Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: QME1wmco89daLHonC/h4aAyTPmO5SReYCufYXd5TC38=
Subject key identifier: 8C:41:74:63:76:04:6D:90:62:A3:36:55:BB:42:64:C6:5D:1D:44:98
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 0196C8A906B13279CC5615075B25776C2A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0251
Signing time: Tue 13 May 2025 08:00:42 +0000
Manifest this update: Tue 13 May 2025 08:00:42 +0000
Manifest next update: Wed 14 May 2025 08:00:42 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: RzbkYGYWgxo3Zc6FHLZcHXxyYyNFAbRpulgsaXor7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:06:b1:32:79:cc:56:15:07:5b:25:77:6c:2a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: May 13 08:00:42 2025 GMT
Not After : May 14 08:00:42 2025 GMT
Subject: CN=8c41746376046d9062a33655bb4264c65d1d4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:64:79:0b:8f:23:5a:83:6a:0d:62:2a:08:
fc:12:b2:28:72:ed:10:28:38:ec:a5:7c:20:09:f9:
c0:cb:42:4d:3b:82:2d:33:ce:c9:1d:b6:2d:36:c8:
76:a0:d6:41:bf:fe:b1:d2:ad:fb:b5:f8:75:9f:40:
7e:b0:63:10:68:8c:c7:33:5f:7e:47:93:c6:50:2c:
36:fc:bf:e3:72:4e:33:23:01:07:8d:52:29:98:cd:
6d:ff:b1:4b:1b:85:25:48:44:88:b2:d9:63:9c:80:
39:55:d4:13:8b:d0:fc:d3:c7:20:b8:ef:45:c2:29:
3f:4c:0c:24:2d:cb:01:cb:61:c3:bf:a4:c2:0b:cb:
70:50:92:6c:34:f5:08:90:9d:8c:b0:7e:6f:79:69:
ca:c6:84:14:77:37:c0:72:94:dd:26:4b:a9:e1:fa:
c8:82:08:7c:08:db:a5:4e:2b:54:03:40:3b:e3:c1:
7d:ba:c5:65:83:a8:16:af:6a:09:3b:f5:56:9f:07:
ed:ac:c7:4f:21:be:f5:12:21:00:7a:f9:f1:8e:f6:
3d:af:be:41:21:89:2d:34:a3:db:b4:30:5b:3b:1f:
ec:03:99:13:35:12:db:17:16:f2:38:86:68:53:ea:
37:e4:4a:56:33:ed:d1:fa:6f:e6:5a:df:b0:e6:b4:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:74:63:76:04:6D:90:62:A3:36:55:BB:42:64:C6:5D:1D:44:98
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:ee:06:29:64:68:9a:8a:be:c3:6b:4f:40:3e:94:78:30:
55:97:2b:ed:05:37:b3:12:e6:01:48:9d:f7:ba:71:33:86:e2:
7c:bf:4c:8a:51:47:29:32:1a:a0:7a:e6:18:3c:ab:3c:35:7f:
a7:29:43:82:af:93:0e:8e:b4:2c:aa:cd:20:73:23:59:74:8a:
54:55:5d:99:1c:e6:8a:3f:70:55:9d:c8:be:77:7a:d2:0c:92:
d4:83:29:68:1f:4b:bf:dd:3d:99:c2:d1:c7:53:d2:0b:c2:ad:
0c:50:52:26:82:35:79:ae:c5:7d:80:06:14:e0:d2:42:8e:aa:
56:3f:78:22:8c:75:96:4e:d7:0f:56:df:bf:67:2a:8a:88:0f:
da:b4:77:cd:34:d3:d2:76:e6:1f:27:d2:6d:99:c4:e5:30:5a:
ca:c1:d9:32:a3:08:48:27:11:a1:88:bd:a4:b1:07:5a:9d:c6:
4a:1d:67:7f:5a:8d:60:ff:f3:6e:9f:dd:d5:2c:8a:64:e4:a0:
33:ad:05:86:1f:3e:5e:c1:cd:cf:95:28:78:82:f8:df:20:a0:
88:7c:d7:f8:bb:72:f2:20:98:90:21:8a:a8:64:37:6d:13:0a:
3f:c5:dd:b6:9b:af:4a:12:62:70:e2:cf:31:e1:a4:b5:6c:56:
ae:3d:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:05:51 2025 by rpki-client