Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: 5F2O0S0Yr3U8las6T1UaUoYGuXSbn9/8rDegS9eE6Fo=
Subject key identifier: 5E:AA:40:6A:3F:15:BC:2F:47:A6:BE:97:86:42:CB:F4:51:2A:36:CC
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 0199FC58E28F82D2984D0C5116F0CF3364BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: /WpxTsrMKqrSj+SQInId2MrnK3AaHzUMGbFEB7ruJ5k=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e2:8f:82:d2:98:4d:0c:51:16:f0:cf:33:64:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=5eaa406a3f15bc2f47a6be978642cbf4512a36cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:15:52:78:3a:05:39:a8:48:7a:ce:fe:5a:
c2:5e:99:28:34:76:98:0c:ea:95:b7:47:e4:eb:78:
89:8a:eb:b0:95:96:3e:3e:20:c4:aa:0a:c3:79:e3:
fe:79:fe:8b:e3:0f:93:4a:d1:0f:92:98:02:0c:87:
9b:90:9c:db:50:0f:b8:69:d2:21:46:fc:6b:16:85:
1b:b2:db:aa:11:81:e1:25:34:15:65:3e:1c:bb:92:
8a:45:23:da:ca:88:32:d0:9a:1e:8a:83:4b:39:39:
28:2f:88:82:28:4b:0f:d4:85:f8:e6:c0:3b:eb:7c:
5a:af:7e:44:cd:25:ea:af:06:c2:e7:c4:89:48:87:
89:da:16:54:15:49:34:bc:4f:1c:d2:f8:34:20:0e:
0d:67:4b:fc:fd:3d:63:1d:d9:b9:32:3e:14:61:e5:
29:72:65:7c:b6:06:c1:7d:f8:80:f7:3a:67:eb:43:
28:9b:95:30:50:de:a9:80:4e:a4:4c:08:4d:25:c1:
ba:23:0c:03:95:29:95:df:fc:69:22:21:38:52:e7:
54:c3:32:bb:e9:15:49:0b:11:27:2b:d3:b6:0e:35:
bf:25:f6:62:b7:ed:92:6c:34:6e:d0:31:fa:36:1d:
32:46:8b:5c:f0:db:4c:f8:b1:79:1e:4c:34:b3:c2:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:40:6A:3F:15:BC:2F:47:A6:BE:97:86:42:CB:F4:51:2A:36:CC
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ab:94:cd:0c:96:1c:e4:7d:14:a1:b0:d8:a3:ea:7a:1c:ea:
31:1d:f0:a2:9e:3d:87:38:4a:d2:1f:33:fd:54:4b:72:07:d0:
98:c7:2c:bd:36:20:52:86:ad:f8:fe:df:fe:05:7e:9b:33:c3:
f7:78:6b:3e:ca:b3:52:21:e3:a0:f7:c3:bf:05:97:9a:63:7e:
83:01:bc:1d:be:89:b1:93:20:1e:b0:70:3f:4c:eb:b0:71:8e:
39:7e:0b:1d:6d:41:98:4c:01:aa:ca:5e:ea:53:59:d1:c1:7a:
68:a8:92:e9:7b:18:89:51:6c:ae:29:39:64:b0:6d:67:8b:16:
f1:a4:a0:d1:99:58:99:d9:41:18:69:41:9b:7d:c7:52:4b:06:
0f:10:99:8c:21:1a:59:35:63:0a:c5:0a:cf:dd:3d:a1:27:04:
86:3e:e7:b4:97:37:ec:f0:7a:36:d1:8c:e5:33:25:42:97:85:
7a:55:bf:07:9a:dd:aa:00:d5:bb:1a:71:e6:30:a9:31:ff:b0:
f2:d2:da:46:b6:1e:6e:1a:18:33:4b:b2:b7:f4:2d:83:57:a8:
71:69:d7:f5:dc:62:7c:8c:81:1e:12:52:eb:9b:78:cb:d4:b5:
5c:cf:67:6b:b1:f8:98:9c:4b:e5:01:8b:81:87:e2:48:6c:5d:
2e:29:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:46 2025 by rpki-client