Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: Ox8PFpUhs5pMZJBuFSNl0o8yyQLNck4uGKWEccDDG8o=
Subject key identifier: 03:FE:85:A2:B8:F6:A4:01:90:D2:E2:E2:15:6D:78:BF:4D:54:ED:9B
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 0198E3E6839CA6EA15C4EB2982B8557F8C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: 0123
Signing time: Tue 26 Aug 2025 01:03:11 +0000
Manifest this update: Tue 26 Aug 2025 01:03:11 +0000
Manifest next update: Wed 27 Aug 2025 01:03:11 +0000
Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: ipqp5gWSqKzQc59BpaIpGUbtLBKpPiTLlvzr4vuOalE=)
2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 01:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:e6:83:9c:a6:ea:15:c4:eb:29:82:b8:55:7f:8c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Aug 26 01:03:11 2025 GMT
Not After : Aug 27 01:03:11 2025 GMT
Subject: CN=03fe85a2b8f6a40190d2e2e2156d78bf4d54ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:a9:1e:6a:d0:35:eb:9f:96:7f:1b:44:6f:
88:4e:8d:fc:5d:d1:c7:9f:0c:9e:2a:99:e0:f3:d9:
06:df:b6:8e:37:df:27:6b:15:6a:ae:6b:9f:d2:6c:
94:54:09:10:81:5a:3c:06:41:78:58:76:77:2f:dc:
3a:f5:c4:6f:86:24:ed:12:8e:18:85:99:70:4c:b1:
b7:f3:9b:03:4b:86:2d:8c:ea:75:3a:8a:c8:f3:d0:
af:ad:f7:17:f1:6a:7f:86:3c:b6:b4:fc:18:93:12:
01:ba:77:17:30:c2:5f:96:19:6a:ac:41:7a:e4:ec:
d7:ea:c5:5f:57:59:43:61:82:2f:a2:cc:75:4d:a5:
af:e9:52:6e:c3:5f:b9:5f:0b:7a:db:15:48:2f:73:
1b:9e:7b:1e:c9:69:f3:d0:4e:47:bb:09:9f:aa:fa:
b7:9e:9f:3b:b1:ac:02:a6:97:06:b9:dc:c8:03:b5:
9b:f3:38:b9:4f:28:1a:b1:4f:f3:f2:12:70:c6:3d:
ba:cb:4c:53:a9:51:1e:e5:5f:32:b8:33:3c:b5:47:
36:58:7f:ef:03:98:bf:f6:66:0a:a3:bc:10:55:16:
62:4d:de:b1:50:47:32:80:7c:e3:fc:91:48:bf:52:
47:24:a5:8c:19:7d:9b:d7:80:8d:60:8d:c1:ee:23:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:85:A2:B8:F6:A4:01:90:D2:E2:E2:15:6D:78:BF:4D:54:ED:9B
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:66:5f:16:43:1d:a9:49:c6:cd:46:e2:0e:cb:09:a3:fa:60:
26:72:93:19:11:61:7d:8c:05:ab:52:e8:37:8f:78:39:40:3e:
ce:72:72:fb:72:76:af:7f:9b:20:1c:18:48:b6:85:d2:d3:12:
8d:d6:b3:1e:f6:65:6c:db:4c:77:d5:18:de:dc:69:2b:c8:d0:
ba:24:f6:87:25:2a:5b:fb:d4:d9:7d:4f:e5:1c:29:46:8b:5c:
be:29:66:c9:81:ff:12:94:c2:27:c5:97:30:91:1b:62:b2:34:
94:ca:2e:e1:62:1f:e1:cc:81:07:84:fc:d6:03:e8:3d:b0:c2:
e6:7b:4e:42:28:11:1f:60:ee:31:6c:7a:a3:9b:b7:46:49:f6:
07:e7:37:12:61:aa:4e:78:9a:02:5e:31:7d:14:ef:95:c8:4c:
81:ce:14:64:7b:9a:ce:2a:5d:24:c4:68:7d:d0:92:89:03:be:
4e:8b:ce:06:15:4b:b3:4a:37:13:f1:1f:c5:0c:d3:a2:c9:65:
cb:b7:29:87:be:85:52:60:88:17:8d:2b:bd:19:74:19:be:ed:
4e:fb:14:1b:6f:a2:b3:22:27:7a:52:53:52:25:5b:0a:e4:ea:
53:c9:97:54:30:00:27:04:9c:e5:3b:ce:b5:a0:01:69:8d:69:
e8:c3:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 10:35:21 2025 by rpki-client