Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: 9F2Tir7+EUixhiO8ACdQZ7f97LAJn+gy2yx3Y/Fb+Q0=
Subject key identifier: 4A:74:AB:5B:A6:01:B5:DB:12:46:0E:A7:32:5D:60:B2:A0:1E:1D:28
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 0199FDDA2351D30951D8D37210DB9C717224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 1508
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: fL+tYBNMyuPeRqkeopY2C/fUEIyRW4RvjgR6dgnhVO4=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:23:51:d3:09:51:d8:d3:72:10:db:9c:71:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=4a74ab5ba601b5db12460ea7325d60b2a01e1d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:f3:5f:a0:35:5c:55:5b:4a:a2:fc:f5:dc:
30:19:e9:a3:1e:66:e8:9e:ac:74:1a:46:4c:c7:ee:
1e:6f:d3:4f:0d:dd:59:0f:68:c3:29:33:84:f9:3b:
ce:4a:7a:61:9c:3c:02:f8:52:9a:64:f6:6c:9b:78:
a7:06:0f:6b:fa:6e:55:bd:5f:5b:fe:d0:8f:14:16:
c1:12:4a:a4:94:c2:e3:cf:af:e3:f3:51:58:87:29:
2d:8b:04:11:14:8f:75:4f:8c:b0:f7:2e:73:ed:ef:
18:53:78:34:00:1a:9c:fa:58:88:5d:92:3a:6c:b3:
7d:aa:fb:96:c7:65:db:8e:1d:f2:da:33:2a:c2:46:
ea:26:cf:b5:de:ef:28:fa:b7:44:2e:c4:8d:77:90:
74:d7:44:49:d1:ee:23:7d:67:34:19:cd:9c:07:66:
4b:60:c8:82:f6:83:c4:22:44:fd:86:70:01:f9:dd:
2d:03:4e:3f:97:4c:ab:3b:de:16:48:25:d3:a3:7f:
76:61:df:80:63:15:ce:53:ce:c2:e2:63:ea:6f:1b:
64:ee:2d:c1:ef:47:ed:92:04:fe:c4:50:5e:a6:d8:
5a:4d:91:d1:b9:14:93:8e:cf:72:16:a9:f3:5f:b7:
7a:34:7c:83:b8:75:e5:1a:d6:20:21:02:96:e5:9a:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:AB:5B:A6:01:B5:DB:12:46:0E:A7:32:5D:60:B2:A0:1E:1D:28
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:b9:5c:2b:59:46:84:d6:61:ba:db:8a:d2:4c:7a:ba:18:
3b:e5:0c:28:a2:a4:57:25:17:71:23:57:25:f5:68:6c:2f:b5:
44:23:8f:de:53:47:5b:37:0d:79:b9:92:a9:5f:be:cc:06:4a:
85:0c:f5:14:38:7c:f2:39:2d:93:0a:49:f8:db:4f:07:ea:c0:
41:4a:f2:c3:00:6a:48:09:63:72:bf:e4:ff:0a:23:29:d0:5d:
f3:f3:9e:f6:61:dd:bb:a0:45:97:b0:8c:13:6a:b7:c1:40:b1:
49:8d:aa:93:43:ae:1f:1c:de:0a:c5:3a:97:e7:37:41:60:e9:
22:0d:bd:63:4e:4e:7b:58:42:f2:dc:32:58:e0:b0:75:eb:b9:
f4:e0:0a:a2:7e:62:dc:c6:fe:27:bf:ca:f3:34:8a:e6:a5:9d:
8f:72:3c:d6:fe:47:7c:0d:05:76:e6:cd:d4:7b:09:26:8c:f3:
77:09:94:db:5f:78:d8:38:25:12:7c:69:67:c8:00:b2:fa:43:
46:26:0e:ff:70:5c:d0:7d:18:37:d4:b8:b5:c0:06:49:8e:d7:
cd:4f:e6:ff:be:a9:2c:e9:11:f9:15:1c:d3:12:90:24:fa:c6:
47:cb:03:ce:cb:27:43:6c:8c:16:8d:e2:50:ab:2b:f5:a3:9a:
53:f6:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:30 2025 by rpki-client