Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: gUCj4fcc/fD5e2GzjFA87GLjbsE3r7vsHQMN3/n4G2c=
Subject key identifier: 6F:99:62:1D:23:3F:8D:AF:C1:8E:92:A2:DD:7D:DA:B2:80:A9:69:8C
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 01969D19AF82FB5C6111C5257E5498684759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 21:00:28 +0000
Manifest this update: Sun 04 May 2025 21:00:28 +0000
Manifest next update: Mon 05 May 2025 21:00:28 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: /WIskzGgMmQGBNrpDH69crVElTg6ZFYmOJ8sKmjWjzQ=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:af:82:fb:5c:61:11:c5:25:7e:54:98:68:47:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: May 4 21:00:28 2025 GMT
Not After : May 5 21:00:28 2025 GMT
Subject: CN=6f99621d233f8dafc18e92a2dd7ddab280a9698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:06:d5:17:94:c4:5e:f2:2a:84:27:ef:b6:
84:c4:59:2d:a4:7a:61:80:d0:1c:6a:22:aa:85:67:
ec:40:ed:71:f4:4e:53:fc:d2:89:e6:9e:45:b8:a9:
4e:37:f1:52:0f:3e:ad:04:af:4d:26:7c:5b:43:f9:
64:af:2c:3d:8e:19:8b:34:70:9b:a2:23:c8:dd:04:
b1:bb:d8:7a:c2:e7:8f:80:02:06:07:49:b1:98:40:
76:49:a0:b6:7a:25:01:a6:4d:0e:63:88:51:2d:2d:
50:24:ff:c1:b7:94:12:08:37:5b:00:bf:61:71:43:
8d:1a:79:67:9d:2e:c3:a8:3a:61:69:c4:a6:5b:95:
16:60:c8:08:dc:6a:52:57:1d:86:9f:f0:4a:22:15:
60:a4:ef:06:7c:c1:c3:c0:b4:7b:16:85:1e:d9:9f:
55:83:08:f1:49:65:f7:d6:fb:96:d3:33:d1:7d:c2:
03:20:69:59:87:aa:d5:f9:a6:d8:4b:26:25:16:85:
ff:f7:7e:dc:52:93:bc:50:33:d5:7d:85:bf:5e:79:
06:6e:9e:39:f2:cb:ab:af:54:2f:bd:1e:74:84:b0:
00:5e:55:8a:19:56:3b:18:15:8e:42:31:3f:b0:1a:
2a:92:a0:02:26:cd:d0:aa:7e:8e:4b:b5:5a:cc:72:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:62:1D:23:3F:8D:AF:C1:8E:92:A2:DD:7D:DA:B2:80:A9:69:8C
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dd:5b:90:60:57:4a:37:56:b5:5d:5f:1e:b4:ac:d2:8e:b5:
bc:ed:47:d8:3d:1c:82:56:e8:18:22:8a:f7:ec:0d:e6:4f:76:
43:a1:5a:52:cd:23:2f:a8:b0:f4:1b:00:8c:36:fa:5f:d5:ff:
d2:f8:0c:8c:c4:49:d3:55:12:bd:fe:e1:5d:80:17:5f:24:a5:
5c:c5:72:f4:d5:b4:0d:80:5a:fb:a7:5d:01:d7:93:bf:3f:b8:
79:c5:97:be:5c:2d:f4:f0:49:12:a8:e1:ea:64:f6:92:69:d2:
fa:2d:11:84:b2:9e:15:ed:c7:5b:f2:69:74:6b:56:1a:f4:03:
14:62:84:cf:10:e3:eb:85:a2:43:c5:2a:02:f0:2c:29:63:c5:
60:6e:6c:41:35:71:30:84:40:ec:69:f4:1a:3a:1b:12:24:66:
00:c3:0e:62:7f:cd:7f:4f:4a:39:1b:d3:b1:5f:43:33:f8:c0:
33:d1:1b:1b:fc:0a:ba:17:18:9c:98:ad:17:5c:33:ad:1f:37:
cb:3a:86:11:a4:81:5f:e8:9f:09:ed:00:ba:8e:1b:45:f9:21:
c4:f5:79:2b:47:df:17:7d:a3:3f:a0:e6:df:e2:20:f8:69:86:
c5:64:3d:5e:da:7c:0d:9a:e4:c5:fa:87:79:b7:14:ef:ad:ee:
93:3d:ab:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGa+C+1xhEcUlflSYaEdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2
YWU3YzgwHhcNMjUwNTA0MjEwMDI4WhcNMjUwNTA1MjEwMDI4WjAzMTEwLwYDVQQD
Eyg2Zjk5NjIxZDIzM2Y4ZGFmYzE4ZTkyYTJkZDdkZGFiMjgwYTk2OThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5cG1ReUxF7yKoQn77aExFktpHph
gNAcaiKqhWfsQO1x9E5T/NKJ5p5FuKlON/FSDz6tBK9NJnxbQ/lkryw9jhmLNHCb
oiPI3QSxu9h6wuePgAIGB0mxmEB2SaC2eiUBpk0OY4hRLS1QJP/Bt5QSCDdbAL9h
cUONGnlnnS7DqDphacSmW5UWYMgI3GpSVx2Gn/BKIhVgpO8GfMHDwLR7FoUe2Z9V
gwjxSWX31vuW0zPRfcIDIGlZh6rV+abYSyYlFoX/937cUpO8UDPVfYW/XnkGbp45
8surr1QvvR50hLAAXlWKGVY7GBWOQjE/sBoqkqACJs3Qqn6OS7VazHL+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+ZYh0jP42vwY6Sot192rKAqWmMMB8GA1UdIwQY
MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt
MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5
LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq91bkGBX
SjdWtV1fHrSs0o61vO1H2D0cglboGCKK9+wN5k92Q6FaUs0jL6iw9BsAjDb6X9X/
0vgMjMRJ01USvf7hXYAXXySlXMVy9NW0DYBa+6ddAdeTvz+4ecWXvlwt9PBJEqjh
6mT2kmnS+i0RhLKeFe3HW/JpdGtWGvQDFGKEzxDj64WiQ8UqAvAsKWPFYG5sQTVx
MIRA7Gn0GjobEiRmAMMOYn/Nf09KORvTsV9DM/jAM9EbG/wKuhcYnJitF1wzrR83
yzqGEaSBX+ifCe0Auo4bRfkhxPV5K0ffF32jP6Dm3+Ig+GmGxWQ9Xtp8DZrkxfqH
ebcU763ukz2rBw==
-----END CERTIFICATE-----
Generated at Mon May 5 07:26:48 2025 by rpki-client