Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: JnCp8Rf6iL3jofPmJISPMhOiljd511SoukISFFEv2Q4=
Subject key identifier: A3:92:35:97:7C:2F:28:E2:4D:B6:49:CF:06:B9:70:85:74:E8:12:A3
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 0197B6A0479F224121B876BCC89A4BE3781D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 128F
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: b82+UbyAJX4Qn2xZCXi3HXBv119D7m3hEhhhq6LeV1o=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:9f:22:41:21:b8:76:bc:c8:9a:4b:e3:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=a39235977c2f28e24db649cf06b9708574e812a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:09:64:8c:ad:fb:b4:94:c6:95:77:1c:35:
86:d5:1d:44:50:32:1a:18:0b:e3:25:2d:ee:f9:0c:
40:ee:4e:67:7a:14:3d:50:3e:6c:04:a9:f4:d8:18:
3e:67:5c:65:01:ed:c4:6e:83:95:ae:8a:87:64:b3:
5d:a5:2c:08:0e:8d:c2:52:01:ea:d9:d3:02:3c:99:
98:24:d6:48:8f:2c:91:87:a8:66:04:53:ba:e6:4b:
d6:32:c7:f1:1c:39:b9:cb:bd:29:e9:87:4f:de:e5:
ba:b8:4b:0b:73:20:85:e5:22:e4:e2:c6:1f:93:79:
a3:2d:77:21:ef:cc:fc:8f:60:b7:6d:c5:2b:28:19:
68:f7:53:99:c0:92:cb:a7:2b:98:b3:b7:65:0b:7e:
d4:02:ce:f1:2a:6c:30:8b:f2:62:9a:b6:38:68:c7:
2c:53:b5:bc:94:e1:1c:fe:7b:93:c6:8b:70:19:cc:
fc:82:44:a6:82:2b:55:b0:f6:08:e5:ef:d2:00:4f:
04:b8:75:b3:a2:12:1f:99:0a:40:11:d8:76:dc:fc:
02:8b:58:1f:6e:ef:c9:4d:99:33:b4:16:fd:b5:3d:
f1:22:bd:6f:0a:8d:0b:a0:60:a5:d3:43:b8:67:5e:
72:2a:e2:ef:06:4d:1d:a6:0e:00:94:34:54:17:4d:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:35:97:7C:2F:28:E2:4D:B6:49:CF:06:B9:70:85:74:E8:12:A3
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4c:30:f2:d1:68:fb:c1:1f:e3:ac:75:a1:6f:8b:e7:b0:1e:
e8:65:32:ca:5f:1b:7f:4f:6c:e4:8a:5f:d5:07:aa:31:64:7f:
b7:d0:e3:28:a2:ac:2c:70:57:78:f5:9c:fa:b0:8c:00:97:2b:
9f:44:08:6e:0d:e0:4d:68:2a:28:d3:89:59:93:e3:33:30:98:
56:c1:4c:86:52:98:e7:67:c3:1e:b5:4a:ff:39:4c:a3:a9:b8:
88:e1:9b:4a:89:45:ea:89:0f:d5:19:71:9d:b1:21:64:ba:db:
43:a4:9c:c2:e6:88:17:aa:04:52:d6:27:c7:aa:ed:6a:2e:04:
a5:83:9b:2a:b0:ad:a2:01:83:31:71:be:5a:70:9c:a7:e6:c7:
83:2e:a6:6b:9c:14:f2:fc:aa:b7:2e:9d:08:34:95:a6:b6:fb:
74:c3:d8:46:0c:42:0a:74:88:40:35:89:19:e1:03:c4:91:66:
3f:2e:fb:08:20:5b:3b:0f:e9:9a:05:59:b9:c6:7a:71:9d:5f:
1c:ea:55:4c:84:70:0c:bb:03:24:a5:88:7a:2a:d8:06:1c:3b:
21:59:a7:d5:9c:f2:d3:3a:74:ee:51:95:bc:b7:36:6a:6b:45:
8d:1c:05:f7:33:fd:0a:62:3d:9b:30:3b:4c:e2:0d:5d:d9:06:
28:3d:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:23 2025 by rpki-client