Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: VUZOvRn54KFoFS0jhYwRUs9yR/MzKDBdA68INJDYkB4=
Subject key identifier: FE:84:23:8D:24:E9:3C:1E:DF:D0:60:B6:A7:16:70:5E:71:4C:19:75
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 0198496641347223068739CF08E1B83D6DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 09EE
Signing time: Sun 27 Jul 2025 01:01:34 +0000
Manifest this update: Sun 27 Jul 2025 01:01:34 +0000
Manifest next update: Mon 28 Jul 2025 01:01:34 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: eRjueXfjMpAqV8teSBL45JxPC++eOSD0AQvHn5pnKyQ=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:41:34:72:23:06:87:39:cf:08:e1:b8:3d:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jul 27 01:01:34 2025 GMT
Not After : Jul 28 01:01:34 2025 GMT
Subject: CN=fe84238d24e93c1edfd060b6a716705e714c1975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:9f:ff:11:57:2f:4c:db:cb:9b:2f:f8:ed:
61:f2:7a:4d:f3:d8:ee:44:f0:e2:ba:cc:52:c5:56:
44:84:a5:49:0d:be:ba:4e:e4:a5:b8:13:79:78:bd:
1a:ac:7a:b2:b2:eb:67:90:70:58:0a:82:ec:24:a9:
9b:f0:29:86:a3:ef:f4:06:f4:06:af:3f:d6:a8:ac:
2e:a6:cb:22:f5:7f:23:0f:98:ca:d5:0d:22:2d:6b:
6f:c9:52:b9:58:3e:d4:df:8e:6a:fe:68:3b:56:9d:
d9:49:aa:58:38:1c:25:9c:90:f6:48:f9:50:eb:6e:
7e:33:72:78:e2:cb:dd:93:e8:c2:14:68:24:11:4b:
5c:b8:e6:1d:c8:8b:d3:9e:02:6e:c9:f3:e7:ce:b3:
56:ee:b5:68:99:c1:8f:19:60:e0:49:77:75:1c:54:
a5:b9:08:88:04:f1:55:87:68:e5:c2:a3:81:00:02:
bf:80:0b:ae:e5:7a:0a:75:7c:a2:cc:15:7f:8b:5b:
6e:34:4a:0a:c9:12:ec:27:7c:54:71:d1:b9:6a:c4:
82:b9:e3:84:77:2b:8c:0b:63:52:38:e0:d3:2a:55:
2c:03:5d:ea:de:dd:8b:07:48:a4:01:87:75:c5:c8:
15:11:1a:3f:70:41:f2:c1:33:c3:1b:ef:7a:d0:58:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:23:8D:24:E9:3C:1E:DF:D0:60:B6:A7:16:70:5E:71:4C:19:75
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c4:ee:aa:58:6a:78:03:5f:f8:72:2d:d3:0d:b9:80:8c:ae:
a5:61:86:f7:0b:62:6a:20:f6:18:c3:96:84:a5:bf:8c:19:2a:
2b:7d:84:0b:4b:10:78:ba:f2:27:bc:b6:1c:27:54:ca:ca:4f:
4d:00:db:f1:17:5d:2b:46:a7:00:2d:3d:51:1d:4e:21:03:c6:
9e:07:8b:48:e4:0e:9a:ed:d6:2b:04:72:8c:4c:27:90:ae:ee:
bf:a2:f7:60:89:e1:9c:a9:01:a2:08:f6:9e:b6:dd:45:32:f2:
fc:8a:35:a2:c8:b7:b6:46:05:50:9c:f8:65:9c:c9:4e:58:8b:
c2:cd:31:c8:7d:74:6f:65:a3:0f:ed:68:6e:75:72:de:23:86:
0b:1b:77:a4:a5:8a:c3:f3:5f:d5:f9:74:3d:50:2b:b1:ce:79:
d9:05:93:7f:b3:29:b4:eb:ea:9e:dc:d6:80:2a:a5:40:f6:cb:
77:0c:51:e4:67:09:f7:db:5d:86:d8:25:26:6b:cd:3f:91:38:
19:34:fb:4d:29:4b:1d:3c:0a:97:0b:64:3a:e0:e2:13:e5:dc:
de:94:a1:4c:e1:97:cf:be:1e:c2:b9:c8:6c:e5:2e:0f:89:e5:
9b:ac:e7:47:ef:55:5c:50:46:a4:bb:03:a9:52:f6:d7:e7:f0:
64:1e:60:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:24 2025 by rpki-client