Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: jGnk6O4LQm2WKwlSVOtbMJn3pB0kwX0VvHmaz28qEhQ=
Subject key identifier: 98:EE:37:F5:B7:FC:A4:B0:12:F1:EE:91:70:CC:6A:A1:E7:34:41:F3
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 0198530D2A0E5DAD846329748B0D35C0055D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 22:00:28 +0000
Manifest this update: Mon 28 Jul 2025 22:00:28 +0000
Manifest next update: Tue 29 Jul 2025 22:00:28 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: 6y23oXB9gMj+YuJVYrM9QdalysQ3++4gtcJp7oSi3QA=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:2a:0e:5d:ad:84:63:29:74:8b:0d:35:c0:05:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jul 28 22:00:28 2025 GMT
Not After : Jul 29 22:00:28 2025 GMT
Subject: CN=98ee37f5b7fca4b012f1ee9170cc6aa1e73441f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:77:22:80:a2:18:73:45:ae:08:72:d3:ef:
f5:fa:40:47:a2:b2:df:bb:ab:f0:28:08:61:71:30:
23:cf:fc:98:5e:5f:b6:8c:34:cf:8c:4f:99:6b:be:
e4:57:87:c4:09:91:d3:1e:19:d9:a5:c1:2b:b4:77:
db:a2:ea:d9:65:27:03:7c:8c:14:c9:b4:6a:22:a0:
15:94:13:3a:65:5d:31:0a:3d:cd:bf:fc:31:00:10:
0e:15:74:e2:2e:40:07:bd:47:f5:5d:78:42:90:ab:
c6:54:0d:ec:8c:6b:4e:97:25:9b:1b:8c:48:a4:bd:
aa:5a:56:86:a2:b0:cf:4d:08:76:9c:10:ef:09:b3:
b9:44:cf:07:d9:fa:39:67:11:b0:f5:bb:d4:ff:0d:
65:d6:f3:61:80:a9:ad:ff:40:af:28:89:71:78:56:
b1:97:3c:e3:33:90:29:bc:e2:74:f3:2a:84:92:ee:
1a:e1:98:64:2b:d2:ef:ea:ca:ba:aa:02:60:d7:4a:
57:79:6f:e9:4e:fb:6d:c5:77:99:fe:41:f4:4c:20:
b0:01:fc:24:1e:4f:52:5c:b5:39:58:2c:95:03:36:
9d:8b:01:e7:77:ef:aa:00:d2:84:73:cd:af:d4:ad:
e3:1f:fe:83:96:99:85:cb:14:8e:ae:96:ee:dd:e8:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:37:F5:B7:FC:A4:B0:12:F1:EE:91:70:CC:6A:A1:E7:34:41:F3
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cc:7b:39:67:30:0b:3a:f2:e9:01:21:2a:26:06:38:cf:48:
ec:7d:db:b1:e3:b0:65:41:88:b7:55:b2:86:b9:d2:29:a5:56:
c2:71:3e:cd:f7:f9:c1:16:33:6b:23:53:11:6e:0f:c6:68:9c:
76:85:bd:b9:1f:03:05:61:f1:b3:ba:3f:83:2b:a7:dc:56:72:
e1:21:92:cf:85:83:65:9a:11:cc:3c:5d:f1:e9:fd:32:cc:5a:
fd:62:27:82:97:3d:4e:67:f3:d0:3d:fb:0d:f7:a6:f9:29:47:
16:61:8e:7b:58:0d:7b:c4:50:9f:95:e6:58:fd:e2:0f:f1:e7:
12:33:7b:17:f3:bf:ed:6b:64:15:52:cd:21:9e:9b:fd:16:47:
4a:07:98:81:72:c3:3a:74:10:a1:c1:28:36:6b:ca:5f:d9:a2:
9f:c3:2e:be:68:e6:c1:a6:55:8d:d7:ca:df:98:dd:83:fc:45:
5f:70:a1:84:f8:8b:16:14:f8:db:b7:e0:f2:8a:30:db:c9:9b:
fa:49:88:89:53:16:a5:6f:a7:19:c7:31:30:15:af:85:b2:eb:
92:ac:4d:30:b5:c0:e2:98:51:0d:b3:aa:ff:f8:3d:de:88:8a:
10:e7:9b:75:6c:5a:b2:f6:a3:e5:1b:5f:71:19:aa:fb:d1:55:
7d:10:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:51 2025 by rpki-client