Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: hlmlDWPFjcqxWwpU3mFySvzlbGduj+IDw6WKSi+ef+A=
Subject key identifier: CF:C8:D7:A0:02:38:0C:D5:20:CD:48:F7:C6:40:71:4C:EA:72:32:B4
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 019A725C3B0B352B9DB55A94BA5DC56FE559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 172A
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: 8OZLjOB/bZLUPoWJ8RrhLI0/0gCNSxRB9DvFLBCL9SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:0b:35:2b:9d:b5:5a:94:ba:5d:c5:6f:e5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=cfc8d7a002380cd520cd48f7c640714cea7232b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:80:63:d1:54:62:8e:8a:63:f4:a1:5f:c4:
42:9e:d0:61:a9:7d:98:ad:fb:42:50:51:a7:11:fe:
19:15:13:de:d7:44:24:61:d6:a3:de:0f:37:6a:8f:
60:31:3c:91:a4:b3:64:89:ad:8f:98:20:bb:b6:cb:
d1:ac:c7:86:3c:87:44:5d:e3:e0:8e:d1:96:e7:6c:
2f:08:ec:4d:cd:1b:bb:b5:e5:00:35:cc:dd:31:b9:
03:ff:53:62:a4:3b:1f:73:c1:42:7e:18:9d:93:30:
46:f6:69:aa:85:58:2c:8c:f9:1b:0b:71:b1:d3:16:
8d:ca:7c:f3:91:4e:5d:d3:26:a2:ec:00:6c:86:46:
46:84:c1:e4:a0:eb:b3:70:10:bd:70:b1:fe:75:b8:
1d:b7:9f:17:5d:27:3e:56:63:39:e2:8a:d1:71:aa:
81:4f:93:23:c1:1a:60:d9:1f:97:81:7e:02:56:1c:
34:57:b5:56:fa:75:3f:cb:44:4a:24:69:19:46:f2:
5a:59:8b:38:90:75:2d:41:a3:d0:c6:a7:58:41:e7:
02:12:97:80:f2:d7:48:5b:2a:aa:9c:a7:d9:6c:f0:
36:03:e4:2a:7b:8a:d7:fb:38:4e:ac:1b:1e:19:91:
f4:08:9f:11:a9:85:99:69:2e:e3:d3:ce:c4:01:69:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:D7:A0:02:38:0C:D5:20:CD:48:F7:C6:40:71:4C:EA:72:32:B4
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:08:18:cd:71:f6:e2:93:32:6e:f9:02:9e:c8:35:55:a7:36:
91:11:78:9c:d1:99:7f:57:06:58:63:38:3c:48:5c:35:83:5f:
89:b5:52:ca:9c:62:60:18:73:f2:e5:a4:9d:2d:05:0f:50:4e:
f2:30:d2:e9:dd:48:79:a2:a4:08:8f:38:ca:62:22:d9:7c:5b:
28:c8:50:e4:80:4d:65:e4:1d:5b:1e:f7:57:d1:00:ec:4f:4d:
cc:86:d9:f5:3c:46:f3:71:30:f9:a5:b2:74:b0:d8:04:42:03:
73:77:3c:69:c9:f5:9e:5f:44:31:bb:96:0c:39:7c:83:5d:ba:
2b:31:a3:24:d8:fc:b0:b1:67:cf:40:09:ae:8c:ea:5e:86:e4:
98:d5:e0:55:9f:ed:05:65:4a:01:8c:6e:6e:4e:fa:f7:3c:06:
90:54:84:ff:2c:9d:e7:3f:c7:22:15:47:6f:9c:05:a3:c4:20:
b8:70:de:57:05:9e:a7:5d:1c:c4:4d:36:2a:7f:32:56:59:b4:
cc:da:de:8c:cc:09:18:25:db:e9:eb:ac:a0:65:a7:ec:e9:64:
2a:41:bb:89:8e:05:c5:33:05:69:cd:98:e3:46:e0:e9:7f:72:
5f:83:40:1f:2d:6c:58:06:00:6d:12:30:7a:fb:6c:5b:14:0c:
da:4c:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:36 2025 by rpki-client