Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: 4hwMIHhor8ENElQ7GsDp6ueZhzv8HbmV7EFcYBvYHsw=
Subject key identifier: 18:6B:3D:BB:E9:47:96:05:47:4B:B4:64:FE:0B:44:C6:C9:CF:EF:72
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019A7225B2F4D2B5CC50601AD98D6E4B0DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 7DbCGjNzVUYLreIyFo4jaSYDKBLzomwtZJCpql4nvjw=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b2:f4:d2:b5:cc:50:60:1a:d9:8d:6e:4b:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=186b3dbbe9479605474bb464fe0b44c6c9cfef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:30:5d:31:6b:d8:99:4e:46:1a:1d:4e:0d:
8f:72:ce:fa:ff:8b:5b:19:09:08:d5:a2:f4:16:03:
2f:5a:a7:7d:f6:c2:fa:68:46:6d:17:0d:9a:c0:7b:
ec:72:8d:02:07:fb:69:ff:18:37:b0:ca:99:df:e4:
8f:2a:3d:b0:c6:5c:c9:e4:2a:79:2b:e4:b6:61:38:
e6:1c:0f:bd:e3:39:bc:a3:2d:df:a9:07:4e:37:25:
9f:25:37:54:8b:c2:b5:01:6e:5e:ea:68:b9:de:d6:
ab:8f:26:52:41:65:38:ae:24:45:fc:a3:ed:71:6a:
08:77:cd:f3:24:5e:31:7f:5a:01:7f:52:66:22:f5:
9b:7e:ee:60:30:6e:c9:3d:f6:63:96:cc:34:8a:f6:
bb:9d:2b:98:aa:06:c0:a6:12:c4:e7:41:97:32:f6:
68:78:43:09:df:91:73:4e:9c:d4:ca:8f:4c:86:32:
9d:f9:ff:c2:bb:05:37:b5:d2:22:2e:d3:aa:c6:de:
33:a1:62:ac:82:72:ce:13:cb:bb:eb:1a:e2:aa:f0:
73:0c:8e:91:0a:c7:9c:0b:3d:2d:1f:ad:67:d8:36:
68:dc:50:e3:76:70:20:e3:8e:ba:a2:c9:7a:b0:db:
f4:10:0e:26:dc:ce:6a:29:96:0e:d6:1d:02:bb:e4:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:3D:BB:E9:47:96:05:47:4B:B4:64:FE:0B:44:C6:C9:CF:EF:72
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:9a:16:b6:fa:59:5c:07:0b:b8:c5:4f:59:c7:96:cf:50:
f8:24:61:7b:a6:90:9d:ad:38:64:07:ca:44:67:20:0d:c4:91:
38:85:36:a3:48:dd:85:f2:64:87:02:c0:ea:29:41:a0:d8:18:
cb:9d:4c:cf:49:6f:8b:fa:85:b0:44:a2:d5:90:c2:a6:7d:95:
06:84:a0:32:06:62:f5:a4:49:d4:89:69:75:a1:23:23:2b:42:
1d:e0:83:7f:ed:8f:b0:c3:0b:9b:c2:8e:9d:b5:d3:25:ee:fe:
a1:e0:ac:ea:91:d8:c3:cc:97:21:8b:e5:8e:4b:e8:4d:d9:de:
a3:20:5e:2b:da:b7:d9:84:d7:21:37:af:d9:6e:15:f2:a9:69:
02:cb:12:66:d5:f3:b3:e0:4d:70:8d:f5:e8:69:d3:16:89:8b:
83:c0:ee:a7:ae:bc:75:b7:da:ed:ef:15:ab:27:c1:05:76:7f:
2f:d7:4a:86:d2:23:b8:c7:70:c6:62:0f:fd:9e:6d:c6:69:df:
17:e5:de:b0:2e:3e:ee:cb:59:40:38:71:57:eb:60:30:46:02:
83:58:9f:62:e0:4a:5f:0a:c4:10:eb:24:0f:62:ef:6b:52:c9:
ce:67:fd:da:3a:da:11:13:e7:2f:47:62:d8:41:9a:07:87:d9:
75:9e:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:23 2025 by rpki-client