Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: gT1WTas93W8hCCLsk96ASTd5JEI2Ywsa2ZnsLznHt8w=
Subject key identifier: 06:E7:B2:BB:DD:2F:E4:B3:78:BE:55:1C:6C:42:22:9F:8D:B6:97:95
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0198D47442F5EDF47EBE5DBCD9A0BE0D9753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: AHfUv/6wJr8XBr/OfmgdJDb+wEBiYiWhUi0arEfnhnQ=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:42:f5:ed:f4:7e:be:5d:bc:d9:a0:be:0d:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=06e7b2bbdd2fe4b378be551c6c42229f8db69795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:ef:b1:aa:87:b2:2f:f9:d9:9b:36:87:df:
ed:18:60:9f:72:85:69:b4:fa:74:0a:7f:04:a5:87:
5f:32:3a:ba:54:16:15:71:b9:6f:d9:f0:ad:2c:b1:
00:87:50:b7:e7:90:78:1b:1f:3c:b7:bd:34:b8:62:
d8:e4:70:48:e6:1d:40:6d:cd:b8:65:3f:e8:b9:ca:
75:dd:5b:cf:52:0f:cc:d0:72:0a:88:47:aa:8b:58:
3f:4f:79:80:c7:76:77:a3:c3:17:56:ad:05:cf:48:
3e:b1:d2:78:36:7b:c2:df:16:63:ec:ea:dc:5e:0b:
8d:9e:1e:f6:9f:ad:32:0d:b0:d5:33:46:d0:e1:5f:
2e:8b:0b:18:79:ef:65:1c:d0:d6:1a:f8:0f:49:9e:
9b:d6:64:3f:40:38:0c:51:52:8d:cc:bc:ac:c3:98:
93:7f:79:54:b3:d2:9c:71:2c:06:32:a4:8e:92:1e:
95:55:68:e6:66:1e:f4:a1:49:00:53:37:67:37:9b:
f2:ef:29:4a:79:17:3a:9d:b1:7d:c2:23:fd:69:53:
1e:b4:11:2b:3a:22:7c:2f:d3:16:b1:a4:c8:b0:fb:
c1:66:11:83:08:9e:c2:3e:30:7f:26:b4:d2:3f:23:
95:c0:89:05:87:fb:45:52:5d:4f:ff:46:01:c1:13:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:B2:BB:DD:2F:E4:B3:78:BE:55:1C:6C:42:22:9F:8D:B6:97:95
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4a:0d:c4:06:be:79:0f:65:2f:64:80:19:39:5b:95:90:bf:
a4:ff:30:d8:7e:8c:28:17:d4:94:f2:89:ab:04:4d:89:ca:42:
7c:16:e9:e2:c7:ac:44:57:fc:e7:f9:6b:4c:c9:59:d0:b5:f8:
7e:61:d8:7c:f6:2c:9f:22:46:6a:fa:63:20:c8:e1:6d:35:33:
9e:3e:a8:ff:e2:d7:dc:52:b5:ea:9b:7c:e3:d4:e9:d9:d0:e6:
0f:6c:c6:7e:4d:94:fe:aa:c7:f1:cb:17:30:5f:7c:c9:9f:7c:
83:1a:31:fa:f3:63:3e:d5:df:e3:24:c8:c2:39:66:74:b3:3b:
04:72:29:64:0c:5b:d3:b5:8a:47:bf:26:95:64:2c:0c:04:32:
e9:05:b0:4a:9a:91:cf:11:ae:c3:9c:5c:e2:98:00:be:b7:01:
29:3e:61:a7:e1:86:f2:21:28:7e:ea:40:dc:b6:e6:bc:4b:9d:
35:5d:9b:0e:e4:0f:d9:39:ca:02:9a:ff:fb:34:a3:6a:0d:aa:
a4:af:73:f7:85:cb:0d:75:48:4a:9e:37:80:9b:ab:c2:e7:1f:
fb:e0:04:01:45:c0:a5:40:dc:7f:6c:6d:77:d0:a0:35:71:38:
36:58:11:f4:75:4d:cc:b4:fe:1a:be:43:b3:c4:b3:e3:9b:8c:
d6:0f:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:47 2025 by rpki-client