Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: 7iDkHXnokiFiRP9Zh8jSpNlxdVhqFieUWhYmPKJN0S8=
Subject key identifier: 9D:3A:F9:35:6D:0F:94:59:05:C5:3E:F1:AE:43:36:AE:F2:2E:04:5B
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 0198D5F1DE63BBF0ED0B5E19A8839E55C0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0361
Signing time: Sat 23 Aug 2025 08:00:54 +0000
Manifest this update: Sat 23 Aug 2025 08:00:54 +0000
Manifest next update: Sun 24 Aug 2025 08:00:54 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: rNcQ9Gf7hIc+xPFGiYMMFNVUHXQtoE1tUG86TYja3RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:de:63:bb:f0:ed:0b:5e:19:a8:83:9e:55:c0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Aug 23 08:00:54 2025 GMT
Not After : Aug 24 08:00:54 2025 GMT
Subject: CN=9d3af9356d0f945905c53ef1ae4336aef22e045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:5a:aa:cd:45:97:fb:de:26:3c:52:64:54:
b1:f8:d5:8e:0c:09:e9:67:8a:be:b5:cd:b3:0b:37:
bd:09:a0:77:a5:79:1a:33:74:c4:26:5f:9f:d8:88:
18:4e:c5:dd:82:57:db:28:e5:f4:69:01:9e:c4:b7:
81:83:2e:5d:08:87:5d:1e:92:b6:c0:7d:5f:ad:20:
7f:f3:a3:e8:8d:bb:36:0d:e4:e9:64:fe:8b:4c:de:
cb:30:68:7b:7a:86:d6:82:55:de:37:1e:59:c8:dd:
d1:06:25:0f:2f:e8:c0:7f:f7:aa:f8:05:52:9f:a3:
1f:9c:5e:89:87:11:0d:df:46:18:b5:62:79:4e:bb:
75:6d:5e:8a:5d:b0:fd:c0:e0:29:bd:1b:ef:27:fa:
93:98:f8:43:3e:c5:61:83:4e:02:d4:5f:65:42:73:
d3:56:8e:ce:ea:5d:78:db:29:c5:6d:eb:9c:7b:c2:
d2:17:8e:ff:85:36:4e:ea:47:a1:56:bc:3f:8c:c2:
2d:be:94:51:52:74:83:51:9d:0b:d0:6c:5a:f3:71:
42:05:72:5f:9f:73:32:13:00:fc:20:13:c3:68:06:
64:00:ea:48:03:a8:34:f5:42:a5:cd:38:fe:7b:49:
a2:bb:d9:ad:ab:bb:35:df:47:a4:de:3d:f6:f6:71:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:F9:35:6D:0F:94:59:05:C5:3E:F1:AE:43:36:AE:F2:2E:04:5B
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:9c:c4:e4:26:15:40:63:61:fa:c4:3d:85:ee:21:a2:17:
b4:a8:0b:e6:47:d7:7e:31:f3:7c:59:9d:b0:cb:17:58:8b:25:
01:af:bc:76:6b:5b:41:a9:6f:ad:1a:03:8a:7a:5b:75:60:f0:
cd:4f:ea:33:38:34:05:b1:64:cb:db:2a:7e:b8:98:a9:86:8f:
52:7e:b2:34:c9:58:16:93:4a:5e:87:64:22:d1:7c:b9:a8:89:
56:b6:d5:26:5b:df:96:31:52:d6:c1:e4:04:18:6a:ed:29:76:
f4:63:85:ce:6c:ef:90:73:94:a3:b1:3c:e3:21:25:d0:b1:2e:
5e:77:e8:32:df:d2:3e:53:46:72:fd:54:44:1b:89:bb:0f:ed:
02:c1:ea:26:72:b8:21:e7:ed:de:c9:1a:f3:6d:2d:53:7d:58:
8b:77:6d:9b:bd:a2:09:d2:a1:f7:ca:06:93:b6:84:88:aa:74:
a8:f6:29:25:9d:27:c4:91:9d:37:75:97:26:55:fd:b9:b3:6b:
86:0a:af:99:ae:9c:cc:e7:7c:7f:bb:8d:cd:ff:66:3f:63:4a:
6e:0f:4d:e4:87:33:c5:a0:22:b5:00:23:9a:fd:9f:99:e0:fe:
14:2a:35:61:e2:59:de:96:56:3b:42:c1:32:5c:ef:ec:9c:8e:
bc:78:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:20 2025 by rpki-client