Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: 6+lHxiYUMKI31y9ssiJeJ4xvTlmQ876p0jx/p5wAMDE=
Subject key identifier: 89:B8:A9:2C:57:CB:2C:76:6A:67:17:C9:A1:D7:1F:3E:01:52:EB:CA
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 0199FB7CB8525CFC9D064B4612F783588A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: AY99WQNiPvj0hgiOtgZSYxBHyUBLX+KvDreadx1WDC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:52:5c:fc:9d:06:4b:46:12:f7:83:58:8a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=89b8a92c57cb2c766a6717c9a1d71f3e0152ebca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:40:26:cb:53:69:90:00:99:d1:86:a2:23:
7a:9e:7e:be:d6:46:5d:46:af:40:08:ae:62:43:71:
78:a3:3a:2b:33:6f:8a:b5:90:f8:6d:ac:a8:46:6f:
1d:5a:f3:55:ae:55:ea:21:81:84:57:0e:e5:86:53:
4c:67:ed:c2:68:10:e1:c5:68:24:78:6e:1c:86:a9:
83:84:03:ac:be:80:6b:c3:ed:15:b1:5c:77:24:52:
ba:b6:bb:0d:f6:dc:d9:2c:2f:87:67:1c:fc:86:2e:
c8:f4:80:3e:1d:d1:8b:98:1d:1c:01:1c:e2:38:c9:
1e:7b:50:50:34:8a:fd:4f:11:f3:f4:57:bf:24:0a:
0a:3d:6c:64:9a:97:db:da:ad:a8:9d:a6:1b:e0:fd:
a9:c6:d7:7f:b5:98:32:52:d4:1c:72:c6:cb:2e:72:
35:a1:13:43:f7:62:23:a2:89:f4:70:da:c1:3a:c7:
b4:f4:0d:0d:d5:34:03:8b:98:d9:09:5f:b2:57:c0:
b6:85:e9:84:3e:af:6d:76:a5:87:38:ba:0e:2a:21:
4d:c7:45:05:40:2b:1f:6e:3c:7a:86:6f:7f:3a:4b:
2d:8c:df:69:63:b6:19:4a:f8:05:d2:51:0f:b6:dc:
a9:b2:da:8d:ec:35:26:7e:6a:6a:a0:23:38:b5:7f:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:A9:2C:57:CB:2C:76:6A:67:17:C9:A1:D7:1F:3E:01:52:EB:CA
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:52:f0:bf:72:b6:b1:b9:31:1c:8c:21:52:18:ca:51:2c:
b2:99:5e:f8:35:a1:16:9f:05:10:4e:43:c4:32:20:8f:89:96:
12:9d:78:c6:7b:d2:1a:9a:d1:6c:a2:19:43:87:9b:b5:b2:fc:
a5:95:fe:81:f3:14:39:b7:76:f9:a7:f3:f5:61:51:be:f6:f3:
a2:8d:0d:37:d0:96:54:3d:ea:ce:46:01:8d:c6:db:f8:bd:00:
be:7b:00:7c:31:46:66:e7:6a:93:cc:82:04:34:01:06:51:96:
a3:60:8b:34:f8:a9:27:aa:3c:85:f0:11:0f:f1:fc:b9:aa:95:
66:ab:5e:1d:06:47:f9:ff:42:ea:bf:e4:cb:29:59:ce:a9:54:
22:66:1f:47:29:f9:50:86:63:42:44:a8:3e:e7:0e:74:41:0e:
20:a3:8d:41:5a:b4:cd:a5:a4:09:58:e0:84:e8:89:5a:ff:3a:
e5:22:4a:ea:2b:9d:6b:e9:d1:95:a4:f9:c8:b3:55:96:d2:38:
9d:fb:b5:af:5b:0a:fe:97:ac:ab:28:fe:ea:5b:ff:25:b0:93:
05:cf:ab:11:aa:3d:b2:38:4d:78:6e:b6:a6:cb:c0:06:b1:d9:
4d:40:38:a2:9e:a6:6d:86:b0:11:27:b8:95:fd:2d:4d:cd:66:
fc:e3:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:54 2025 by rpki-client