Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: GYudT0d536WGd+CeUxCV4PUv0tHqEboJFfni6VqR0A8=
Subject key identifier: 63:A0:AF:A2:F5:6B:92:7D:11:00:6F:26:53:04:C9:A0:3C:6D:86:B7
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0197B88FB9D3D1D23D6385F61122F9A91573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: bRpmtVF+aDiN81B+a45lnP7Q2xKejBOG3RKI1FsuTY0=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b9:d3:d1:d2:3d:63:85:f6:11:22:f9:a9:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=63a0afa2f56b927d11006f265304c9a03c6d86b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:58:0e:62:37:68:96:bf:03:2e:78:1e:44:
a2:07:53:54:41:1b:71:a2:c4:f4:3a:52:22:d9:2c:
78:b2:4d:07:21:fc:2e:ec:2a:77:c4:ff:4a:f5:7b:
7b:27:f6:aa:5d:36:ff:61:54:04:07:85:5d:3a:0d:
bd:5e:f7:bb:18:b3:cc:fb:cd:24:4c:d2:f7:ce:1d:
05:89:34:b3:b9:f9:19:99:6c:9c:25:3b:04:79:71:
41:3f:79:bb:f7:e0:c4:24:5b:85:4f:26:e6:9b:b6:
af:ea:bb:12:9a:20:e5:55:bc:97:ef:f6:1d:53:eb:
1c:30:72:3b:06:ff:88:a6:d4:8e:2d:66:16:8f:82:
83:e0:8e:50:70:ac:56:c1:bb:4d:5a:28:47:ba:d2:
b0:ec:93:33:b6:89:49:e9:b3:1d:47:df:2c:fe:51:
b3:08:82:f0:46:02:ab:a5:a9:a2:a0:14:91:73:27:
f6:90:26:af:d1:fb:e2:a0:4a:45:c3:31:69:bc:67:
fd:da:ee:89:a6:4d:19:7a:5d:b4:6c:bb:34:b1:df:
f0:f8:63:22:7f:4e:42:0e:b9:5c:39:64:ad:52:f2:
54:48:f7:b8:43:a7:25:c6:5d:6e:ec:88:b5:e5:19:
58:5f:da:a6:96:18:ce:e4:59:ce:bc:34:b4:53:09:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:AF:A2:F5:6B:92:7D:11:00:6F:26:53:04:C9:A0:3C:6D:86:B7
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:e9:aa:66:c6:2f:f1:08:c5:fb:c3:2d:d4:07:d6:f2:8d:
c1:56:f9:71:e0:9b:a1:cd:b6:a5:c8:4d:1e:0c:f1:96:de:40:
35:ab:e6:e1:4d:1c:73:ff:c8:c8:ad:05:08:5f:23:ac:f7:97:
23:ca:67:f4:9c:23:91:f4:57:bb:3d:26:3d:b7:c4:4d:a5:6d:
c9:fe:e3:df:58:7d:32:6a:22:4a:23:ab:01:a8:c6:25:b9:85:
67:94:2b:c3:c2:36:17:76:58:f2:4a:56:ab:fc:86:30:a3:72:
76:36:7e:6e:63:ed:09:18:13:b6:5a:d9:75:92:6b:1c:80:7c:
1e:6c:a8:ac:68:98:77:90:ae:47:ad:64:94:18:89:da:44:e1:
e1:0c:08:b3:ab:07:0f:e9:10:c8:d1:8b:23:54:01:08:4b:c7:
11:42:d5:69:20:d1:37:e9:ec:0d:85:af:36:da:66:28:c5:7d:
c1:13:4b:f8:c9:83:49:d8:9d:95:67:e8:01:58:29:5e:2a:7c:
e1:5c:28:7c:fe:81:a8:d1:68:cc:32:cf:0c:31:1d:74:42:76:
aa:ae:19:81:d6:72:14:ce:e1:c5:c4:8c:b0:b4:84:3b:7d:d1:
0f:66:bc:a1:94:33:b3:a5:3a:7d:f4:e3:7f:d9:07:99:ef:72:
70:51:e5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j7nT0dI9Y4X2ESL5qRVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWI4NmY5OWUyZDZiZGUxNGZhODc5OWRlNzFjZTQxYjk4
MDIwYjkwHhcNMjUwNjI4MjIwMTU2WhcNMjUwNjI5MjIwMTU2WjAzMTEwLwYDVQQD
Eyg2M2EwYWZhMmY1NmI5MjdkMTEwMDZmMjY1MzA0YzlhMDNjNmQ4NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp11YDmI3aJa/Ay54HkSiB1NUQRtx
osT0OlIi2Sx4sk0HIfwu7Cp3xP9K9Xt7J/aqXTb/YVQEB4VdOg29Xve7GLPM+80k
TNL3zh0FiTSzufkZmWycJTsEeXFBP3m79+DEJFuFTybmm7av6rsSmiDlVbyX7/Yd
U+scMHI7Bv+IptSOLWYWj4KD4I5QcKxWwbtNWihHutKw7JMztolJ6bMdR98s/lGz
CILwRgKrpamioBSRcyf2kCav0fvioEpFwzFpvGf92u6Jpk0Zel20bLs0sd/w+GMi
f05CDrlcOWStUvJUSPe4Q6clxl1u7Ii15RlYX9qmlhjO5FnOvDS0UwkRoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOgr6L1a5J9EQBvJlMEyaA8bYa3MB8GA1UdIwQY
MBaAFAWbhvmeLWveFPqHmd5xzkG5gCC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNTg0MTYtMjc1Mi00MTU5LWFkZDYt
Y2MzZmIzNTFlMzM2LzEvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNTg0MTYtMjc1Mi00MTU5LWFkZDYtY2MzZmIzNTFlMzM2
LzEvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJTpqmbG
L/EIxfvDLdQH1vKNwVb5ceCboc22pchNHgzxlt5ANavm4U0cc//IyK0FCF8jrPeX
I8pn9JwjkfRXuz0mPbfETaVtyf7j31h9MmoiSiOrAajGJbmFZ5Qrw8I2F3ZY8kpW
q/yGMKNydjZ+bmPtCRgTtlrZdZJrHIB8HmyorGiYd5CuR61klBiJ2kTh4QwIs6sH
D+kQyNGLI1QBCEvHEULVaSDRN+nsDYWvNtpmKMV9wRNL+MmDSdidlWfoAVgpXip8
4VwofP6BqNFozDLPDDEddEJ2qq4ZgdZyFM7hxcSMsLSEO33RD2a8oZQzs6U6ffTj
f9kHme9ycFHl1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:54 2025 by rpki-client