Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: vk9uZauGcugrhpkO3+NsAOeIl0Xq4j8KcGTG7aSMDAA=
Subject key identifier: 3B:F8:E3:16:6B:24:CC:41:B3:8F:23:FA:EF:E7:D2:35:EB:8C:8F:32
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 0196A42E723D4058B792FF5715F8FE69D853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 1201
Signing time: Tue 06 May 2025 06:00:29 +0000
Manifest this update: Tue 06 May 2025 06:00:29 +0000
Manifest next update: Wed 07 May 2025 06:00:29 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: ycym3fvvjotWepNSH3NiN1dikEKcFJsuRdAoknj+TuI=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:72:3d:40:58:b7:92:ff:57:15:f8:fe:69:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: May 6 06:00:29 2025 GMT
Not After : May 7 06:00:29 2025 GMT
Subject: CN=3bf8e3166b24cc41b38f23faefe7d235eb8c8f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:e2:8d:3f:4d:7e:6e:10:79:16:a5:08:b8:
ed:a0:ee:71:d2:e1:26:f3:93:b3:98:51:77:30:34:
eb:bb:64:a1:38:27:fb:c9:2b:cb:38:e6:7c:7e:5f:
b2:8a:43:8f:27:7d:86:2a:7e:6f:0f:58:f8:5a:3c:
2b:ee:5c:88:fc:8b:71:f3:f3:ea:6b:82:ab:0a:54:
c5:cc:eb:24:e7:43:36:ae:17:f0:21:d8:ca:88:e0:
7f:2c:d7:c8:5c:28:93:b7:3d:5a:21:4b:76:81:5f:
f2:32:62:85:ef:ee:33:70:98:2f:44:84:d8:e3:b8:
c2:6e:48:71:23:fa:d7:eb:35:ba:3f:26:88:c8:d4:
c0:30:58:ac:c7:14:48:7b:44:43:67:c0:09:72:f1:
9a:81:03:64:56:85:f4:b0:34:ea:52:4d:9b:19:0c:
e5:6c:84:41:03:ec:81:bd:4b:98:9e:9b:52:3e:80:
f5:dd:6c:1f:7d:77:7e:ab:b8:0b:9b:51:e8:05:91:
2d:25:2b:b2:29:75:a8:d1:70:ba:b9:0c:55:73:14:
65:73:18:e9:5f:74:8b:f2:e0:e1:0b:0d:08:b3:e6:
02:0e:b5:0a:37:cd:dc:fb:c6:5d:3e:fa:05:81:ec:
62:0f:cd:a4:d7:81:f3:dc:45:00:11:e5:c8:8e:2b:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:E3:16:6B:24:CC:41:B3:8F:23:FA:EF:E7:D2:35:EB:8C:8F:32
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:a2:b8:6f:e0:18:68:30:e9:29:96:9a:ae:1a:3f:d0:41:
e5:df:ff:91:8b:0d:e3:cd:f4:7b:63:12:43:48:55:dc:f4:db:
34:a4:bb:07:2c:6e:77:d2:44:8f:34:bd:fb:55:e8:d3:69:be:
49:d9:74:39:a7:2b:aa:f5:75:5f:99:5d:24:6a:41:cd:93:62:
10:ab:14:be:d6:f7:e6:1b:07:6f:e5:dd:84:9e:21:49:ce:64:
ee:13:e9:64:d2:19:59:9e:34:0f:db:0f:fd:5e:c3:75:82:d8:
ab:79:9f:74:74:f4:69:6a:d0:11:b0:b7:4b:34:45:21:c1:17:
f1:6e:ce:ce:3a:74:ed:4e:2b:78:19:97:fa:a4:c6:e2:f6:18:
33:36:d0:07:20:38:89:1e:85:4e:a6:f1:95:8c:94:17:7d:3a:
94:37:85:f0:f0:0c:09:e1:ac:94:ae:a0:e2:a3:74:b1:c3:a0:
cb:43:ea:b3:76:27:f0:c1:dc:d2:89:f2:71:a7:21:5b:23:4c:
c4:30:43:8b:9f:99:ba:25:6a:e7:73:39:df:57:e5:43:ae:69:
ec:17:fc:fc:3b:9d:a0:e2:e8:2d:c2:07:c1:a0:da:d4:2f:45:
bb:33:82:1e:70:d7:84:4b:36:2b:8b:7e:6e:85:cd:fb:d5:fd:
59:81:76:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakLnI9QFi3kv9XFfj+adhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2NjMThmYzcwNmRmNWE5OTMzYjBiZTIwZGNjYjA0Njc1
YmY0NzQwHhcNMjUwNTA2MDYwMDI5WhcNMjUwNTA3MDYwMDI5WjAzMTEwLwYDVQQD
EygzYmY4ZTMxNjZiMjRjYzQxYjM4ZjIzZmFlZmU3ZDIzNWViOGM4ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1rijT9Nfm4QeRalCLjtoO5x0uEm
85OzmFF3MDTru2ShOCf7ySvLOOZ8fl+yikOPJ32GKn5vD1j4Wjwr7lyI/Itx8/Pq
a4KrClTFzOsk50M2rhfwIdjKiOB/LNfIXCiTtz1aIUt2gV/yMmKF7+4zcJgvRITY
47jCbkhxI/rX6zW6PyaIyNTAMFisxxRIe0RDZ8AJcvGagQNkVoX0sDTqUk2bGQzl
bIRBA+yBvUuYnptSPoD13WwffXd+q7gLm1HoBZEtJSuyKXWo0XC6uQxVcxRlcxjp
X3SL8uDhCw0Is+YCDrUKN83c+8ZdPvoFgexiD82k14Hz3EUAEeXIjiuMnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv44xZrJMxBs48j+u/n0jXrjI8yMB8GA1UdIwQY
MBaAFAc8wY/HBt9amTOwviDcywRnW/R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MzNjNDctYmYzZS00NzI4LThiOTMt
YjA3MGVjMzRkNGMxLzEvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MzNjNDctYmYzZS00NzI4LThiOTMtYjA3MGVjMzRkNGMx
LzEvQnp6Qmo4Y0czMXFaTTdDLUlOekxCR2RiOUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2GiuG/g
GGgw6SmWmq4aP9BB5d//kYsN4830e2MSQ0hV3PTbNKS7Byxud9JEjzS9+1Xo02m+
Sdl0OacrqvV1X5ldJGpBzZNiEKsUvtb35hsHb+XdhJ4hSc5k7hPpZNIZWZ40D9sP
/V7DdYLYq3mfdHT0aWrQEbC3SzRFIcEX8W7Ozjp07U4reBmX+qTG4vYYMzbQByA4
iR6FTqbxlYyUF306lDeF8PAMCeGslK6g4qN0scOgy0Pqs3Yn8MHc0onycachWyNM
xDBDi5+ZuiVq53M531flQ65p7Bf8/DudoOLoLcIHwaDa1C9FuzOCHnDXhEs2K4t+
boXN+9X9WYF2Pg==
-----END CERTIFICATE-----
Generated at Tue May 6 10:21:13 2025 by rpki-client