Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: +uQgPhojpmi5B7O6NL+wn1Z0aVI37V3CNqQ26JvJd1g=
Subject key identifier: 2A:ED:18:A6:32:8C:BD:DA:BB:6F:1E:CC:AE:9A:C5:A3:38:7F:77:BF
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0197635F25EBD31B7E3FFB83B008881F40DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1592
Signing time: Thu 12 Jun 2025 09:01:09 +0000
Manifest this update: Thu 12 Jun 2025 09:01:09 +0000
Manifest next update: Fri 13 Jun 2025 09:01:09 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: E7Nf2eRexsEUwiS8KqtkPMu8uDitYYIuqDkFIEQnvcI=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:25:eb:d3:1b:7e:3f:fb:83:b0:08:88:1f:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jun 12 09:01:09 2025 GMT
Not After : Jun 13 09:01:09 2025 GMT
Subject: CN=2aed18a6328cbddabb6f1eccae9ac5a3387f77bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:14:e9:2c:88:c4:89:16:dc:e6:6d:42:fa:
7a:fe:c0:ed:68:13:a0:49:20:1c:c5:6a:e2:96:bf:
aa:24:50:0a:42:0e:97:73:5e:e3:45:f1:09:60:07:
fb:19:fd:ca:ac:3f:a0:f8:ca:80:4b:5c:88:34:af:
cf:0f:65:92:9e:90:05:d6:89:ce:c5:2d:86:8b:19:
58:43:22:43:c5:04:fb:6a:2d:bb:a1:7d:bd:eb:07:
11:08:a0:4f:97:86:94:a9:8e:22:fc:66:1d:dc:2c:
b1:df:53:0d:41:0b:4e:85:9a:2a:01:cd:fb:a2:2f:
d4:9b:93:e5:6f:0c:8f:9e:56:99:48:ba:85:a8:56:
dc:2c:5b:fe:fe:f2:f9:c2:ea:39:46:16:8e:eb:ca:
80:b6:c9:ac:da:ba:bc:7c:96:ab:8b:4d:31:ff:2c:
21:7b:03:cd:5e:77:2c:5b:e0:56:f9:4f:62:a2:d3:
aa:64:cd:72:7a:e0:79:29:38:21:ae:5b:03:5f:68:
16:5f:db:87:69:1b:dd:32:2f:f4:2f:d8:f8:e4:90:
42:a5:dc:ec:e3:4f:0a:36:10:c8:5f:22:59:2c:3d:
56:c4:0e:3c:c4:a4:93:fd:e3:7a:74:50:81:59:9c:
fe:63:55:39:d1:a8:13:d3:0a:d6:77:6d:14:d1:4a:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:18:A6:32:8C:BD:DA:BB:6F:1E:CC:AE:9A:C5:A3:38:7F:77:BF
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:52:20:d9:e8:a2:8c:89:39:e6:3c:0d:6b:2f:a3:b1:53:
75:db:de:56:90:eb:b2:7d:e6:61:94:4f:f9:fb:f5:40:6f:93:
b0:e0:14:ea:3d:25:9b:b5:8d:2e:6e:07:03:14:e1:7e:15:da:
4a:cb:09:72:29:94:82:6c:2c:a2:be:fb:39:14:ea:7a:e2:2c:
6c:71:f7:93:1f:82:3f:23:e0:a9:cf:89:d9:ca:c9:ba:37:19:
67:e1:23:4e:28:7a:6b:aa:06:00:8d:9f:00:b4:dc:f4:08:81:
64:5a:5c:7e:30:bd:ba:16:63:20:96:ed:8c:84:5b:c6:a6:2e:
e6:f6:d6:19:32:c6:f4:b5:24:b9:da:c7:a5:15:93:df:2c:99:
9b:38:75:ba:82:c7:3f:f3:82:65:b2:dd:cb:1a:91:b3:74:87:
52:ec:cd:63:55:a3:94:75:5c:72:2c:85:5b:77:57:9f:20:b2:
b5:be:68:a0:c4:6a:32:ca:34:23:91:5c:82:e0:67:e9:0d:3d:
c1:69:af:5f:35:cc:f6:74:c7:77:02:18:1f:0b:b0:0b:c7:c4:
68:ae:c9:32:e9:3f:ba:f3:b7:b4:91:23:15:5c:e9:83:3a:14:
43:34:be:30:1c:3f:03:f9:66:f9:c0:b8:a2:c0:c6:85:77:e4:
bd:ef:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:21:48 2025 by rpki-client