Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: vOkQQUD+9MgMg49jUZ6dKWHQPcaUak/6XUZBcblripA=
Subject key identifier: BF:90:0F:81:2D:23:37:CD:75:71:0D:F3:F1:BE:D7:9E:36:EA:A1:C4
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 01975BA55968A874B530098F706A99986E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 158E
Signing time: Tue 10 Jun 2025 21:00:52 +0000
Manifest this update: Tue 10 Jun 2025 21:00:52 +0000
Manifest next update: Wed 11 Jun 2025 21:00:52 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: El2Nj++dgdlcuClX4N9lk44MEVt2vZVJWzR4auLlATk=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:59:68:a8:74:b5:30:09:8f:70:6a:99:98:6e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jun 10 21:00:52 2025 GMT
Not After : Jun 11 21:00:52 2025 GMT
Subject: CN=bf900f812d2337cd75710df3f1bed79e36eaa1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:e8:c9:e4:37:ae:0a:fb:f7:2b:58:4c:ff:
e9:58:65:44:16:76:51:aa:4e:7d:59:65:cd:31:fa:
0d:7c:46:e8:ed:94:da:01:60:47:fb:13:2d:60:8e:
18:06:23:c1:d4:4c:7f:96:8e:47:0e:27:68:40:d6:
53:53:93:a2:f2:9c:5e:b0:be:29:35:43:fb:69:f8:
61:04:48:89:ec:ea:6c:ca:57:27:50:5e:f4:81:c4:
6c:bd:5b:3b:3c:85:2d:73:d6:15:6e:10:0f:98:1e:
d5:47:a7:e5:99:ef:37:30:f5:bb:f8:98:d7:0c:93:
42:32:85:02:4a:7a:1e:7a:ff:a5:c6:5a:af:45:d7:
53:90:54:3a:67:30:54:8e:a7:4e:b6:ef:ca:ba:38:
29:a9:5e:52:ad:d8:01:1b:1c:ee:7e:08:a2:d7:ee:
b0:7d:19:4a:26:e6:11:b4:7f:a6:29:49:c4:1c:26:
77:f3:7d:97:fc:91:fe:da:ef:d1:47:9b:b7:6c:36:
38:44:3e:33:dd:46:7e:8e:d2:1b:81:33:e2:34:f8:
5a:6c:40:a3:68:12:94:97:11:3b:9c:6a:3d:35:4f:
0a:11:38:0c:32:1a:51:77:ab:31:6a:85:16:53:d1:
43:17:94:dd:40:c2:48:99:e6:6f:58:5b:ef:47:2c:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:0F:81:2D:23:37:CD:75:71:0D:F3:F1:BE:D7:9E:36:EA:A1:C4
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e6:03:40:8f:aa:dc:cf:44:f8:7c:db:02:76:a3:30:e4:19:
1d:15:70:d4:c6:9b:dd:80:48:d9:e2:12:7d:32:df:0f:11:73:
1f:e6:2a:53:47:bc:10:f3:c4:26:58:19:cd:b2:66:b0:6c:bc:
01:94:33:99:f3:c2:e1:b4:e3:82:4d:be:c8:52:fc:4b:6a:55:
49:1b:ce:dd:8d:8f:ba:33:1a:73:96:a1:92:f5:06:40:66:4a:
30:8a:8c:0b:e6:f9:e9:53:f6:56:88:76:4e:4a:ca:c6:93:25:
5d:24:4b:94:09:37:8a:c2:9b:bd:9c:9d:fc:96:a4:3a:b3:f6:
f5:71:46:2c:79:5c:ce:d0:5e:18:a0:5e:c7:a8:c9:e8:46:32:
5e:7d:98:3d:80:f5:64:31:e4:37:6f:fc:7d:99:f2:e2:00:8e:
19:af:8f:f7:fc:f8:2b:cf:89:a5:b2:05:5f:1d:ab:5c:91:e5:
86:7c:94:6b:9e:a5:7d:7f:c0:34:50:54:f3:73:46:75:ee:94:
fc:bd:67:4d:e7:70:cf:86:95:91:bc:50:55:f0:7b:b2:d2:97:
2f:21:b0:df:2e:68:b9:6a:63:74:1a:b3:41:75:8f:f0:ab:ef:
26:3d:07:e4:7e:2f:92:6c:c4:4d:ad:ee:85:b1:17:e7:ac:41:
d3:3c:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:38:42 2025 by rpki-client