
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: IP1kvc/mFlXEzY8a/H6VbzBcvfNLewB/INhWc6vve0g=
Subject key identifier: 5B:15:A8:98:C8:86:C0:A0:5B:40:6D:03:EA:A3:F7:37:57:7B:8D:A0
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 01991688C61071A6F765D32BE5F983D422C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0F17
Signing time: Thu 04 Sep 2025 21:01:26 +0000
Manifest this update: Thu 04 Sep 2025 21:01:26 +0000
Manifest next update: Fri 05 Sep 2025 21:01:26 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: UvGdZI8o5GQKWXAfdtGWPJWgZ3n8SyXhK+KFlmkAbUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:c6:10:71:a6:f7:65:d3:2b:e5:f9:83:d4:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Sep 4 21:01:26 2025 GMT
Not After : Sep 5 21:01:26 2025 GMT
Subject: CN=5b15a898c886c0a05b406d03eaa3f737577b8da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:18:4d:e4:28:22:3b:24:11:9a:3d:ce:37:
3f:57:78:e4:6a:cc:c1:a1:f6:6d:7d:07:0a:9c:26:
0b:1a:80:ce:88:06:b1:22:06:12:d8:3c:21:cd:7d:
73:46:87:1a:d6:00:d1:ff:d2:1b:54:3d:e7:36:df:
c2:76:92:ad:cf:61:64:59:f0:0e:f6:51:c3:5f:47:
44:23:ab:d1:e0:44:15:fd:d5:7e:a3:88:81:e8:55:
b2:bd:c2:46:63:07:06:96:25:0d:07:ae:ec:e8:0b:
a6:28:39:a2:ec:48:14:62:35:8d:54:4d:56:54:7e:
15:c3:1a:cf:a1:4d:94:49:d9:85:82:6e:09:ee:3e:
b0:eb:33:e8:52:e1:85:48:28:d8:1f:ec:64:f4:d2:
6b:a2:95:16:4c:27:0c:ed:8e:de:39:af:d4:99:62:
e1:0a:62:f6:49:ab:bf:07:a9:89:d3:b4:25:b2:06:
b6:70:77:41:56:a8:2b:e0:4b:d3:0e:7b:32:02:16:
d8:95:99:2c:82:9e:d4:fb:bf:72:9b:8f:7f:7e:47:
12:93:a7:e3:cc:e7:80:0e:49:34:5a:5f:77:a9:da:
a1:7a:0d:1a:33:3a:15:8f:77:cf:1f:6f:bc:f3:6d:
78:f1:d6:40:39:00:1f:b9:ea:0a:cc:82:5b:e5:0e:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:A8:98:C8:86:C0:A0:5B:40:6D:03:EA:A3:F7:37:57:7B:8D:A0
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:3b:7a:8f:72:f2:1e:ec:13:6f:86:5e:83:3e:1d:43:12:
26:f1:1e:83:c3:3e:26:f5:c6:2e:36:db:58:6a:d2:c8:7d:2a:
fc:4a:da:83:c7:bb:8e:0f:0f:e7:67:b0:a7:00:db:c4:e7:ca:
ac:05:e4:89:f4:25:11:81:d7:c4:b9:12:ca:ad:18:ff:32:d4:
ff:60:c6:50:b5:33:e8:3e:dd:57:c5:c5:7a:87:0c:ae:84:83:
81:73:52:76:9e:0e:75:41:de:1b:77:e5:83:ee:f9:a7:56:9e:
a4:11:21:c0:ec:6c:b0:21:92:4c:de:95:84:54:ef:cf:c4:a1:
79:64:98:06:14:0d:95:5c:25:79:a3:84:d6:8d:01:d2:3e:2b:
f2:dd:13:6b:99:98:a7:f1:b8:51:96:5c:2e:dc:98:80:f4:3b:
2f:2e:f1:00:27:a1:68:6d:fb:66:27:40:bb:29:1b:da:81:a0:
66:d1:89:09:2e:75:d3:a4:e7:4b:ef:e0:2d:d0:9a:6b:20:e1:
45:69:9f:8f:55:a5:3c:71:7c:a0:1f:ad:68:35:ef:dd:48:40:
c0:82:58:6d:db:96:f7:0d:19:f9:cb:b6:ae:f0:bb:3f:3e:30:
15:ef:d6:16:74:17:6c:fa:73:10:b3:cd:e2:95:e6:34:59:a2:
9b:73:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client