Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: lzKRMnzwyc02nFXDtN9SrSg4Wx50d0Mv+MRiuuIlRwQ=
Subject key identifier: 00:87:70:E9:DB:C3:FF:08:49:59:CC:9E:D7:FE:9D:38:63:27:1F:81
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 0199225517B142259485836585976506677C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 0470
Signing time: Sun 07 Sep 2025 04:00:25 +0000
Manifest this update: Sun 07 Sep 2025 04:00:25 +0000
Manifest next update: Mon 08 Sep 2025 04:00:25 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: OXqwRgruemesk5i28AuQE9UTUzrdRWXV1gVawlcrc6Y=)
2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:17:b1:42:25:94:85:83:65:85:97:65:06:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Sep 7 04:00:25 2025 GMT
Not After : Sep 8 04:00:25 2025 GMT
Subject: CN=008770e9dbc3ff084959cc9ed7fe9d3863271f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:4a:31:1a:b2:10:31:11:eb:7c:e6:dd:db:
68:f9:18:2f:e3:3e:a4:0a:c9:65:79:64:aa:6b:c5:
66:36:54:d8:54:e5:07:26:ce:9b:f9:da:e9:8f:d4:
66:78:c9:7f:cb:45:c2:5a:4d:54:3a:c3:d0:1f:bf:
67:88:b4:1d:06:2c:66:03:9b:d1:d7:63:be:db:53:
56:4d:fe:96:e3:cc:c8:04:e8:b5:d7:df:c7:70:e3:
c2:42:14:b9:3f:c6:83:bb:cd:bf:53:1c:8f:26:db:
23:e4:3e:ac:1a:cb:e3:4e:c8:3a:84:2c:95:67:71:
bf:c1:c0:aa:fe:33:34:df:51:f5:ce:8c:25:d0:7c:
d5:16:57:34:b1:44:b0:17:ee:4e:da:b7:f7:48:1a:
61:5b:be:19:dc:49:2d:57:e6:c6:3f:e8:7e:67:46:
5e:a6:2b:23:87:dd:4b:c4:65:1e:8f:17:f1:98:ce:
9a:1a:2f:e3:a8:f8:44:c2:1e:43:79:56:9d:d9:11:
50:e4:4d:25:25:f6:1a:17:1c:92:7a:dc:86:83:ca:
46:03:43:12:42:02:c6:b6:e0:52:32:af:41:d2:17:
65:20:4e:a3:21:2b:9f:0a:51:7a:fe:5b:a0:69:26:
66:9a:2f:15:f3:5a:2b:7b:a7:05:3d:c5:e1:6a:40:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:70:E9:DB:C3:FF:08:49:59:CC:9E:D7:FE:9D:38:63:27:1F:81
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:b5:a0:11:2e:69:40:90:ca:29:ee:68:7c:28:e9:0f:b0:
c3:cf:45:db:67:e8:bc:ca:45:c9:ba:78:13:94:cf:ba:da:34:
29:a0:90:ee:8a:04:f9:a0:79:d8:a4:08:0c:db:30:85:8c:cc:
a0:ee:be:d4:b4:ee:33:75:b6:5c:5f:27:5a:dc:41:c8:eb:de:
be:2d:f2:2a:32:53:f8:ce:ff:32:6d:3a:c0:ba:e0:25:60:79:
44:4a:2e:ab:90:9e:3f:a9:9e:7c:9d:20:34:c8:01:6c:b3:87:
a5:20:5f:f0:e8:4a:cd:ee:77:c2:8c:99:5d:69:08:1d:09:3e:
67:8d:a1:39:ce:e5:8b:fe:81:ad:14:83:13:f4:48:65:3b:a6:
f2:66:6c:f9:85:9d:05:39:c1:f1:14:b2:d1:13:9e:36:96:7d:
e2:06:6d:f5:4f:07:ba:e6:cf:34:14:a9:19:8d:d9:f2:50:40:
f5:e5:54:37:7f:54:b6:e9:99:75:a9:a1:af:f2:b2:c7:7f:32:
44:1a:68:94:ef:0f:61:6e:2d:38:79:0a:c0:68:20:8e:f3:22:
ab:29:63:d1:9a:97:2d:f1:3f:29:47:6e:15:19:55:a5:31:f0:
8a:6c:d2:cf:81:a8:ac:bd:84:de:ce:4b:8c:ae:6d:46:3d:e6:
d8:a9:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client