kYWuZK31wq5bdlpEcxmYlB724i3RqwAa
8uDdVUInkKp2JTkNbiSzXV3SPsNkubpjcckgkJ7vA/VYFpVssxYZcB3sbZCXaayk
kmKLV9qrWa8VzA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:35 2025 by rpki-client