Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: SoQm6c9I7LctJhoHyZuFQCw/Wt+hnF2A0uSxiuG2yQA=
Subject key identifier: A3:1A:9F:F6:91:FE:0B:B1:1F:7F:BC:A5:12:83:A7:E2:57:1E:8E:64
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 0197B70F3E2676D8C7CBC8070FB22C0E83C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: aJWIna2B4ivcJQrwm3gFn4to1QC6zgGaTcNJh6xgyo8=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3e:26:76:d8:c7:cb:c8:07:0f:b2:2c:0e:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=a31a9ff691fe0bb11f7fbca51283a7e2571e8e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:49:80:7c:3d:8d:22:da:09:ed:11:f7:d2:
db:35:1f:24:d4:b5:b6:87:ad:f8:c1:ae:e4:02:d6:
1b:ee:2a:6a:94:04:de:9d:8d:75:31:27:83:9a:4f:
1d:61:b2:9c:f0:67:04:ec:52:ec:ab:26:d7:4f:bd:
e1:62:26:fb:28:be:e3:54:22:20:ef:12:c3:73:5f:
79:59:1f:12:fa:2a:5b:61:a0:94:90:c6:26:b5:ec:
73:d9:ed:79:fc:9f:5a:3a:26:34:77:46:ac:af:81:
35:8b:c2:33:ea:62:b7:49:e4:8f:0d:97:fd:ac:b7:
36:e1:09:88:f2:2d:63:5f:5f:7d:52:63:d3:c6:9d:
4e:89:6e:b4:17:7c:23:9b:b4:56:59:78:cb:dd:2f:
67:59:5b:18:3e:f4:ac:7c:f4:23:13:5f:24:85:25:
08:a8:fb:79:02:4b:ef:9d:07:eb:e4:d0:95:98:73:
dc:12:5e:02:6b:77:b4:e6:37:27:0b:22:41:c0:e9:
f7:d3:8b:10:89:0d:44:bb:f6:3e:47:a7:d6:cc:a9:
72:2b:00:05:cd:8f:23:38:e6:c7:f9:16:78:3c:1c:
3a:d6:92:8a:59:30:bd:a2:7d:3d:35:8d:db:c4:67:
c4:7e:ed:d1:17:42:f3:43:aa:fc:65:92:61:da:97:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:9F:F6:91:FE:0B:B1:1F:7F:BC:A5:12:83:A7:E2:57:1E:8E:64
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7b:89:dd:0d:b0:d0:2f:55:9c:14:bf:e4:c8:cd:8c:34:15:
36:3d:d4:3e:5f:24:2d:68:4c:64:87:c0:b0:82:53:39:76:79:
c2:6f:b8:dc:ee:30:df:96:85:fd:75:52:0a:1d:28:e3:ef:d8:
fd:5f:57:b6:58:74:ad:14:65:53:68:83:97:73:d6:f0:79:3d:
39:94:3f:80:d0:ae:bf:d2:c4:5e:08:1c:17:83:78:f8:e7:df:
02:4d:4f:65:62:7b:af:e4:7f:26:67:a9:0f:2c:da:34:b0:64:
8c:b0:a2:28:1e:01:b7:d0:01:1b:91:11:cc:fa:2c:bd:73:d1:
a3:e0:38:35:93:1c:26:db:5f:2e:97:a0:0b:30:d4:31:a0:af:
65:2f:56:cb:a4:fd:5e:ec:73:09:16:2b:46:f4:f9:e2:0b:48:
7c:30:8b:b7:bf:71:f6:b3:35:cc:bf:18:a3:40:bf:23:6d:96:
55:2e:3e:64:2f:dc:f9:10:f0:1d:67:29:5d:1d:37:8d:46:04:
e9:e4:f1:2b:72:ce:0c:b9:04:06:73:7e:39:21:61:22:a2:dd:
93:5b:15:e5:55:1b:55:9d:45:33:bf:49:76:15:89:0a:65:ca:
4b:b2:b3:5c:78:7d:f7:a2:f1:43:db:73:f0:73:71:4d:c6:16:
90:c1:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:08 2025 by rpki-client