Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: FwcwVqsoheNBgCadsm1bLHRXnWiuQwwhHiEXJktKtg4=
Subject key identifier: 76:07:D5:93:EA:F6:9F:81:25:C4:0F:CF:FC:9A:76:1C:25:9B:35:DC
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0198D65F916683CDB743CF60DD305D959246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: dogOCdBxkPx6qjig/4jY/MVR/u8BcVfuFNxRmyId7uQ=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:91:66:83:cd:b7:43:cf:60:dd:30:5d:95:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=7607d593eaf69f8125c40fcffc9a761c259b35dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:83:7a:2f:13:60:2a:a6:17:82:56:b9:e4:
26:88:09:aa:8a:f6:20:63:cf:e3:ae:02:dc:72:af:
37:3d:41:12:d9:02:e6:3a:f8:aa:f3:8f:d2:5b:9f:
82:33:82:6c:d3:2f:8c:d3:d2:3d:ee:22:71:bb:88:
09:e9:52:6b:da:40:f7:77:e9:af:6e:56:1d:94:bd:
13:50:b3:31:90:a3:d9:13:f9:ef:38:5d:48:33:0d:
1c:b6:31:75:74:a2:57:96:ff:2a:4a:38:64:30:6d:
5b:cb:02:30:6f:7f:45:0c:f3:46:53:20:d6:7f:d6:
5b:c3:1b:3d:c5:d4:c5:9b:27:a6:4d:37:60:a8:35:
4c:71:1e:99:f2:e2:6d:29:08:31:03:86:34:5f:7b:
7e:e6:08:c1:f7:f7:e4:bf:f9:37:53:e6:33:b1:4b:
71:44:93:0e:39:7f:59:79:dd:3d:d9:cf:e1:6a:2e:
21:62:57:ef:f1:89:86:d4:8e:60:58:62:da:9e:ee:
9f:8c:53:54:2a:2f:e2:4c:10:23:78:3a:09:32:64:
92:37:80:6c:cf:c0:5c:2a:5b:88:c9:58:b0:bf:86:
63:dd:c1:20:cb:a1:09:2d:ba:88:d4:8e:de:f2:44:
9b:58:dc:55:5e:2d:c1:b1:e3:0a:2c:fc:98:92:8c:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:D5:93:EA:F6:9F:81:25:C4:0F:CF:FC:9A:76:1C:25:9B:35:DC
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:97:55:ad:c0:3d:fb:88:33:91:5e:74:f8:7d:12:cf:dd:
76:89:07:99:02:9f:e5:3d:a7:0b:10:0c:11:3b:89:c9:25:96:
2b:7f:68:a3:7a:07:a6:20:2b:5c:c4:d1:44:73:0d:75:47:45:
ff:5a:fd:8f:f1:13:fa:3f:3e:52:05:a9:82:5d:0f:fd:a5:c8:
b4:e5:dc:cd:7a:78:7d:54:16:d2:00:30:9e:63:a6:a9:70:f8:
9c:17:75:31:d9:6d:a4:d6:80:13:ef:3d:d5:8b:6d:4a:50:b1:
34:39:2b:1c:79:cf:e3:12:7b:e7:89:27:bc:88:87:36:47:92:
a5:f2:65:cf:70:d1:2d:98:3e:74:2d:70:76:c5:fd:88:42:e8:
89:a9:2a:e6:6f:89:08:8b:f0:73:54:e8:f5:33:91:26:c3:ea:
cb:ee:10:60:ad:0b:b6:d4:59:c1:0e:e6:5a:a2:4d:bd:ae:69:
f7:9c:64:a7:82:5c:76:c6:6c:35:59:e1:6d:dd:63:2a:6d:26:
17:e5:a0:44:d9:1e:ba:c8:d8:d4:39:11:5e:4a:64:de:70:88:
da:a9:d1:82:d2:a9:fe:ee:c0:b9:b4:81:69:82:6e:c4:36:28:
58:44:1d:3f:f5:da:fa:42:e1:0d:66:91:7d:18:1c:3b:9f:2c:
a8:42:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:08 2025 by rpki-client