Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: v4njC1FM0i2rn4PMUZAQucCxy/4mIWcCgU8E4ZeR4r0=
Subject key identifier: 16:01:8A:06:22:F1:0B:D4:DD:5D:DF:4F:8B:6C:9C:31:EA:71:2A:1B
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019748FA3D9E5FBB5922C3C03BE6C09C21C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 46TymaxWKkWkmTvl5tk4zH837ZIIVJJTqZzzm2COAus=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3d:9e:5f:bb:59:22:c3:c0:3b:e6:c0:9c:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=16018a0622f10bd4dd5ddf4f8b6c9c31ea712a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:68:d9:88:b1:99:d8:3b:06:0a:fb:61:04:
02:e6:c7:43:8e:fe:c2:86:de:87:ce:aa:e9:19:d3:
57:86:a5:04:79:ee:09:77:e9:c1:56:61:1b:96:08:
37:4e:f8:33:ca:2d:15:32:1b:84:bf:0f:02:d5:f3:
3f:73:c6:fc:4d:0a:fb:d7:b1:a3:e1:46:b8:30:76:
7e:09:09:1c:17:fd:f4:f9:3d:b9:6c:91:4f:c6:18:
2c:32:c5:fc:9a:c8:40:35:e5:20:11:76:97:8e:f7:
fe:9d:4a:0d:54:2e:e2:68:32:09:19:40:1b:fa:e8:
5f:8b:66:7e:3c:70:8a:49:ce:f4:e5:18:09:ec:57:
64:fc:dc:d6:6c:ed:8b:91:b8:d6:5c:67:0e:8a:4d:
72:6c:00:71:dc:b0:60:a9:78:b7:d4:79:a5:2e:47:
e5:10:ee:57:6d:54:59:3a:6c:4e:31:df:26:14:56:
d0:17:4c:6b:94:c0:51:3c:3c:60:73:d8:ee:7a:8c:
1f:ee:ae:00:a9:14:ff:1e:8b:f7:93:91:aa:e6:ca:
b7:f5:b4:4f:bb:40:ef:62:ee:6b:74:1b:e4:98:ea:
5b:c5:9b:ce:34:78:20:40:4b:6e:42:65:79:60:a7:
dd:cc:ec:5d:5f:1e:5f:4f:03:09:3d:4f:77:cd:2b:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:8A:06:22:F1:0B:D4:DD:5D:DF:4F:8B:6C:9C:31:EA:71:2A:1B
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:c3:ff:06:c8:51:f4:69:2d:d6:bf:4e:5b:40:2e:9c:a9:
39:e0:b4:e5:aa:cc:88:72:6e:c8:83:06:97:0a:61:fc:cc:bb:
17:e7:6a:b1:11:31:a4:d4:2e:68:71:8e:65:13:c0:ee:d3:8d:
3a:ff:21:91:5e:47:07:33:6a:1b:21:87:0e:16:1b:b9:5c:46:
27:e2:27:6d:f2:3f:80:50:d7:f0:9f:09:dc:f9:3b:2a:23:ac:
97:22:57:3f:d6:c0:6d:83:4d:02:8c:14:4c:87:8c:9e:73:56:
66:39:49:31:d3:d0:7b:fe:29:3d:23:3d:40:c7:94:a3:03:65:
0f:b2:44:98:88:5a:b4:85:36:fe:b6:bc:9b:08:59:1c:8b:37:
66:29:56:e4:a2:a8:1b:e5:9a:15:76:c2:55:59:24:35:6b:fc:
9e:40:2b:9a:21:0c:42:7c:2b:19:2e:26:db:d2:f4:77:28:10:
9f:93:62:d9:90:01:74:55:8b:c4:cf:f6:fb:82:e6:23:07:0b:
13:3b:e4:4b:df:4c:f2:6d:df:74:9d:fb:3d:4e:2e:a3:4b:04:
60:77:7a:1c:f6:6e:6a:65:2d:35:02:db:e5:ca:2c:07:64:19:
04:22:07:84:31:63:93:95:7d:09:16:35:4e:e1:f2:2c:5a:ed:
cb:24:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:30 2025 by rpki-client