Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: mQ/WRBrSVhr4LxQeFm5WdcHl766TEFQJ6r8eO2liPTQ=
Subject key identifier: 71:A3:F4:6D:19:8E:B1:42:BE:C1:5A:D1:B6:3B:AB:0B:9A:16:F8:B1
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019936F00E4A4184D94899D8930EA91F86EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0A69
Signing time: Thu 11 Sep 2025 04:02:05 +0000
Manifest this update: Thu 11 Sep 2025 04:02:05 +0000
Manifest next update: Fri 12 Sep 2025 04:02:05 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: zrhVuJf2nYwi3e6O3aa+wuGajbTT7DmhZsGy/f8rhr0=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:0e:4a:41:84:d9:48:99:d8:93:0e:a9:1f:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Sep 11 04:02:05 2025 GMT
Not After : Sep 12 04:02:05 2025 GMT
Subject: CN=71a3f46d198eb142bec15ad1b63bab0b9a16f8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:eb:af:cc:51:6a:99:e9:6b:15:a4:65:5a:
30:ad:e6:42:0f:87:1b:bd:17:dc:a2:cc:d5:3c:d0:
e5:6c:d9:9b:ff:f0:e5:21:06:50:d6:40:3c:96:f9:
47:fb:08:0e:6c:b7:fd:77:54:6d:04:0b:bd:b2:b9:
e6:32:45:12:71:fa:7b:82:02:7c:75:a0:03:3e:1d:
35:ca:b4:dc:8d:f6:98:89:a4:73:1b:af:92:f2:ab:
d5:30:0c:38:2a:92:6f:b0:a6:72:15:8d:cc:4e:be:
c8:51:1b:aa:07:2c:f9:2b:f9:3c:78:18:22:7f:25:
94:78:38:9e:aa:e5:a9:7a:9d:6d:53:ac:7e:b2:4c:
46:73:a6:45:38:f7:ba:ab:33:34:0e:ab:f6:d0:c6:
84:92:e4:e0:98:d0:8a:3d:d6:c2:d2:7c:d5:06:bb:
e7:1c:88:00:2d:cf:66:b8:f5:68:ff:b4:4f:48:45:
a9:0e:d8:41:a8:b4:09:cf:79:8e:8d:81:72:8d:25:
ce:bb:0f:c0:e8:27:b1:8a:7f:22:f7:04:a5:83:58:
77:34:00:36:80:5c:ea:ae:92:f3:31:3a:d2:5d:08:
bd:85:30:0c:01:cb:9a:ae:ce:b0:e4:aa:ce:38:6c:
04:27:c6:55:2a:2a:0b:0e:41:af:8e:bb:2e:d0:e1:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:F4:6D:19:8E:B1:42:BE:C1:5A:D1:B6:3B:AB:0B:9A:16:F8:B1
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:2c:0b:69:ac:e2:43:26:b1:5d:cc:8c:a1:74:7c:de:97:
c9:e2:d8:6f:a5:86:57:9e:dc:e8:43:2c:76:b0:a8:e9:89:25:
f4:c8:4c:57:fa:96:28:d7:d0:4d:b1:ac:16:84:1b:3e:7b:b9:
19:d9:b2:14:9f:f7:aa:bf:17:bf:b9:7b:84:b0:85:9b:ec:d0:
6d:7e:09:b8:27:43:01:0a:ae:e1:20:30:c5:fa:3c:03:96:87:
59:6a:6d:74:70:e5:90:40:8e:cc:8a:96:f4:5a:40:cd:aa:58:
00:d9:95:9c:c6:1c:b2:e4:5c:78:81:b9:33:88:27:9c:c5:f2:
91:93:5a:05:26:fc:81:08:e7:fb:96:30:75:2c:b7:2d:68:34:
eb:41:ba:4c:51:25:37:ce:e4:58:ef:bf:ec:b6:18:22:57:e0:
1e:b0:95:72:a2:db:75:58:91:da:26:3f:ba:e5:3b:ad:59:a1:
76:86:eb:88:2a:47:c2:fe:b2:74:71:06:f9:4f:cc:82:13:f9:
d9:39:2e:9e:02:0c:d8:c9:93:3b:3c:28:6e:f7:71:5d:20:ec:
b8:c8:a1:77:9c:04:ab:2c:ec:69:97:5b:ec:0d:1f:64:68:39:
2a:d5:12:c0:11:b7:46:08:e0:ca:9e:d3:15:38:78:c9:f3:ae:
83:b9:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:00:39 2025 by rpki-client