Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: QVrKY09Hv/EPkFhMf/yi0MFuao2zZAD7jOgvcq3pgBQ=
Subject key identifier: B9:93:80:B1:30:3B:77:98:62:50:8E:2E:F9:43:36:60:F6:6D:79:B4
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019A7149AFD1EAA81F1FBE83A6B4C8515175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0436
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: 6gJy4vWJlMXO1PpbPtir7Qr22XkvH5Kday2d6lrBg2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:af:d1:ea:a8:1f:1f:be:83:a6:b4:c8:51:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=b99380b1303b779862508e2ef9433660f66d79b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:3e:1e:90:8c:26:1e:52:6a:ab:b6:78:61:
8d:09:5b:e9:1c:f8:46:4c:1c:b0:bf:dc:16:10:1a:
b6:59:ad:a7:9f:8f:c5:46:83:98:c6:e4:91:4e:1e:
c5:c7:7b:24:81:e4:fd:f3:1b:53:e2:7c:e4:cd:02:
e6:97:6c:77:bc:87:ee:d5:75:b4:d9:5a:c2:86:e9:
b9:ad:37:45:96:b0:e5:08:ea:a5:e8:ba:d0:c3:b1:
34:e9:d4:a3:33:86:d6:fb:37:98:19:f8:b1:48:0c:
e5:3e:9e:b6:6d:21:e1:bf:8a:fa:a1:b3:5c:66:70:
18:36:dc:c2:64:9d:46:da:99:9e:5d:f0:08:40:88:
9f:3e:ff:58:5c:53:15:2c:83:e5:7d:c0:ca:3a:05:
99:7d:95:a4:92:af:cd:e1:94:7a:a0:04:c2:83:e5:
28:63:88:c8:fb:80:70:aa:35:49:0e:ff:e7:92:fc:
e4:4d:39:c0:f7:8a:ae:df:21:39:bb:35:c9:96:22:
3d:4d:c1:eb:11:c0:9d:5e:91:b8:c8:29:10:19:39:
3f:ba:ba:ba:d4:b5:54:d6:69:19:f8:04:a4:99:4b:
2b:43:87:fc:45:b6:65:fe:c1:85:3b:98:17:ac:4a:
7a:52:ff:87:f5:e9:f5:1e:6e:ad:2a:d4:50:61:ff:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:80:B1:30:3B:77:98:62:50:8E:2E:F9:43:36:60:F6:6D:79:B4
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:46:a7:16:2d:49:12:f3:af:c0:6c:16:55:58:ee:04:49:
b0:e5:d4:ee:98:c6:ae:a9:7f:86:58:b6:d2:b7:7d:ae:07:b8:
74:53:fe:c9:71:d2:e8:41:e8:4c:bc:b5:f2:a4:9c:80:9f:e5:
e6:b5:d4:0e:8d:23:16:e3:e8:8f:88:1d:3c:9b:95:15:16:dd:
59:f1:45:19:5e:65:4e:74:73:b7:8d:33:a5:b2:8c:cf:c9:00:
55:01:24:8c:79:c8:eb:8d:90:fd:77:a6:0a:2e:b0:d2:57:f1:
ba:4f:2f:64:75:a8:08:a3:6b:6c:e3:d0:df:8b:8f:aa:d6:4e:
00:5e:4e:50:62:a3:62:48:7b:87:4b:3d:c0:17:66:57:f2:7b:
86:bd:56:c5:e4:8c:45:43:3c:8f:12:89:c5:27:32:52:37:6c:
57:e6:e7:c3:cd:f2:3a:a7:77:dc:97:71:00:6c:60:ad:ef:99:
9d:9f:31:1b:3b:6e:56:8f:bf:b4:80:0b:80:c9:ac:3b:66:0a:
22:34:eb:8f:6d:9a:a6:ff:4c:c4:26:db:71:e1:81:b0:01:75:
95:a9:d2:cb:d1:b4:f5:9e:3d:52:1b:95:cd:a3:a3:f8:fe:ea:
6b:db:08:e6:46:92:a9:30:d3:35:7e:ef:71:91:a7:4c:c8:bc:
34:2d:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:10 2025 by rpki-client