
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: V/35yAWHRtRVXw1lYpJMw0Z7aR2H9rTerC1oNqJwBx0=
Subject key identifier: A5:9F:9B:96:8D:85:46:2A:73:DC:62:DB:C9:C6:99:D0:33:DF:63:97
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 0198D516280BBDAC4CD5184D57985A8F50FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 0448
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: 98Rjv48L9mCwnoCZM3K6VVg1va/2v8//hcQxosubTPc=)
2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:28:0b:bd:ac:4c:d5:18:4d:57:98:5a:8f:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=a59f9b968d85462a73dc62dbc9c699d033df6397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:57:dd:46:e9:cb:da:5a:fc:4c:40:39:35:
0e:62:f4:03:71:e2:6c:72:95:ff:87:16:ad:33:c6:
f4:aa:58:47:dd:d3:a0:b3:77:25:58:e4:92:e9:b1:
30:5d:fb:35:3d:92:95:18:18:41:07:a6:4a:3c:8d:
ca:bc:eb:4f:26:a8:e4:19:d9:56:8f:e4:7f:ec:5b:
71:91:f7:d7:64:64:dc:b2:9a:f2:a4:9b:f3:ee:a1:
ff:5f:b4:af:d3:70:34:ac:33:b8:11:fb:6f:c5:ba:
8d:d6:65:95:5e:67:56:d9:5e:c7:ef:68:9e:89:65:
1c:4c:46:12:09:13:e9:0a:30:13:02:91:47:fa:a3:
1a:3c:73:ef:93:3f:ff:b2:cd:78:b0:e1:20:96:87:
98:cb:78:39:30:5a:9c:90:6e:c2:20:ed:61:a1:02:
bb:47:89:78:25:64:e7:43:83:78:a7:41:cf:82:5b:
1c:8a:17:2a:99:a0:ac:ce:ee:f9:03:1c:d4:15:89:
1d:48:b6:5f:60:b9:1c:7c:89:4b:44:69:da:25:77:
cb:f9:4b:30:45:3f:24:6e:82:c8:43:03:60:b1:f4:
c3:38:23:19:8e:ec:7c:ac:ad:d0:11:8a:49:f2:7f:
49:7e:6d:3d:8a:7d:bf:58:18:f0:a6:bc:36:97:33:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:9B:96:8D:85:46:2A:73:DC:62:DB:C9:C6:99:D0:33:DF:63:97
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:ad:f7:6d:44:86:60:3e:bf:31:0b:e0:b1:34:41:0e:cf:
03:94:0a:d3:9b:61:d0:62:77:02:f1:23:18:67:15:53:e6:28:
3c:63:8b:84:ad:a4:0a:12:d6:74:f3:4a:6d:be:5a:e9:12:34:
ed:4c:e9:e1:3b:83:91:57:07:d3:26:44:2f:c6:c6:0b:90:4f:
a8:18:29:e5:15:f2:90:20:31:ae:a3:46:b4:f0:b5:f3:24:cc:
c3:2c:cb:fd:73:18:b5:74:6f:5c:8e:8e:71:69:cb:ec:c2:23:
35:77:c6:d5:35:27:92:c3:7d:56:81:10:95:f6:a2:03:27:94:
30:dd:38:6a:62:d4:e9:d8:52:19:03:cd:e2:60:47:49:ec:08:
13:12:15:0f:6b:39:d4:52:98:fe:89:2b:50:de:3e:15:f7:be:
29:75:59:81:07:40:f2:36:39:db:88:68:69:87:e4:e0:f1:90:
e9:5d:ad:ff:0a:2d:a9:68:bf:33:6e:87:25:b5:fa:fe:fb:f0:
c3:74:db:93:c4:af:6d:0b:6c:b0:d3:2c:eb:03:81:7e:63:de:
50:e9:7a:d4:5a:69:a1:e3:18:54:57:a5:eb:62:dd:9d:1d:82:
be:67:37:80:65:7e:f3:45:bc:e0:f8:74:53:e9:8e:f7:05:a2:
ac:6b:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:26 2025 by rpki-client