Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: 4kLPJL2trKkAL1TGILp9btxc707X26tzJxCkRkiUyIM=
Subject key identifier: DC:72:C8:40:3D:D6:9B:D7:43:81:0C:3C:8C:A3:09:78:3F:DF:AE:5B
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 0198597D811A1DFDB426D5E2228678EF3662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 04:00:53 +0000
Manifest this update: Wed 30 Jul 2025 04:00:53 +0000
Manifest next update: Thu 31 Jul 2025 04:00:53 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: 8WkNbIvgnSdqjM28LYyUYY8jdwmdEmt3LZysI0RrM30=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:7d:81:1a:1d:fd:b4:26:d5:e2:22:86:78:ef:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jul 30 04:00:53 2025 GMT
Not After : Jul 31 04:00:53 2025 GMT
Subject: CN=dc72c8403dd69bd743810c3c8ca309783fdfae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:59:be:ad:53:e6:19:9b:5a:8e:20:af:a8:
03:d8:51:c8:02:aa:1a:bf:4e:2e:84:55:8e:db:87:
36:88:96:36:df:73:8c:0a:86:db:38:7c:1a:a1:a2:
ea:c1:e8:ed:66:30:79:f6:62:a3:27:84:d2:09:a8:
2a:c0:be:74:b3:83:65:20:90:4d:ae:d9:d3:5a:82:
58:84:c4:cc:6a:fa:b1:73:20:df:74:a1:67:58:33:
80:3f:03:06:30:57:3c:01:40:5c:3b:37:6e:7b:44:
fb:2f:ae:16:6c:31:3f:cd:c7:02:2b:72:dd:d7:b9:
dd:86:6e:7c:30:c8:74:80:52:c4:2f:bb:d0:c2:32:
ba:4b:03:0f:9c:ef:4b:fd:c3:0f:9c:2c:c9:43:35:
9d:2f:6a:a4:b4:3a:6d:c7:ca:65:a1:43:61:a1:78:
ce:8e:dd:02:77:81:e5:30:16:37:2d:50:50:a4:66:
6c:a2:45:9c:24:56:f4:30:b7:da:96:2c:81:58:31:
0e:bd:d5:b8:e1:6d:53:a9:4f:ae:50:c5:8c:4c:aa:
f4:43:77:ac:17:e4:b4:62:01:3f:37:de:42:64:2d:
70:26:ce:ff:c4:c2:6f:a9:5a:22:c6:41:5e:c9:67:
7e:5e:47:20:3d:76:34:94:9c:26:49:6b:36:be:82:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:C8:40:3D:D6:9B:D7:43:81:0C:3C:8C:A3:09:78:3F:DF:AE:5B
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a9:fb:2d:43:a1:af:72:bd:78:5a:10:99:4d:6e:0d:f1:f2:
89:5c:10:73:f6:fb:ae:1a:57:86:df:4b:fc:a7:10:b7:ce:88:
be:a2:0f:cc:8a:7b:6c:5f:c2:92:75:76:85:21:3d:a8:f8:91:
29:90:6c:ff:62:60:c2:c1:40:2f:26:e0:d2:22:1f:de:f4:40:
65:4e:28:38:c1:19:8c:ac:6e:e9:84:22:d3:12:b0:ab:8e:36:
57:e3:28:4c:bb:4d:3e:74:ac:31:ef:52:ed:bd:ae:ff:e5:2c:
1a:58:cf:04:04:91:0d:c9:f9:85:58:9e:9e:97:27:20:99:ca:
10:a3:be:76:f4:db:ad:00:74:e7:f5:8f:6c:52:68:64:a7:33:
db:b2:d2:54:1e:3d:0f:7c:6d:ba:6c:1e:ae:44:40:35:01:f2:
15:1e:22:9d:44:96:5f:2d:64:6b:5e:32:48:5d:53:ca:e9:93:
f3:07:c5:4c:d5:7c:08:fb:84:ee:a4:b1:08:b2:31:84:f4:26:
12:f1:ec:18:a4:e2:a3:ea:35:17:82:94:f4:c5:89:7a:7c:3b:
e7:ca:fe:bd:3e:f1:29:1f:9b:47:a6:17:33:8e:50:d6:0f:85:
21:ef:1a:99:44:0d:79:2f:c0:12:3f:9b:f0:0d:bd:5e:12:b7:
2f:49:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:45:48 2025 by rpki-client