Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: HbvkLo6ij/Sh2EVljr0SWW/XUKf6xDjA7duwh/y3ygg=
Subject key identifier: 72:86:5D:31:F9:22:F5:1E:B5:35:08:AD:B0:60:16:4C:10:A1:43:4A
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019923317A7656358526A8260C35EF768B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0389
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: oO7NVygdcpTkXIH4AvID8ajeDpCyzB3vxL7eKqHBTio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7a:76:56:35:85:26:a8:26:0c:35:ef:76:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=72865d31f922f51eb53508adb060164c10a1434a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:db:0a:4b:68:3a:4d:de:2b:d1:46:23:a3:
e6:a5:26:c7:bf:27:72:5b:83:ae:18:0f:b9:94:61:
0f:9b:2a:5b:2b:93:e3:c3:6a:ff:f2:06:eb:25:a0:
82:90:77:a1:4a:e4:e8:0a:9b:ed:d4:e4:4f:4f:d5:
1c:23:f4:c9:1b:63:f5:05:98:45:6d:e8:60:43:19:
6b:0d:ae:31:bc:8a:f1:2e:b0:77:c6:16:d9:bc:52:
90:5c:00:c3:97:52:c8:78:ea:7c:fb:d5:3d:5c:5b:
de:1c:21:94:e4:c1:cd:ef:9f:16:71:9a:3b:e5:9c:
a4:04:c1:8b:24:47:cb:19:96:55:8a:91:11:64:eb:
54:90:eb:92:58:1b:b7:49:a7:d7:bd:59:28:d4:8e:
8b:5e:59:a2:b1:bc:fe:7e:fe:eb:e8:7c:95:fb:3d:
16:af:20:c2:a6:85:97:12:12:ca:cd:21:ba:46:84:
84:70:5d:e5:3d:56:49:fe:85:d7:81:af:a1:0c:97:
f2:0b:7b:0e:d0:7c:0f:01:b7:d0:50:73:36:04:96:
03:23:4a:83:bc:6e:4f:7f:c1:78:40:37:c4:e6:e0:
7d:40:30:a4:31:89:f9:9d:5c:cc:61:e8:93:34:67:
db:86:b4:e5:d2:af:af:8b:23:3e:be:6a:c4:bb:cf:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:5D:31:F9:22:F5:1E:B5:35:08:AD:B0:60:16:4C:10:A1:43:4A
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:75:8b:b7:82:b9:52:31:71:50:9c:23:98:7a:82:98:db:
b0:2e:57:ae:19:63:bd:0d:fb:17:7d:6b:3a:f2:6d:2c:87:62:
98:b8:54:3d:43:f7:bd:78:58:70:80:0d:35:c1:16:bf:46:85:
9b:d2:ec:30:e5:c5:99:56:3f:b5:f7:4b:f3:20:d6:f2:21:b3:
17:52:ef:31:4b:ab:de:e2:92:65:34:83:52:7f:fc:de:17:f8:
41:2d:96:f7:40:41:fa:51:67:5a:8f:f3:13:e7:5f:dc:9f:ab:
8c:53:9c:46:12:2a:1c:6b:35:a3:2a:47:0d:0e:e8:13:6e:b3:
fe:11:2a:5d:ff:76:96:f1:ab:d0:0d:1b:a1:fd:59:8a:1e:d1:
da:28:37:36:84:35:a8:35:b6:aa:af:ed:33:d4:6f:29:f3:34:
bd:ce:45:ac:1e:0c:f2:03:10:ce:6d:9e:f7:7a:c2:06:07:a7:
7f:52:c8:2e:88:99:a7:4e:88:de:97:16:41:39:c8:96:c0:2c:
4e:13:f7:c9:73:dc:94:de:c7:ec:a5:a7:44:7f:43:43:bf:36:
d1:01:d1:cc:c0:96:64:ee:c9:56:b5:60:93:95:52:62:3a:5a:
52:84:a9:9f:d1:7e:78:80:7b:a8:f0:1a:3a:94:1e:95:b4:07:
48:d6:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:42 2025 by rpki-client