Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: UPvIkUg6pVF1pukPZ+so5Kuqphi1QRvAjalQK6PlT40=
Subject key identifier: 1E:12:38:51:96:C8:35:2B:B6:9F:CF:57:28:2D:35:89:C7:2D:59:0D
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 0197C7944912F6607F846A6C6EF876F749A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 02D5
Signing time: Tue 01 Jul 2025 20:01:13 +0000
Manifest this update: Tue 01 Jul 2025 20:01:13 +0000
Manifest next update: Wed 02 Jul 2025 20:01:13 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: uBgEpE8rP2a5VNCLCDoOwbg3QltaM9B6UrzGoM5HwzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:49:12:f6:60:7f:84:6a:6c:6e:f8:76:f7:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Jul 1 20:01:13 2025 GMT
Not After : Jul 2 20:01:13 2025 GMT
Subject: CN=1e12385196c8352bb69fcf57282d3589c72d590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:25:6d:56:30:11:97:64:18:7d:1b:9e:52:
70:14:52:95:38:23:bf:1d:d3:b0:d2:76:ac:d2:0e:
c7:84:e1:c1:ea:21:90:5e:01:75:70:1d:ea:4e:7c:
f4:62:bf:2b:e5:66:1a:6e:0d:22:3b:9d:9d:b3:77:
8d:87:29:cc:05:63:6f:d3:65:4e:4d:d0:06:e7:75:
10:0b:81:36:4d:93:d2:9e:1f:e8:40:12:8e:d0:65:
d6:25:0a:4d:c1:be:4a:2e:f4:ae:40:12:16:42:18:
15:c5:1f:38:de:80:47:5c:eb:97:75:c0:0c:7d:c7:
cf:28:89:5f:61:93:8b:1b:e6:f6:ac:4c:ba:69:e0:
9f:25:c1:4b:8e:39:4d:0b:7e:bd:ea:6c:70:07:99:
96:52:6f:b6:d0:ef:83:79:ff:d5:9b:1c:34:d6:df:
39:65:cd:ed:1e:69:12:11:63:c7:e0:ac:a2:49:c1:
17:25:b8:96:85:33:c8:2f:60:3a:87:77:73:c1:96:
38:80:a9:e3:20:08:d9:de:58:bf:8e:f0:b1:2e:20:
c3:f6:25:b7:69:5e:90:4f:b8:bc:69:6d:f2:bb:3c:
f3:8a:13:fd:da:a7:f7:48:89:2e:6d:c5:ae:ba:22:
a5:18:a6:ba:eb:e6:fb:10:a9:38:75:67:81:05:f4:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:38:51:96:C8:35:2B:B6:9F:CF:57:28:2D:35:89:C7:2D:59:0D
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:f0:e3:d0:ab:58:4d:1b:1c:66:d2:74:05:2a:5a:ca:a0:
6d:6b:90:a2:6e:d9:5a:a7:7e:02:d9:e2:36:a9:38:db:83:e2:
ad:ae:aa:75:7f:2c:8e:fa:6f:51:1b:e1:de:c0:f7:5d:e2:db:
18:3e:b9:cf:ed:d0:55:5a:2d:c8:4a:c7:f5:03:32:27:f7:82:
c1:35:ec:dd:5f:8e:84:2c:3e:f2:fc:06:b5:03:f5:74:e2:28:
82:51:db:60:f4:09:d4:d4:df:a8:5d:ec:43:bd:37:32:e3:35:
ec:a5:47:99:b0:fd:51:32:e8:aa:a9:09:cc:04:82:ca:c0:ec:
f5:2e:fb:59:10:65:94:60:92:07:0f:75:4f:fa:64:73:6d:75:
5a:c3:fe:b1:37:9d:bb:0e:93:06:76:8c:78:a1:5c:f3:49:27:
c3:77:51:48:3c:b7:40:44:1f:33:cc:e4:39:1f:13:f6:9e:b2:
0e:48:8d:07:f8:20:dd:24:dc:7e:2d:68:de:c9:16:92:7d:6f:
4a:73:8d:be:36:9b:ea:7b:23:b9:c0:6e:37:ef:eb:04:ac:c6:
a4:b4:d5:7e:0b:0d:96:4a:9d:23:3e:77:bb:df:16:08:8e:35:
78:d2:ae:ea:05:51:d6:da:56:b2:3b:25:db:19:a4:b6:45:a1:
7b:95:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:00:09 2025 by rpki-client