Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: ypOiWYLEoYo+JRhuWENbBx0fXDbPZw58dPHylIky8mw=
Subject key identifier: 2E:F0:83:97:AA:8A:0E:23:DD:2F:95:65:2C:EB:55:CE:36:99:7D:69
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0197B88F1A78DBF70D51D12ED9F72BD305FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:15 +0000
Manifest this update: Sat 28 Jun 2025 22:01:15 +0000
Manifest next update: Sun 29 Jun 2025 22:01:15 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: xlvkJqpLlSaawViGjlPgB2ERzTIdpNm2Vgv5ZF89mHo=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:1a:78:db:f7:0d:51:d1:2e:d9:f7:2b:d3:05:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Jun 28 22:01:15 2025 GMT
Not After : Jun 29 22:01:15 2025 GMT
Subject: CN=2ef08397aa8a0e23dd2f95652ceb55ce36997d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:2c:42:10:dc:ab:ea:05:60:4b:f7:14:cb:
85:d9:2b:3c:b9:ec:82:cd:e0:31:f6:7c:2e:32:04:
36:55:88:33:0e:5f:5b:5f:06:a4:c9:ad:e0:ec:e9:
aa:3c:d3:e6:96:3b:b0:3c:6b:e1:f1:67:a5:10:ca:
36:1b:e4:8f:3a:9e:36:f3:b2:ac:08:95:3e:21:ca:
40:97:1f:e5:ba:72:7f:77:ea:dd:3b:6b:0f:b8:2d:
02:64:41:1a:e4:f5:6d:c4:77:9c:ce:bf:53:15:fd:
55:7f:26:98:4a:e0:79:58:6b:85:3d:3a:de:75:87:
25:2e:fa:aa:90:8c:d7:26:4b:6e:49:56:af:99:70:
01:c5:58:5e:af:ce:7b:0b:a7:f5:a9:b9:8e:f3:61:
c0:24:b5:69:6e:31:9b:a7:54:19:85:f0:ac:83:18:
51:9f:9b:e1:e4:71:ae:c1:a8:ed:44:61:ee:cf:c2:
ef:db:d2:6a:e9:f0:7b:d5:47:4f:e4:d3:e3:61:f8:
64:44:aa:88:e9:a1:a7:4c:ff:5d:02:bc:dd:15:8e:
31:6c:2b:4a:7e:97:d2:16:18:f9:8d:a3:3d:90:a1:
f0:c8:76:c7:17:a8:8d:5a:8e:0a:9c:e0:5f:9f:de:
0f:ac:8c:b3:24:3c:ea:81:1e:2c:52:b2:7e:07:ba:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:83:97:AA:8A:0E:23:DD:2F:95:65:2C:EB:55:CE:36:99:7D:69
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b4:d3:43:a8:d7:54:a4:32:c5:56:ef:3f:94:7f:a3:76:96:
b1:d3:a5:17:53:b6:6f:95:af:0f:e8:b9:b3:af:f4:28:94:29:
50:69:5a:d2:8f:f7:4f:51:ab:b5:c8:dd:56:e7:96:58:c5:1d:
fc:5f:24:58:b5:5a:2e:5a:6c:65:7d:a6:bb:7a:c0:e0:3d:51:
8e:1a:0f:d3:9f:1b:9e:03:81:8b:5b:4e:fe:e2:7e:4f:f7:f3:
b7:a1:d5:9c:10:55:2e:20:c4:0f:fb:4b:3e:85:be:c5:bd:d6:
5c:ac:3f:15:4b:fa:72:f7:c6:73:28:2f:ed:bc:32:91:2a:ec:
50:79:5b:b1:ae:13:98:ac:52:9b:b0:8a:df:70:ac:7c:c8:cb:
b6:15:15:1f:ad:65:38:35:08:85:3d:30:42:8e:af:92:20:2c:
05:60:16:3c:d3:b4:16:6a:24:85:62:e7:b4:6c:9a:2f:f1:e0:
0a:e8:e0:c7:a0:b2:31:1e:dd:eb:4d:c4:bd:5c:af:08:e6:bb:
00:f3:4a:41:6d:40:f6:74:1e:11:da:e2:bb:7f:e3:e8:c1:d2:
1b:6c:b4:b4:e5:15:e5:26:2e:3c:19:af:20:a2:36:bc:15:42:
df:f8:37:56:f9:e4:fa:4f:58:4f:58:18:d2:52:1a:fa:31:00:
78:c7:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:38 2025 by rpki-client