Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: BIN1kWldBAGC1hg+L0/z7/8NUCJ3jSsBnbbJkQt9Rug=
Subject key identifier: CC:AB:BD:76:78:73:5A:8F:C0:83:AC:2D:A5:03:A0:3D:4A:D3:E4:A7
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 0197B6A24F1F753DF767D42A5E698E1EDE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: 5pFHxBTRhIqKOYo3/oCmGafGkmWQN4LwB7ZNiCrALBo=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4f:1f:75:3d:f7:67:d4:2a:5e:69:8e:1e:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=ccabbd7678735a8fc083ac2da503a03d4ad3e4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:4f:d3:67:e8:84:a6:49:01:de:d6:e9:51:
eb:35:56:19:c8:24:20:03:b4:cf:3e:b0:e6:b0:6a:
0d:5a:9b:69:a1:0b:76:b6:53:20:0d:fb:a6:8e:ca:
1f:4c:60:14:7b:bf:da:23:09:e6:87:a1:52:0c:e3:
9b:e0:eb:c8:74:4e:89:26:ee:97:22:be:f5:59:29:
27:79:ff:22:a5:af:1f:3a:ea:f5:27:96:b0:5e:c2:
ca:4e:d4:6a:4c:93:a9:f2:e6:45:e6:ab:04:97:3d:
59:33:3f:1b:3b:3a:af:c0:c2:01:fb:b7:00:de:6b:
9b:68:1f:be:7b:b7:23:02:03:3a:e3:70:40:39:aa:
3b:60:33:cd:72:52:a0:e3:05:f0:44:6a:c9:c6:b1:
15:fc:1a:fd:9e:51:46:89:93:e4:0b:f8:c6:73:2e:
3f:4f:86:2b:0f:84:54:5b:c4:6d:d2:de:20:4c:9a:
86:c9:78:e8:62:a9:bc:c7:5a:a2:9e:b4:2f:0c:da:
3a:f7:31:39:f7:c8:e8:fd:de:01:80:a8:68:c1:d0:
5d:ad:d3:05:82:5e:89:4e:63:21:05:d5:ed:43:7a:
ef:70:0d:40:2a:67:24:78:40:d2:a5:78:2e:a4:5b:
97:dc:92:3e:88:f6:6b:ed:5c:b3:64:2f:63:e6:dc:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:BD:76:78:73:5A:8F:C0:83:AC:2D:A5:03:A0:3D:4A:D3:E4:A7
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ff:7a:09:a0:42:d7:9a:e8:79:36:6d:7c:49:d9:c5:3e:78:
31:28:78:05:d7:39:53:91:24:61:08:14:44:51:53:30:a0:2b:
c2:68:f8:5b:0a:0d:a6:a9:ee:34:c0:cc:47:a1:b7:4f:00:dc:
ec:68:35:c0:3d:a6:96:98:6b:b6:51:24:cd:8f:29:dc:5d:21:
39:e7:65:d8:48:35:bd:83:a2:e3:a0:22:37:38:5c:00:19:26:
70:2d:ce:d7:bf:90:20:05:cd:f1:95:8b:6e:8e:59:8e:95:cc:
5b:aa:2f:de:ae:43:00:3e:48:a9:0b:e1:f9:5c:e2:d2:0f:d4:
81:86:a9:f4:5d:cb:68:b4:17:b4:be:ae:7d:01:20:bf:a5:31:
f1:9d:38:45:54:f8:b3:5b:8e:56:2a:19:ae:ac:48:35:10:cd:
17:69:7d:5a:56:57:da:43:7f:fa:5c:c2:bc:f0:c7:c8:b7:ff:
69:ec:31:c4:35:96:72:12:65:23:e5:62:ef:07:b1:84:30:e7:
f4:af:70:78:09:ee:6a:a9:c3:76:ec:f7:03:87:71:8f:83:dd:
ad:ce:29:42:b0:f1:b1:22:3c:90:ca:5d:b8:d5:95:f3:e0:a1:
d1:39:34:ed:20:e7:4a:3e:ed:73:85:9a:6b:5c:cc:34:b5:aa:
83:4a:44:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ok8fdT33Z9QqXmmOHt6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1
MDhlZjIwHhcNMjUwNjI4MTMwMjU5WhcNMjUwNjI5MTMwMjU5WjAzMTEwLwYDVQQD
EyhjY2FiYmQ3Njc4NzM1YThmYzA4M2FjMmRhNTAzYTAzZDRhZDNlNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ZP02fohKZJAd7W6VHrNVYZyCQg
A7TPPrDmsGoNWptpoQt2tlMgDfumjsofTGAUe7/aIwnmh6FSDOOb4OvIdE6JJu6X
Ir71WSknef8ipa8fOur1J5awXsLKTtRqTJOp8uZF5qsElz1ZMz8bOzqvwMIB+7cA
3mubaB++e7cjAgM643BAOao7YDPNclKg4wXwRGrJxrEV/Br9nlFGiZPkC/jGcy4/
T4YrD4RUW8Rt0t4gTJqGyXjoYqm8x1qinrQvDNo69zE598jo/d4BgKhowdBdrdMF
gl6JTmMhBdXtQ3rvcA1AKmckeEDSpXgupFuX3JI+iPZr7VyzZC9j5tzCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyrvXZ4c1qPwIOsLaUDoD1K0+SnMB8GA1UdIwQY
MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt
OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0
LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv96CaBC
15roeTZtfEnZxT54MSh4Bdc5U5EkYQgURFFTMKArwmj4WwoNpqnuNMDMR6G3TwDc
7Gg1wD2mlphrtlEkzY8p3F0hOedl2Eg1vYOi46AiNzhcABkmcC3O17+QIAXN8ZWL
bo5ZjpXMW6ov3q5DAD5IqQvh+Vzi0g/UgYap9F3LaLQXtL6ufQEgv6Ux8Z04RVT4
s1uOVioZrqxINRDNF2l9WlZX2kN/+lzCvPDHyLf/aewxxDWWchJlI+Vi7wexhDDn
9K9weAnuaqnDduz3A4dxj4Pdrc4pQrDxsSI8kMpduNWV8+Ch0Tk07SDnSj7tc4Wa
a1zMNLWqg0pEcw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:15 2025 by rpki-client