Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: ysWzGOwTXNUfv/uARAFKUG3IZNP6ewRi6uODk0mWHE0=
Subject key identifier: B7:BB:A1:05:39:DF:E1:FC:D5:A9:6C:AE:10:D6:07:BF:18:25:F9:FE
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 0197485560237A5F3A1E60AC014EDCA79246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 1256
Signing time: Sat 07 Jun 2025 03:00:44 +0000
Manifest this update: Sat 07 Jun 2025 03:00:44 +0000
Manifest next update: Sun 08 Jun 2025 03:00:44 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: aR8D6y48KgS7ud3cN3aNl36jiBGo4SZcEEVoobmnKB0=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:60:23:7a:5f:3a:1e:60:ac:01:4e:dc:a7:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: Jun 7 03:00:44 2025 GMT
Not After : Jun 8 03:00:44 2025 GMT
Subject: CN=b7bba10539dfe1fcd5a96cae10d607bf1825f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:58:8f:c9:3f:fd:33:4c:ef:59:e6:4d:10:
37:bd:02:4d:23:72:eb:2f:b2:46:80:cf:08:21:27:
fc:5b:9d:fd:b2:67:d7:e4:d9:1b:5c:b8:ac:1e:d1:
57:a4:4c:b2:1b:0c:9f:38:da:90:fa:48:02:22:de:
ad:c9:e0:65:66:26:f9:eb:8d:7f:04:0f:7b:0a:b6:
c0:74:79:9b:69:a1:a8:26:ad:98:3e:80:67:4d:03:
eb:f0:8e:b5:70:60:02:6e:b5:94:6c:f7:92:46:18:
9a:f5:14:7f:22:29:04:ad:2b:70:d7:bc:80:d7:3c:
f9:fe:19:97:49:46:95:5f:2a:89:16:b9:b4:e0:18:
f6:81:de:08:1e:84:92:58:35:c0:2d:3f:40:24:47:
a8:00:d7:21:8c:21:a1:a8:50:c2:86:d1:e9:b0:02:
69:0f:26:b8:8a:55:d4:3e:0b:49:6b:25:44:7b:23:
41:00:c6:5e:86:88:27:68:ff:a8:0a:cb:c9:d5:0b:
f7:9e:47:68:07:33:e2:60:11:00:8b:2a:03:4b:c5:
13:56:45:88:7b:23:dd:b7:44:4a:2d:ea:89:f3:79:
aa:09:1f:a7:d6:ad:70:d5:a1:00:19:83:35:04:ed:
91:59:2c:3c:27:e7:56:57:16:d4:32:a3:db:b6:03:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:A1:05:39:DF:E1:FC:D5:A9:6C:AE:10:D6:07:BF:18:25:F9:FE
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:97:a0:aa:e8:71:c9:4b:dd:d2:66:a8:f8:ee:16:ca:3e:
b5:a8:61:1d:6a:e8:be:d9:f8:ee:83:58:1d:92:c6:26:93:62:
d0:63:ab:c6:e3:3e:1e:42:91:5a:e8:c1:4a:0a:68:a5:03:77:
84:e2:9e:cc:e8:f2:80:9a:67:f4:51:9d:d5:89:21:21:8c:d5:
cd:c3:96:63:23:26:98:28:e9:de:d5:34:72:22:25:7f:55:75:
a7:5d:77:e3:02:ac:d5:f7:e6:c7:89:8f:d0:60:8c:e7:c9:7f:
61:90:5a:a4:c3:be:82:9e:83:ab:cf:52:da:50:39:6e:d2:27:
8d:55:6f:a8:f0:26:25:74:83:87:2a:0f:54:a8:fd:00:4f:a9:
2e:37:0c:9e:de:4a:03:33:ea:a8:8e:4e:26:b6:d3:10:16:04:
89:d6:08:38:b0:7a:39:b9:d4:ee:94:f0:8b:55:dd:d5:20:16:
fc:aa:09:8e:c9:f4:fd:44:cb:da:28:9e:ae:42:f6:25:e9:c1:
5a:5b:7e:c5:ac:48:a2:3a:6f:3c:31:c1:2f:39:73:46:69:ab:
58:07:36:d9:02:ab:d9:be:b5:0d:f6:e9:fb:61:df:a7:6b:20:
6a:c6:10:67:0a:e4:b6:7d:a6:4a:3e:12:cf:40:dc:24:48:21:
80:c2:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:37 2025 by rpki-client