Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: yqdfqMjecFH5/rk5d86Pn9kR2kiyBJz1wUc02oY68BI=
Subject key identifier: 6D:5A:E9:49:CC:BC:CE:BC:B9:CE:A3:27:0D:77:4C:2C:D4:A8:30:0A
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 0197B8211B04746D3CEC2745C874CB8DD60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 1B
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: N0ujqgYT2w+SsC2v2wzyvsYInBxVfCRdgBdAXKN351U=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1b:04:74:6d:3c:ec:27:45:c8:74:cb:8d:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=6d5ae949ccbccebcb9cea3270d774c2cd4a8300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:92:63:30:1c:6c:bb:42:31:4b:a5:27:94:
88:dc:d2:04:5d:57:e8:bb:49:6f:6b:03:56:c5:4b:
89:44:60:d5:40:b0:a6:ed:95:59:54:90:ba:ea:32:
58:19:a7:7f:98:66:c9:5f:49:92:2f:ac:2a:4b:a4:
0b:8e:2b:1a:ba:ca:30:ac:51:be:ad:d2:8f:b2:63:
1d:1b:ee:03:2f:50:63:d9:05:97:f4:2a:86:5f:05:
83:be:89:c1:1b:06:fa:70:02:fe:63:9a:28:2e:1b:
f6:43:63:9b:e8:92:e1:f8:74:51:d2:0e:52:6d:48:
39:8a:88:d1:0d:76:a9:5c:c6:16:fb:99:03:af:65:
27:88:cc:b3:c7:64:76:7a:83:0d:ab:e8:99:0f:4f:
bf:b7:26:4a:05:85:2e:04:74:2a:39:75:a9:45:dc:
8d:ba:8c:61:38:46:75:07:7d:1e:84:3c:26:c5:28:
39:c7:f7:a1:c1:12:5d:ce:f5:00:3f:1b:f6:6d:15:
21:8b:2b:19:b3:5e:10:8e:6e:67:11:15:5e:13:a2:
5f:e4:cf:4e:83:55:8e:94:40:f4:75:3d:76:f3:b0:
09:54:68:e3:2d:3f:a2:16:ec:2e:86:99:2f:c7:4e:
17:f2:33:3c:29:5a:b4:23:32:3a:96:50:b1:16:e3:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:E9:49:CC:BC:CE:BC:B9:CE:A3:27:0D:77:4C:2C:D4:A8:30:0A
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7e:5a:08:26:8c:8c:ba:65:0d:2a:aa:a8:f7:89:a2:d6:3c:
38:1a:f6:6c:56:04:1d:3a:c1:88:28:82:d4:ac:d2:f0:60:9f:
4a:96:23:83:3d:f0:de:d9:70:d5:9b:7d:51:1e:f9:48:2e:ee:
31:ae:8b:b6:fa:83:84:f1:fc:55:f2:fb:1e:8e:1c:e6:63:29:
da:67:66:45:fe:5e:f0:ec:ef:a3:d3:17:61:36:c5:d4:cd:fe:
79:cc:52:b3:e7:b6:10:15:91:12:41:60:86:c5:77:7f:14:c8:
c1:bb:03:58:95:1a:a7:1b:4c:0e:6e:b7:e5:26:8d:ad:11:b7:
a4:8c:00:ca:f4:df:f1:8f:84:3b:08:34:68:cf:00:90:35:b0:
db:ca:51:00:08:bd:c2:7c:38:aa:67:87:e5:59:90:2c:6e:bc:
b1:b9:88:ed:b4:84:38:00:a9:d3:21:23:bb:0a:d5:8d:0f:28:
ec:94:aa:ed:77:0a:04:9a:d6:22:0b:09:8a:6d:e7:e6:69:f9:
57:a6:80:80:38:ce:e8:74:bf:a5:2a:47:78:ce:34:36:4d:ad:
be:38:f4:b1:b6:50:88:3e:62:50:9e:df:58:94:01:b5:0a:71:
c5:7b:f5:f3:f8:72:59:6b:97:de:36:34:51:d0:d1:40:02:99:
5f:b1:ad:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IRsEdG087CdFyHTLjdYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjUwNjI4MjAwMTA2WhcNMjUwNjI5MjAwMTA2WjAzMTEwLwYDVQQD
Eyg2ZDVhZTk0OWNjYmNjZWJjYjljZWEzMjcwZDc3NGMyY2Q0YTgzMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXCSYzAcbLtCMUulJ5SI3NIEXVfo
u0lvawNWxUuJRGDVQLCm7ZVZVJC66jJYGad/mGbJX0mSL6wqS6QLjisausowrFG+
rdKPsmMdG+4DL1Bj2QWX9CqGXwWDvonBGwb6cAL+Y5ooLhv2Q2Ob6JLh+HRR0g5S
bUg5iojRDXapXMYW+5kDr2UniMyzx2R2eoMNq+iZD0+/tyZKBYUuBHQqOXWpRdyN
uoxhOEZ1B30ehDwmxSg5x/ehwRJdzvUAPxv2bRUhiysZs14Qjm5nERVeE6Jf5M9O
g1WOlED0dT1287AJVGjjLT+iFuwuhpkvx04X8jM8KVq0IzI6llCxFuOx0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1a6UnMvM68uc6jJw13TCzUqDAKMB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb35aCCaM
jLplDSqqqPeJotY8OBr2bFYEHTrBiCiC1KzS8GCfSpYjgz3w3tlw1Zt9UR75SC7u
Ma6LtvqDhPH8VfL7Ho4c5mMp2mdmRf5e8Ozvo9MXYTbF1M3+ecxSs+e2EBWREkFg
hsV3fxTIwbsDWJUapxtMDm635SaNrRG3pIwAyvTf8Y+EOwg0aM8AkDWw28pRAAi9
wnw4qmeH5VmQLG68sbmI7bSEOACp0yEjuwrVjQ8o7JSq7XcKBJrWIgsJim3n5mn5
V6aAgDjO6HS/pSpHeM40Nk2tvjj0sbZQiD5iUJ7fWJQBtQpxxXv18/hyWWuX3jY0
UdDRQAKZX7GtnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:50 2025 by rpki-client