Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: zKW6stQixRgt+AkzMhDKSa47izmY59ZL1x59LPKx7To=
Subject key identifier: 2F:F2:1E:33:6F:3F:BF:2C:79:85:49:5C:4E:93:64:06:90:22:4D:8B
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 0198D4046F4BD25ABF9DAD691ECDD0687ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: AE
Signing time: Fri 22 Aug 2025 23:01:57 +0000
Manifest this update: Fri 22 Aug 2025 23:01:57 +0000
Manifest next update: Sat 23 Aug 2025 23:01:57 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: nHSGjmdZxrhDYCoctizzJMjVFnT2INAEeonAZSD7Uq4=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:6f:4b:d2:5a:bf:9d:ad:69:1e:cd:d0:68:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Aug 22 23:01:57 2025 GMT
Not After : Aug 23 23:01:57 2025 GMT
Subject: CN=2ff21e336f3fbf2c7985495c4e93640690224d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:9c:55:13:27:56:f8:30:f8:99:d8:be:f3:
60:c4:5c:b8:86:0f:05:d9:bc:66:64:70:77:19:aa:
49:04:16:f8:53:7f:84:6b:54:a2:74:55:26:dc:e3:
a3:82:6f:fc:70:0f:b4:9f:58:00:b9:ff:c8:06:9d:
7e:46:bd:31:60:81:e2:51:d4:65:29:09:dc:b1:1c:
6e:ae:49:b5:f0:1b:03:1a:00:0e:b7:98:b6:1e:c7:
cf:64:6a:bf:ec:17:c9:75:71:81:c8:99:8f:87:d3:
17:72:39:cc:8c:ee:62:36:40:68:49:c1:11:2f:e2:
0b:ea:fc:d4:82:a4:49:aa:a2:9e:62:37:41:0a:e5:
a5:f4:13:57:85:19:92:d0:bd:d7:3d:51:2e:91:ad:
5d:17:af:8c:16:46:92:d1:a7:3b:4c:d5:90:10:3b:
ef:cd:5b:01:df:13:ba:12:44:d4:d7:c6:9b:82:0c:
75:ec:44:f3:48:40:9a:47:7b:23:bc:76:5b:e5:44:
d4:a6:42:b8:48:c7:ce:73:ec:56:a7:b1:04:eb:4c:
b0:fa:56:b9:fd:53:74:02:d7:83:8f:66:21:a7:0f:
d0:7b:95:82:47:88:6a:e2:77:26:be:da:b9:14:ec:
e7:d5:85:43:b3:42:f0:a0:3f:4d:ca:27:bb:22:ba:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:1E:33:6F:3F:BF:2C:79:85:49:5C:4E:93:64:06:90:22:4D:8B
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:e1:1c:f3:d7:51:87:63:33:ea:b6:1c:ce:57:cb:ed:1d:
1c:12:05:c7:1b:19:5c:92:f0:24:52:c7:e7:a7:db:fe:f5:8b:
d1:d9:3f:e5:d1:2b:18:83:9b:aa:00:e9:57:ed:61:4b:9a:a3:
8f:c5:c8:b3:09:a4:46:52:51:6f:cd:e5:b8:c9:07:f7:f9:5b:
03:7c:31:8d:82:a8:e9:35:7a:25:e5:84:67:61:e4:0e:9c:0c:
1c:c6:3e:b4:97:a6:f3:91:7e:51:66:6c:72:df:11:5c:fd:d2:
b8:b6:10:91:bb:4e:88:1f:cb:9b:5f:e0:4c:85:d9:d8:dc:58:
8b:27:07:05:2f:d5:72:4c:43:12:75:4f:c2:05:a3:22:c1:ef:
fd:75:40:de:9a:7a:7c:d1:a3:ed:b5:dd:7c:b8:2c:7d:52:71:
30:ea:f8:55:31:2d:08:0c:80:e9:b6:e7:24:a1:3f:41:4f:db:
ad:d6:aa:e5:9d:7c:37:c0:93:9f:ef:86:7c:7f:16:c5:46:42:
6d:27:93:a3:c8:55:50:22:e6:53:b5:b3:2d:e4:44:92:1a:7c:
e8:03:37:b1:f7:c0:70:b0:ba:7d:1d:cf:c9:05:78:98:71:d3:
68:eb:50:2e:c0:fa:ab:2a:76:31:a4:c0:cf:83:b4:49:75:ac:
74:d7:12:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBG9L0lq/na1pHs3QaH7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjUwODIyMjMwMTU3WhcNMjUwODIzMjMwMTU3WjAzMTEwLwYDVQQD
EygyZmYyMWUzMzZmM2ZiZjJjNzk4NTQ5NWM0ZTkzNjQwNjkwMjI0ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw2cVRMnVvgw+JnYvvNgxFy4hg8F
2bxmZHB3GapJBBb4U3+Ea1SidFUm3OOjgm/8cA+0n1gAuf/IBp1+Rr0xYIHiUdRl
KQncsRxurkm18BsDGgAOt5i2HsfPZGq/7BfJdXGByJmPh9MXcjnMjO5iNkBoScER
L+IL6vzUgqRJqqKeYjdBCuWl9BNXhRmS0L3XPVEuka1dF6+MFkaS0ac7TNWQEDvv
zVsB3xO6EkTU18abggx17ETzSECaR3sjvHZb5UTUpkK4SMfOc+xWp7EE60yw+la5
/VN0AteDj2Yhpw/Qe5WCR4hq4ncmvtq5FOzn1YVDs0LwoD9Nyie7Iro+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/yHjNvP78seYVJXE6TZAaQIk2LMB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR7hHPPX
UYdjM+q2HM5Xy+0dHBIFxxsZXJLwJFLH56fb/vWL0dk/5dErGIObqgDpV+1hS5qj
j8XIswmkRlJRb83luMkH9/lbA3wxjYKo6TV6JeWEZ2HkDpwMHMY+tJem85F+UWZs
ct8RXP3SuLYQkbtOiB/Lm1/gTIXZ2NxYiycHBS/VckxDEnVPwgWjIsHv/XVA3pp6
fNGj7bXdfLgsfVJxMOr4VTEtCAyA6bbnJKE/QU/brdaq5Z18N8CTn++GfH8WxUZC
bSeTo8hVUCLmU7WzLeREkhp86AM3sffAcLC6fR3PyQV4mHHTaOtQLsD6qyp2MaTA
z4O0SXWsdNcSiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:49 2025 by rpki-client