Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: TddRuf2GVR5IHcGEJBmuh7zHqw89yOK7mnzKKS+c5QM=
Subject key identifier: 00:A3:81:30:87:24:6B:C8:0D:DD:29:4F:B2:A8:9B:F4:D9:FD:06:9A
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019A71B810CD22DFEF42EBE7E8E295E43C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: NGHmgEpHqP0/lG0jOl/XYff2RalHwKwJ5fOOoclZbuI=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:10:cd:22:df:ef:42:eb:e7:e8:e2:95:e4:3c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=00a3813087246bc80ddd294fb2a89bf4d9fd069a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:84:ff:b8:55:32:6e:1a:9b:7d:a2:31:b7:
c1:fa:38:c9:66:39:ba:51:b4:a8:3f:b2:41:d6:e4:
40:67:d6:5b:58:83:84:29:63:76:95:05:fb:e0:c4:
38:be:c5:93:03:40:6e:47:73:18:2c:02:a1:0f:8c:
03:e3:b8:02:e2:f7:69:5b:95:8c:60:eb:1e:2e:b4:
5c:48:9f:fc:31:73:37:76:1b:01:df:d0:f7:85:35:
93:95:dd:42:73:9b:18:5f:e7:bf:06:69:35:f7:dd:
d7:dc:74:d0:86:18:10:04:d7:1b:c3:2d:b4:1b:bb:
59:a8:2c:a9:6f:16:19:7a:5b:28:c6:bb:14:e7:8e:
b0:c1:a9:cc:c8:f2:0d:d3:30:3a:79:f9:bb:00:43:
2c:21:1b:c4:ae:3b:bf:2e:d8:c1:a0:d3:a7:5a:70:
f9:67:94:f1:86:b5:99:b1:2e:24:da:db:e9:4a:f8:
7a:c4:33:51:d7:cb:6f:42:c3:96:33:dd:18:63:82:
bb:0e:cc:df:80:83:16:f1:36:05:78:fc:6e:61:54:
e0:c3:35:0a:72:17:d8:d3:aa:f0:9b:68:af:06:9d:
6d:24:76:f9:f4:e2:4a:84:8a:6d:95:35:09:8d:30:
5e:51:87:d8:83:1a:46:58:5c:ae:02:34:ec:3c:15:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:81:30:87:24:6B:C8:0D:DD:29:4F:B2:A8:9B:F4:D9:FD:06:9A
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:79:8c:0b:d4:fa:e6:cf:51:c3:21:87:3f:f7:bb:f8:ec:
1f:39:85:24:cc:1d:12:cf:7e:a0:ab:d7:a4:7b:01:a8:52:22:
39:e6:d5:4b:39:9f:e9:8d:1b:cc:ce:35:0f:9d:7c:fc:7f:4e:
00:82:f3:ce:f4:31:4f:8f:eb:30:b0:7d:b8:99:46:a0:ce:f6:
a8:62:66:a3:48:a3:fe:26:08:a3:e4:d6:c2:96:e4:bf:04:6a:
82:00:fd:7a:42:d5:d2:39:8d:bc:09:2a:49:01:63:cb:6d:62:
e3:75:be:85:c7:f9:17:c5:82:55:eb:aa:ca:56:fe:af:9e:59:
17:6f:69:56:a2:a6:81:a4:56:6c:b8:f7:78:0c:3d:2c:84:64:
73:0b:98:93:a9:bc:2e:5c:96:95:77:e0:97:9b:ed:11:91:a5:
57:28:41:21:87:d0:79:a9:b2:b0:63:98:21:df:ff:23:b0:84:
e6:79:4a:5a:19:fa:2d:e1:67:5f:a6:1e:18:98:6c:93:72:1a:
63:dc:65:ae:08:53:91:fa:e4:64:21:a3:7a:a2:6f:2f:42:85:
ee:60:b7:44:77:6f:64:76:e2:19:1c:15:80:ef:e6:d8:f3:4f:
f3:e1:ce:88:60:f2:6e:df:ec:b0:54:2d:56:79:72:45:78:75:
db:d5:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:06 2025 by rpki-client