Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: m1fAATxmPyaGieZ72DN4laKNW0Ju0M+RCqGvXMaW6Ow=
Subject key identifier: 1C:DF:B8:75:FD:9A:E5:6E:04:EA:F4:93:F9:13:DE:43:0F:1C:39:87
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 0198D54DCBB8B917A22D9AC84C5BA718B83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 04EC
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: 1TJOnI7vVVt0fuhf0bnLXId0g3duTNUD+obc0mmL7rg=)
2: QB5FpuPpmowESfKF6nGgHMXmFsg.roa (hash: 4U84FI9f905V3/Hwf++fcBDHdTLLsUUQSR6ku8lze+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cb:b8:b9:17:a2:2d:9a:c8:4c:5b:a7:18:b8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=1cdfb875fd9ae56e04eaf493f913de430f1c3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:9d:29:27:d4:5d:54:c5:48:db:df:f2:40:
a4:73:0e:15:6d:5e:56:5e:4d:a3:6c:e0:ab:76:a6:
58:80:db:fd:df:18:0d:57:44:c2:26:ad:a9:80:70:
76:fb:65:86:a9:71:49:b7:8e:f1:0f:10:f6:f7:3e:
b6:a6:2f:df:17:ec:ca:b2:79:ba:7d:6e:a1:12:d5:
44:5f:d1:e1:31:c0:a3:b7:20:5b:a4:ab:ef:cf:33:
2b:63:e8:55:28:d6:83:0b:54:17:05:56:8d:e4:55:
f7:a7:7a:aa:90:94:64:10:5f:e3:9a:fa:2b:fd:19:
96:9d:47:b1:f3:25:17:2c:9c:f9:7c:5e:a2:d5:47:
50:31:a1:7d:71:6d:86:23:23:f6:52:07:c5:c2:59:
87:b4:18:38:ee:e6:09:55:5c:4c:49:17:9d:85:ec:
49:8a:30:ea:ba:1f:18:2a:79:0f:fa:b3:57:07:88:
f7:a7:cd:3f:28:66:c2:2c:bb:6d:ec:24:ba:3a:0f:
e6:31:a4:27:f9:80:95:e1:5d:18:40:a4:af:e0:ce:
a5:5f:42:5b:51:1d:8b:f1:a7:27:1a:7a:e5:d4:17:
a7:db:67:14:4e:4b:6e:72:54:c4:6b:3c:cb:41:2c:
fc:a0:3d:37:26:ea:5e:8a:6e:10:d8:10:d9:29:1f:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:B8:75:FD:9A:E5:6E:04:EA:F4:93:F9:13:DE:43:0F:1C:39:87
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:73:4c:0f:ce:d5:cf:9d:ac:96:9a:3f:04:5d:ee:26:79:
0c:69:4a:a3:b6:79:f8:82:cb:1b:9e:b6:04:30:d4:fa:77:af:
e6:28:83:2b:83:8b:49:28:ff:0b:74:d1:0b:b3:86:f6:de:bc:
c8:b7:95:98:e8:f6:03:20:6a:9c:a6:fe:3e:74:2b:99:d2:5c:
fe:f5:d4:1f:d2:e8:74:4b:ec:98:df:c6:a9:36:45:c7:68:e6:
7a:73:a4:49:0b:8f:70:e6:1d:33:2f:d4:28:b7:70:f2:3c:4e:
23:3d:2b:bb:e4:79:21:62:5c:aa:d3:21:b0:22:7c:b7:59:fa:
90:73:fe:5d:6a:b7:68:74:64:8b:06:66:d2:ef:05:61:bc:20:
8c:e6:1f:b3:cb:98:93:33:7d:92:a4:08:9d:a0:3f:e8:84:ee:
17:46:70:ec:6f:66:66:57:4f:bc:b2:bb:4d:23:3c:15:f8:70:
7d:11:1b:d4:96:90:f9:dd:46:6f:f2:04:0e:be:31:12:83:25:
65:e2:ce:35:56:f7:b7:81:f1:98:4f:f6:9b:86:97:b1:55:a2:
c7:1e:30:ec:07:22:4d:69:bf:55:4e:e4:d5:31:5b:66:05:12:
38:de:a3:99:ed:d6:c8:ee:69:cc:f8:a7:ad:8c:aa:77:68:83:
78:97:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:12 2025 by rpki-client