Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: Vn0o+R2XJ2enZd+BMIny0D/V+vAQ7Mme7zxGRXNjGnc=
Subject key identifier: 9A:2A:E5:89:A1:8B:6B:D9:07:3A:B8:43:ED:02:0D:42:46:30:35:95
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 0199221F4BDC8534B70E0B9745A73BA0D870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:40 +0000
Manifest this update: Sun 07 Sep 2025 03:01:40 +0000
Manifest next update: Mon 08 Sep 2025 03:01:40 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: nWkheDMfxAUwWXg03HPm1qOrAGSs558AFD6TtqzDwAQ=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4b:dc:85:34:b7:0e:0b:97:45:a7:3b:a0:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Sep 7 03:01:40 2025 GMT
Not After : Sep 8 03:01:40 2025 GMT
Subject: CN=9a2ae589a18b6bd9073ab843ed020d4246303595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:9f:f0:58:99:e1:ca:ba:f4:cf:df:30:af:
6f:c8:db:30:c5:46:25:16:ee:85:ea:42:c3:ef:1e:
a8:71:70:f4:10:e8:2d:c2:f4:0a:72:e7:f7:e9:77:
5a:cb:0a:cc:f6:f2:2c:df:c0:26:60:57:2d:3d:64:
e3:02:4a:8c:e1:aa:fa:11:44:b3:ef:60:4f:1d:76:
53:3c:58:08:33:bf:10:84:b0:3c:f3:98:2f:b9:cf:
1f:1e:bf:83:73:81:ec:f5:38:62:69:ef:df:0b:2e:
03:3c:ee:3c:ab:98:51:c5:d2:c2:dd:3e:8d:4f:b5:
8c:c0:aa:45:9c:7c:e2:a1:7d:76:09:7d:da:59:ed:
ca:25:c2:37:2c:99:f2:66:ac:0d:83:e0:b3:b5:ca:
c3:2c:b9:00:c4:d9:4e:cf:9d:9d:03:3f:4c:19:d1:
77:79:4d:04:35:36:eb:73:dc:2d:d6:33:60:db:64:
40:61:3b:b8:3b:49:67:2d:89:7b:38:3a:49:33:7e:
b3:00:91:90:33:0d:63:72:8f:c8:bd:75:fd:98:cf:
c6:4b:6e:30:23:21:60:7f:48:3e:ce:54:66:64:fa:
68:a9:1e:d4:3d:cd:0b:65:c4:c6:91:af:87:a9:5d:
1a:00:b8:df:43:45:ff:54:15:1c:db:63:c5:60:ab:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:E5:89:A1:8B:6B:D9:07:3A:B8:43:ED:02:0D:42:46:30:35:95
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:57:1c:66:f2:1c:15:ea:83:c0:e8:c5:ca:76:cf:c0:19:
2d:1d:a9:af:53:a3:e6:5c:57:26:5f:6b:1c:62:70:d9:f4:2d:
56:be:f1:d9:96:a8:42:0b:7b:ba:7c:08:bf:23:ad:9b:0c:6c:
87:5b:44:66:b5:7e:84:e5:8b:da:5d:42:65:92:4d:0e:d3:8e:
04:dc:e4:c1:a8:04:ea:fe:ec:cb:b8:63:1d:9e:a1:c0:66:4d:
16:bb:32:b9:c5:64:3c:26:ec:c8:ea:33:62:48:56:2f:64:47:
7e:a9:68:bc:1b:22:cc:f5:bc:e4:cd:8a:05:3f:5b:f2:e7:d3:
ef:c6:c6:98:69:23:69:36:06:c1:a3:22:76:77:23:6d:cf:85:
f9:cb:e1:99:65:f8:8c:26:af:bf:7d:43:11:52:d0:1b:ba:a9:
cb:24:a9:d4:a4:30:59:59:2d:dc:4a:26:7e:a6:59:5f:c9:1f:
97:99:19:bd:2e:47:c9:18:f8:bc:2d:7b:cc:fe:5d:d1:c5:32:
37:15:84:7f:f1:4c:17:26:92:f3:07:a5:c7:b7:26:76:24:1b:
e7:7d:3d:d2:76:57:a6:1f:33:a4:e3:04:eb:e0:7e:9d:39:1f:
96:b8:b3:52:dd:50:f3:d6:02:69:40:6b:e6:06:e4:59:09:21:
00:fd:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:01 2025 by rpki-client