Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: Ez4JtKptcaCWQ6nPgeo93fUibQ8xH7QaJaPWHTyU6bk=
Subject key identifier: C6:36:DA:27:97:69:87:6D:85:15:BF:40:DE:6E:F3:3D:24:C9:9A:80
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019921B0FD79FF5B9AE401B7F67886BD32AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:01:11 +0000
Manifest this update: Sun 07 Sep 2025 01:01:11 +0000
Manifest next update: Mon 08 Sep 2025 01:01:11 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: g+/jZmO5lTcqY1ejEgoPwKkgVuAF5StE+vaoMByjjcU=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:fd:79:ff:5b:9a:e4:01:b7:f6:78:86:bd:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Sep 7 01:01:11 2025 GMT
Not After : Sep 8 01:01:11 2025 GMT
Subject: CN=c636da279769876d8515bf40de6ef33d24c99a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:6e:e6:2c:cc:53:fd:a6:c1:54:ff:20:1b:
05:0e:39:71:e7:bd:66:ee:31:4f:fc:ff:42:9c:54:
5d:cd:a2:d2:9b:c0:97:e1:98:52:3a:d4:d3:ff:56:
d8:af:2e:f9:26:a7:83:2b:be:d7:e0:5f:15:8f:7e:
7c:61:e6:49:a4:17:50:8d:b4:c1:46:84:51:4d:ac:
7f:2d:fe:bf:43:90:07:8d:42:00:8f:0a:cf:2c:2a:
47:b7:c1:b7:71:ab:8b:37:39:0b:92:b0:9d:5d:04:
07:6d:1e:a6:3d:9d:96:05:44:e4:fc:69:91:b2:9d:
72:2d:6e:de:9c:99:29:ef:cb:fc:97:c6:cd:9e:e0:
4c:f4:4d:81:dc:57:73:38:6e:a3:cc:38:9e:55:16:
b7:25:b8:50:9a:db:2d:4e:42:d8:4f:0e:aa:a4:54:
bf:32:20:35:c5:11:b1:94:bf:92:0d:b7:b8:2b:0b:
e2:ba:ba:ab:dd:77:22:81:d2:3c:c6:cb:f3:52:36:
29:53:27:1b:e4:34:4c:b1:bb:81:5b:8d:6c:db:48:
33:23:df:7b:c1:4e:b0:e2:af:0c:ad:75:5e:f1:dc:
9c:69:61:05:eb:e3:46:53:70:9a:13:29:64:e0:a7:
0e:a0:8b:96:bf:0e:aa:7b:76:58:08:ce:31:e7:49:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:DA:27:97:69:87:6D:85:15:BF:40:DE:6E:F3:3D:24:C9:9A:80
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:97:5b:fb:10:14:55:ef:9c:05:d6:f6:bb:46:ff:a4:eb:
ae:ba:ac:cf:92:f8:55:be:fb:ff:7b:30:0d:fa:44:12:75:a7:
e8:54:3a:2f:14:07:25:a0:f0:1d:83:02:5c:5a:f1:3f:19:26:
40:24:58:e2:83:6d:be:a9:3f:96:d0:1e:72:c1:88:cf:82:45:
dc:d8:a7:a8:0c:29:4d:be:11:8b:c4:13:27:06:47:b8:eb:ff:
06:b0:ad:af:be:52:05:d9:ca:1c:09:62:80:82:d5:06:b9:e7:
38:35:a6:78:53:36:9a:8c:76:83:d5:ff:09:ea:7a:40:aa:7c:
5a:6c:06:21:67:09:75:07:d5:2f:c2:e7:7f:be:d3:08:09:e0:
9d:ea:88:29:ad:c0:ac:99:8f:41:13:b3:36:8a:89:9f:e5:e2:
1d:d6:04:5f:2f:5c:bf:7f:eb:47:91:4a:b7:17:48:96:4e:a0:
e2:b2:fd:dc:76:d4:d1:aa:73:79:35:86:54:2c:86:d9:db:41:
96:19:9c:b3:8e:b7:3c:0f:18:95:5c:82:16:61:62:60:27:47:
c0:3e:3a:0c:9b:fa:9c:af:b2:a2:6c:9e:7e:74:8d:68:e6:2c:
93:a8:74:33:3d:24:d0:20:c0:bd:3c:3a:72:96:cf:1b:f2:78:
56:85:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:51 2025 by rpki-client