Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: +eKyVD+Ug+EydREDdEWck/jjhCTqm5x1QHDQPZu8ACE=
Subject key identifier: AE:88:B6:54:56:BE:80:43:C1:48:73:E4:A9:D9:0B:AA:02:C5:DD:31
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 0197B7458FDE22177AB486F4E7AAEBD9EF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 03B4
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: 0qUHNAcMXszeVBz4NPqbu3H3mWhJbv7jAwep3btwv/s=)
2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8f:de:22:17:7a:b4:86:f4:e7:aa:eb:d9:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=ae88b65456be8043c14873e4a9d90baa02c5dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:a4:7f:8d:68:3f:3d:6c:e2:4c:53:3d:8d:
6f:bc:60:8d:8d:43:f1:4f:ff:5c:04:92:7d:b7:d8:
90:48:42:ee:84:00:12:66:cf:46:5b:34:39:2a:00:
e6:6b:e6:51:cd:a2:1c:8a:54:f8:0d:a5:a1:b2:17:
0d:e0:da:f9:a4:53:4a:93:34:d0:b3:cb:48:f9:b0:
ba:f0:2c:7d:3d:7a:45:85:a4:81:2f:b0:3d:cd:19:
6d:14:49:11:d8:42:1e:99:ad:d3:15:c0:6d:44:83:
b7:1d:ff:c5:b2:a2:22:75:e5:f6:63:ef:aa:f9:f0:
b5:e1:9c:79:b2:86:a1:17:0a:66:2d:b0:19:b7:cf:
15:1b:d8:76:94:dc:de:d1:ee:43:77:78:a5:3e:0f:
b7:e9:f5:e1:4f:c3:53:b5:37:2b:cc:d8:b7:f7:39:
04:9f:cb:59:e4:80:e9:cf:7f:6e:1a:48:5e:08:40:
39:44:ce:fa:0c:cc:f0:11:09:e1:38:04:d0:eb:0f:
66:84:eb:2f:3d:dd:8c:65:e9:f7:b7:6f:63:d3:68:
95:05:47:5e:64:a7:65:c1:d5:ba:59:51:f5:2b:16:
79:e4:25:d5:58:51:b6:e3:da:20:5d:d4:66:67:e4:
9d:f4:ae:b0:cf:fd:28:c7:7d:d8:c7:24:b6:2a:67:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:B6:54:56:BE:80:43:C1:48:73:E4:A9:D9:0B:AA:02:C5:DD:31
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:d8:b9:8d:63:74:2c:4f:14:64:c1:a3:4d:3d:f1:12:1b:
6c:13:cc:f5:f0:71:18:a1:b0:8b:51:77:83:91:f9:fa:3a:7b:
bc:fb:f3:d5:c3:bb:65:e3:ad:6e:eb:76:5d:cf:ca:2e:ab:81:
e5:ca:93:d3:0d:0e:39:15:84:76:1e:bc:aa:81:c5:50:41:cb:
bc:12:ef:12:e1:21:c6:45:02:f8:ca:d8:f3:21:ce:17:90:0d:
9e:c4:7d:55:c6:20:b3:59:d9:b4:1e:23:3f:e2:3f:4a:6d:36:
47:c7:c7:9f:39:b5:e2:e6:0f:32:d3:97:85:02:a1:32:2e:ac:
d7:60:9e:85:c1:53:14:f1:70:5c:3b:6c:52:1b:34:ed:40:4a:
b4:90:86:b4:a9:e2:21:21:fd:93:54:f4:c5:a2:be:33:0e:c0:
a6:5d:06:a4:84:f1:00:42:09:84:29:1d:3d:eb:3f:7f:d5:6a:
79:38:47:a2:e9:c9:d1:ce:29:88:e6:7c:6f:f6:bd:99:5a:a9:
c4:4e:1f:56:40:91:f8:0b:2c:a5:5c:42:cb:ce:e4:57:c0:48:
e9:9a:85:67:3c:0d:a1:24:74:94:23:a5:ab:80:9f:e1:a8:af:
b6:5e:82:43:74:e2:66:6e:19:d2:fc:36:90:f8:ec:28:5b:93:
53:b5:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:26 2025 by rpki-client