Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: o9FBq+5UwsSdB4ECE5iyhBa7KZZYGj+ukj26GhJfJxE=
Subject key identifier: 8A:1E:73:40:49:BC:D3:81:B1:D7:E8:E4:00:DB:BE:29:F1:DA:DD:45
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01992331350E02B1526F3893E417E28DCE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: D7
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: jMCPiq19AffrFBRG6uRe5RsrcalHxDukTeEE1+F1og4=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:35:0e:02:b1:52:6f:38:93:e4:17:e2:8d:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=8a1e734049bcd381b1d7e8e400dbbe29f1dadd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:71:54:06:0b:35:ac:1f:61:1a:b2:07:32:
2d:7a:77:b1:c1:00:6e:84:a6:ff:08:70:e2:99:e1:
17:b3:32:cd:09:6d:6e:45:9a:29:3f:5c:ce:f5:66:
e9:77:49:bf:3b:f5:0b:08:12:e0:00:0e:1c:32:49:
1e:66:ba:06:d0:8f:26:2c:62:2a:b5:f2:11:af:0e:
61:d6:37:9f:f4:03:84:04:b4:4d:8b:1f:8f:12:7b:
f3:6c:5f:7a:77:f3:6e:0a:9a:0a:c3:98:b2:24:87:
9f:50:af:25:d5:5f:c8:cc:90:f3:d6:d0:23:8c:d9:
e2:97:c8:97:6d:61:b7:d4:16:12:70:b3:b4:9c:7b:
9b:73:9e:b5:b7:61:b1:6a:a9:91:bc:20:a9:d7:b6:
bf:bf:ae:69:5e:59:04:9f:d7:13:59:63:34:2d:60:
8f:ad:1c:c9:67:45:d1:7f:1b:e0:36:7c:37:d6:08:
39:d9:20:6a:4b:2b:be:9d:96:f3:42:4a:cf:d6:be:
55:3d:44:2d:c0:7e:d9:1e:c8:78:ec:f3:63:79:e0:
f9:1d:5f:7b:ca:af:03:1a:42:85:a0:6a:a1:8c:57:
9d:ac:3a:3f:b2:ad:51:25:9f:ed:fb:1a:5a:38:53:
24:de:87:35:45:72:b4:be:39:94:34:73:80:78:36:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:73:40:49:BC:D3:81:B1:D7:E8:E4:00:DB:BE:29:F1:DA:DD:45
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:ea:dd:1c:a7:89:ad:86:93:ee:d3:e5:62:c6:6d:ed:3c:
82:09:2d:cf:90:ec:0b:25:94:c8:c7:48:de:95:da:f1:b7:05:
6a:d2:79:13:00:bc:00:58:b2:70:5c:45:a4:8c:55:13:ae:43:
16:93:a1:ff:97:f6:d1:e6:05:90:db:4f:30:aa:7a:94:f0:ed:
25:c4:3e:9e:ea:85:16:af:37:fb:28:b6:56:14:e3:91:19:c4:
79:7a:67:98:42:69:6a:cc:9d:df:f4:32:02:c7:ca:c6:37:09:
03:cd:51:bb:76:cf:3f:e2:e9:8c:4d:cb:6b:09:3b:a9:d1:a7:
29:c9:94:0f:00:8d:7c:2d:9e:9c:cc:20:1d:08:cd:35:21:ae:
89:af:e6:3b:9b:17:8b:bd:30:cd:2b:14:3e:8d:93:c6:1a:09:
e0:0a:10:d5:99:83:3a:72:c6:04:d7:b4:70:98:4c:fa:bb:73:
dd:1f:33:16:c5:a1:eb:34:e6:d1:c5:e4:a0:12:82:35:0e:ce:
23:aa:7b:83:e9:43:72:11:7b:4c:f5:d1:46:d5:14:28:6d:ae:
e5:ff:a1:53:a7:8e:81:2a:e6:14:b2:b7:0a:25:42:6d:33:c9:
ba:01:01:5f:52:8d:94:e5:2b:4a:1d:48:c9:d2:d3:63:ee:82:
43:c3:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:17 2025 by rpki-client