Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: 3dAlaFDiEbhaAOR6UGWnRrtmpZyA3vtCksiGpDqEH08=
Subject key identifier: 26:21:CA:1C:87:72:AB:86:E8:05:2E:6E:4F:82:92:84:E2:BE:62:BB
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019A706E816B8AF4B6E4588A7D14C528BA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 051D
Signing time: Tue 11 Nov 2025 01:01:21 +0000
Manifest this update: Tue 11 Nov 2025 01:01:21 +0000
Manifest next update: Wed 12 Nov 2025 01:01:21 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: /nl3HVV8CFb9Ayr0KxIQXru5os0UgfZO0oD3gAdJMBk=)
2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:81:6b:8a:f4:b6:e4:58:8a:7d:14:c5:28:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Nov 11 01:01:21 2025 GMT
Not After : Nov 12 01:01:21 2025 GMT
Subject: CN=2621ca1c8772ab86e8052e6e4f829284e2be62bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:52:0d:14:7f:88:80:d5:4f:eb:f7:90:ad:
50:e3:35:4d:a2:25:36:fd:2e:be:15:d5:aa:1d:36:
d9:05:a9:ed:fc:59:58:fb:a5:fc:e5:a1:e7:10:ad:
fe:dc:e3:ba:c8:06:0b:89:54:75:92:67:6d:50:93:
6f:d9:e8:ea:70:40:43:86:ce:46:41:89:ad:c4:2d:
25:6b:86:d8:70:40:e6:b7:e9:14:e9:09:7b:62:59:
8d:8f:47:1b:78:59:6a:00:5a:80:fa:6e:9a:39:e9:
5d:96:d0:a9:a3:13:22:e7:bb:6d:75:8c:fd:b2:33:
5f:97:43:0a:de:c7:b4:95:e9:7e:63:f5:c3:84:6c:
f8:fe:21:be:0d:4c:35:b6:af:82:c6:b7:73:95:31:
3c:c7:01:ca:4c:d7:5f:4f:cd:3c:d6:82:a9:24:84:
bc:52:3d:c1:ec:03:4a:02:cc:64:21:86:9c:ad:df:
99:04:9e:c0:c1:fe:61:9b:91:38:3d:cd:1c:06:c7:
83:0e:b2:73:52:39:77:0d:5a:86:f9:bf:30:20:7a:
c4:16:c4:25:32:1c:70:42:d4:48:80:55:38:c8:53:
e1:1e:67:5c:ed:12:c8:0d:66:0f:6e:13:e2:c5:a3:
55:3e:3f:85:02:35:19:cf:e9:4f:fe:bc:a5:c3:aa:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:CA:1C:87:72:AB:86:E8:05:2E:6E:4F:82:92:84:E2:BE:62:BB
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:f2:5c:90:91:96:fa:53:a0:1b:91:d3:1e:69:24:fa:7e:
2c:cb:4f:f8:07:b1:e7:32:24:e6:19:27:87:19:63:23:df:f9:
03:43:07:94:e1:48:3d:ea:03:ed:3c:99:21:77:15:6d:df:28:
28:77:d2:0c:84:f3:01:ec:ef:c5:20:fd:f3:89:e3:11:18:df:
a9:fd:26:04:0a:a8:8d:3b:bb:f5:16:10:14:bd:a8:ec:44:b0:
30:b6:26:38:6b:23:32:51:88:8d:d5:5b:1c:ac:14:d7:23:11:
b3:37:06:f4:6a:9a:5f:b8:7b:3c:85:0e:62:84:30:f3:94:d8:
a4:54:61:b8:92:e5:fd:8f:af:2c:f8:7e:8a:ef:cc:6a:8e:fa:
82:bf:fb:f2:1f:75:e1:a4:e4:ad:e6:69:66:a9:a3:75:6c:d9:
ab:39:39:5e:ef:0e:7c:63:cf:cf:9b:a9:96:ef:ee:aa:c2:2c:
a3:67:5b:51:ea:d4:b9:84:03:da:82:9c:ca:59:d6:89:0f:55:
ff:09:86:60:5a:c6:a4:36:09:00:f9:b8:7a:26:3e:4d:c9:2d:
c2:df:a1:9e:69:72:00:5d:12:68:7c:d6:72:1b:01:8e:b1:dc:
eb:fc:f5:0e:42:ac:79:39:c9:28:df:04:29:76:46:5b:59:6d:
3b:06:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:37 2025 by rpki-client