Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: y7XO5KFxF7zTQxPDoRDub40R+0ghD2tMuAMKowUbXrU=
Subject key identifier: 67:10:9E:BF:CA:1C:26:D2:81:F3:C6:27:50:0E:26:81:9E:C9:44:26
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019A71B8A3803CFC42E225B2AA0CEA363192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: ynMlG40SRmJZ8cC3dXzYj4slnNAL0wZm/pUdVyqFoUg=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:80:3c:fc:42:e2:25:b2:aa:0c:ea:36:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=67109ebfca1c26d281f3c627500e26819ec94426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:03:f3:be:d0:bd:25:ee:5c:af:6e:a7:98:
9d:d2:94:7e:ce:59:e3:17:4f:9b:24:76:85:12:ed:
56:70:ad:57:66:e1:0d:02:7c:3c:13:b1:bb:d3:88:
d3:7b:86:f3:69:e7:64:12:68:57:f0:f0:ac:ca:f4:
43:77:d8:01:00:6f:43:d2:1a:43:49:8e:0a:f2:23:
36:e6:01:38:e0:84:69:9a:f3:03:8a:32:82:23:6a:
e7:12:8e:ed:00:a1:23:51:1a:e7:62:6a:32:f6:84:
fc:04:a6:5a:8c:43:21:e3:f9:0f:7d:a9:bf:c0:1d:
c9:1a:a0:7e:75:33:d5:cb:25:36:72:42:62:14:22:
1d:20:09:87:4d:0e:76:65:0d:28:19:99:3e:d1:53:
58:1e:f3:fb:0f:be:73:d4:39:25:dc:5d:a4:1f:ab:
36:d5:4c:41:b7:1d:9e:3b:24:26:f1:88:cd:d8:0b:
38:a9:e4:58:5b:68:c6:a5:d2:49:0c:90:ab:84:35:
64:10:fc:9d:8f:1c:15:56:9f:f1:33:36:22:00:7b:
12:f3:1e:6c:3f:66:ae:52:57:4e:b8:6a:83:81:4c:
28:8e:61:1e:de:ea:5e:37:5d:aa:f1:5c:13:12:77:
e9:90:22:1a:2c:db:44:5d:36:a6:b3:b0:4e:02:9d:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:9E:BF:CA:1C:26:D2:81:F3:C6:27:50:0E:26:81:9E:C9:44:26
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:cd:1e:e6:74:26:88:66:ca:c0:df:78:33:89:61:9c:e2:
bf:5b:e8:2a:91:6c:20:d7:1b:61:04:3f:6e:9e:de:4f:41:37:
10:c2:ec:ac:42:ca:56:fd:ee:69:be:da:6e:be:78:48:01:2f:
d7:a0:d2:fe:3c:7c:6a:46:5b:50:2e:a8:d2:47:7d:d7:b9:97:
49:ae:f8:fc:37:3d:4d:97:78:08:38:ab:fa:f0:40:0e:c9:6d:
03:ab:76:05:c0:24:89:9e:a6:86:b2:a3:5a:73:09:d3:e8:a3:
13:87:39:29:83:26:e1:32:ae:f2:67:66:75:da:10:ca:6f:5c:
b0:40:26:e2:ed:4d:e4:a8:86:32:2c:63:b8:0c:b8:46:b8:48:
c2:49:53:3e:d5:59:8c:e3:d3:8a:ec:57:4b:8f:ed:e4:01:28:
45:c7:62:3c:0d:0c:d2:11:8b:06:ef:d1:cb:3c:3e:22:79:4f:
53:e4:3f:65:fa:85:69:ed:b4:76:a1:2d:7b:86:c9:5d:07:2d:
d2:41:88:ed:7b:c3:02:1e:ae:f3:8a:4f:46:03:08:a8:7f:b9:
a2:7d:64:56:70:96:1d:d2:47:5a:8a:5b:b7:f9:74:2f:21:6c:
ac:cd:22:01:3b:25:0a:71:c5:4e:e2:cc:f1:d9:38:18:10:f9:
c7:fb:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client