Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: 4sVRMkHGOLzDT7KGvHm/BEngmtbGN6j71losPtcNcf4=
Subject key identifier: 2B:E5:A9:98:46:BD:51:12:CD:65:70:5B:BD:3B:B3:DE:01:C9:F7:68
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 01993349A4399AF090539A0740C568BA24AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 11:01:28 +0000
Manifest this update: Wed 10 Sep 2025 11:01:28 +0000
Manifest next update: Thu 11 Sep 2025 11:01:28 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: k1U8jI4tsS+fwDHr7fvO2OiV70XD0+NicYuc2lAOKMo=)
2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:a4:39:9a:f0:90:53:9a:07:40:c5:68:ba:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Sep 10 11:01:28 2025 GMT
Not After : Sep 11 11:01:28 2025 GMT
Subject: CN=2be5a99846bd5112cd65705bbd3bb3de01c9f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:06:c1:ba:a0:5f:cd:99:5e:87:b4:31:83:
84:03:bd:77:7f:1d:14:d7:15:fc:e8:3d:14:c1:cf:
64:c4:21:d3:a9:bc:cb:c1:bb:7c:40:65:2a:e9:83:
8b:d9:eb:b1:a5:0d:85:6a:a3:5f:ef:38:ff:14:7e:
49:29:4f:e7:8e:dd:35:c8:15:a7:d4:0f:5a:d3:b3:
bf:f2:a9:41:fe:e0:26:d0:64:d7:37:ac:6a:17:69:
76:02:9a:78:3c:16:a7:95:3a:6f:09:8c:35:af:f4:
87:06:21:df:65:b9:48:37:e7:7c:30:85:2c:e7:b1:
f1:30:f7:10:16:29:bb:28:72:7b:56:a5:cf:52:64:
6d:60:fc:75:47:da:d4:c9:1a:dd:98:1d:62:7d:58:
df:e9:c2:f6:53:a4:b7:f2:f5:a6:ad:c2:0a:f9:3d:
7e:3a:3e:23:f4:cd:e3:39:35:c0:d2:82:6c:2f:a1:
61:d2:92:19:86:98:12:b7:18:31:4f:9c:50:b9:d8:
a0:42:60:a7:57:c3:9a:03:42:9e:49:d7:8d:e1:84:
a3:0c:5f:3c:43:fc:74:34:26:07:ab:2a:1c:70:78:
8a:0e:cb:d6:26:a9:15:20:da:f7:dd:2d:f8:bc:09:
e5:5c:a7:5e:00:c8:dc:90:28:d6:10:fd:c6:be:93:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:A9:98:46:BD:51:12:CD:65:70:5B:BD:3B:B3:DE:01:C9:F7:68
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:2c:6a:25:f1:61:0e:18:9f:6c:94:56:7b:dc:31:ed:fd:
33:cc:41:16:8a:8e:49:90:69:e3:26:b7:5e:75:47:f0:17:96:
70:62:12:1c:29:b6:14:bd:02:ca:aa:a0:d9:51:32:d5:ed:83:
ae:d3:dd:49:e6:02:36:8b:c4:fe:d1:f8:2c:27:47:e0:3c:3e:
b9:e7:ad:83:01:97:53:cb:8b:30:de:db:51:b8:87:b1:04:fb:
57:a4:f7:aa:38:4b:79:a1:ea:b2:f6:df:a5:2c:47:6d:f3:17:
85:8b:d0:70:03:9a:4f:89:b8:0e:5a:48:a3:78:0c:94:00:dc:
a1:d6:83:ca:5d:da:9b:56:63:d3:4a:a8:83:4a:d6:57:cf:61:
ec:ca:99:98:51:8a:fd:72:de:eb:ab:4f:2e:54:fd:6e:e2:7f:
45:2b:98:34:aa:9f:c1:db:df:ea:b3:70:fe:4a:4c:4f:2e:5e:
1c:86:9f:83:be:19:8e:a5:2a:75:db:72:eb:af:56:bd:b9:98:
01:f9:32:ba:e1:73:bb:5c:cc:b3:01:ed:30:b4:4e:20:9d:91:
f1:2e:72:a5:20:84:02:03:63:be:aa:03:df:45:0d:7b:fa:98:
3a:e5:6d:8b:49:f3:e0:cf:35:f0:49:de:3b:07:dc:2f:9e:df:
a5:5d:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:25:35 2025 by rpki-client