Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: /rP//ju65ROp4J2qD8whpoyVuHn2JDAifZ8orBFWRhY=
Subject key identifier: EE:34:10:54:8F:94:A7:BE:3F:F6:11:C4:EB:EF:59:2A:BE:F2:20:A9
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0199FC8F8D4793A0CE8430919EF0EC6264DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: Fem3WX1ERPJgqqD4ThDi/0DuWzkAfhBrhNnnJD0yRS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:47:93:a0:ce:84:30:91:9e:f0:ec:62:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=ee3410548f94a7be3ff611c4ebef592abef220a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:70:a3:7f:78:30:c4:67:ff:83:cf:77:81:
f7:54:a6:cd:8c:1b:0f:78:b4:d8:5c:00:93:49:88:
1a:27:fb:6c:18:8d:3e:b3:67:77:1b:67:26:f5:78:
ae:25:cb:63:2a:24:fe:32:de:2d:e5:77:cb:b7:ba:
c1:3c:fa:14:fe:13:70:1b:79:4f:94:36:63:74:85:
e0:3d:9b:19:c6:11:37:ba:08:87:b5:d7:cb:78:75:
fd:39:a3:83:2e:ed:07:0b:d2:59:cc:7c:9e:63:48:
40:1a:47:2a:75:9b:a4:44:19:45:73:52:65:19:23:
3b:a3:67:28:e7:82:ca:60:92:6b:97:21:ca:95:0d:
80:3f:41:b8:ee:44:b6:4b:e5:c8:ea:16:12:2c:ca:
b9:2b:51:83:1d:39:f9:ce:b9:62:21:b9:6d:45:02:
7f:59:a9:45:b5:4a:25:c2:cd:b2:cb:f7:fd:98:63:
12:64:93:8a:9a:fe:f3:06:be:f2:9c:27:31:d7:a4:
b4:e7:ad:91:fc:88:a9:94:ba:af:ad:27:6e:05:e9:
d7:78:b7:76:b4:ba:ec:3a:c5:5e:7d:68:5d:48:98:
29:9c:83:75:a7:70:a5:d5:fb:76:b4:41:5b:fb:e8:
3d:84:46:d2:3a:93:5e:90:7f:12:04:d5:ce:9a:29:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:10:54:8F:94:A7:BE:3F:F6:11:C4:EB:EF:59:2A:BE:F2:20:A9
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1d:67:a3:2f:57:77:d0:19:2b:75:cc:ba:8c:c9:09:05:5d:
2c:0e:2d:d2:b5:72:91:fc:e7:fd:48:41:20:b5:1d:4b:8b:14:
a5:7f:06:51:33:6b:67:61:96:88:fb:12:02:fa:d6:c9:20:bc:
e5:d9:61:94:a9:de:1d:be:b5:21:95:92:13:59:01:a2:dc:b6:
13:12:7e:38:6d:ca:57:66:55:de:8b:8f:66:e4:0b:d8:44:9f:
39:ad:16:6b:c5:47:bb:dd:9b:b9:a1:da:27:8c:9f:98:08:d1:
ec:58:92:9d:43:c7:61:25:94:8c:23:bd:13:f1:2d:4c:bc:8d:
69:c3:d0:90:43:de:57:f6:c6:30:52:58:66:52:3e:d1:6d:e2:
dc:ca:30:18:31:27:96:be:90:ab:98:fd:4a:1c:5d:3d:52:ca:
9e:65:64:10:32:13:78:f1:49:31:be:12:c8:54:32:52:5a:31:
48:9a:da:42:c3:b1:90:c3:3a:c3:b5:c7:f6:1c:df:7e:71:6d:
ed:7c:b2:c7:54:00:53:d9:9d:57:ba:72:ae:73:73:b6:f1:60:
e2:ec:0f:b5:81:01:87:47:e5:8f:a6:ea:db:56:24:d8:e8:48:
98:e9:d2:44:49:ab:44:b4:a5:cd:06:5f:b0:7a:00:cd:49:4f:
07:e2:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:48 2025 by rpki-client