Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: z5zNeFi5g2+ONLA4YJQXVZmyXqxu8YgICFjmlMXrL7Y=
Subject key identifier: AA:BE:09:EC:93:74:69:DB:B6:2A:1E:2E:B8:EB:E4:46:5A:01:2A:A9
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019A2854997C7A83B5A3058EEBF8C8A04F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0AE6
Signing time: Tue 28 Oct 2025 01:00:24 +0000
Manifest this update: Tue 28 Oct 2025 01:00:24 +0000
Manifest next update: Wed 29 Oct 2025 01:00:24 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: /q6lCGiGXZ09sYdGHzQap6BFoMNxwIwWiK0V/8qubew=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:99:7c:7a:83:b5:a3:05:8e:eb:f8:c8:a0:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Oct 28 01:00:24 2025 GMT
Not After : Oct 29 01:00:24 2025 GMT
Subject: CN=aabe09ec937469dbb62a1e2eb8ebe4465a012aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:d5:cb:44:f6:a1:e7:58:99:95:af:79:81:
9c:57:77:fa:d5:41:1a:74:59:14:03:46:56:36:0a:
fa:0b:3c:1e:e4:24:5a:f4:e2:07:89:ce:4a:aa:c2:
4c:1e:d0:20:83:d5:dc:4a:ea:dc:0b:66:77:30:16:
b2:26:14:4a:31:2f:2f:95:63:b2:54:8a:e7:ac:f2:
36:3f:e0:4c:c9:2a:b0:a3:9e:dd:2f:18:65:46:df:
a7:23:bf:99:09:cf:48:32:36:e2:c9:f9:13:b5:a0:
e7:a3:14:9b:9d:3a:b7:4f:24:a0:15:1e:ba:bc:77:
e8:4b:4e:47:43:5a:e8:35:71:e9:52:db:c6:88:58:
a4:85:bb:9b:47:a1:99:d3:7a:a6:e9:fa:d7:81:42:
6d:3f:d4:ba:a6:1c:d3:d9:42:10:7b:0b:37:30:02:
b5:3d:d7:2d:24:c1:57:d7:13:07:3b:8a:fc:c3:2f:
02:87:3d:48:fa:4c:75:a9:f0:49:79:cf:7f:3c:dd:
35:20:64:3f:5c:8e:da:8b:16:05:02:80:bf:71:e2:
f2:09:1c:fe:a7:6c:18:66:58:89:9c:45:0d:ad:f0:
96:68:f5:6c:4d:8d:c7:a3:b6:11:1b:e0:a1:16:3c:
6a:fa:c5:01:f8:a5:76:f4:93:80:56:2f:cc:ea:70:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:09:EC:93:74:69:DB:B6:2A:1E:2E:B8:EB:E4:46:5A:01:2A:A9
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:2b:e6:39:8c:c8:48:8c:71:d6:de:97:f0:ff:67:32:5f:
31:f7:73:9b:7c:e3:cc:75:38:12:55:fa:29:b0:68:5c:51:3d:
b9:0b:aa:51:a3:fb:7f:42:be:4d:4f:6b:c5:c9:76:1d:35:3e:
20:ae:74:26:6f:a4:dd:1e:43:63:17:d5:02:0a:1e:2b:78:b0:
66:c8:6f:21:7c:e5:1f:45:ee:d5:97:8f:f9:4d:e2:0e:c6:98:
f4:f2:a6:d3:96:6a:03:0d:78:61:a1:49:4c:65:ad:c0:26:0d:
e5:c6:30:e8:f7:8a:da:73:5f:f8:38:4b:8f:2a:f2:35:9a:9e:
96:2d:6c:63:cb:c6:70:96:a6:41:35:e9:34:a7:17:16:7e:16:
3e:a4:c9:e0:db:06:09:93:ea:5f:c0:28:b3:f5:23:cc:54:7f:
dc:b8:79:54:69:d2:ff:d5:38:e6:a6:23:57:9a:14:35:7c:b5:
fc:ab:2e:58:b6:ab:48:1e:73:7a:0f:94:36:59:24:4f:a5:72:
1a:6a:d3:5e:21:8b:f1:f0:df:02:c7:c1:ac:77:53:df:2b:39:
8a:d9:30:4a:46:00:1c:6e:ca:3b:1d:f7:a8:27:3d:d6:59:63:
15:41:0a:3c:a8:73:98:37:fa:e6:fc:5b:1c:ea:44:20:09:a8:
52:1c:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:04 2025 by rpki-client