Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: bTvmpvbUsi2B2b0Uwq8H8Hexq0haaYGjU5bXVm5mx1A=
Subject key identifier: 40:2E:48:26:86:89:7D:D6:EB:3D:49:B5:B8:78:38:7F:8B:6A:66:5D
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 0197B8904F46DDA1E147AFCF38B0C2466136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 09A3
Signing time: Sat 28 Jun 2025 22:02:34 +0000
Manifest this update: Sat 28 Jun 2025 22:02:34 +0000
Manifest next update: Sun 29 Jun 2025 22:02:34 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: YtjBM/GFnJ/mdY2sDaAT2vHXMY+CvAWERmbKDoUdQ48=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:4f:46:dd:a1:e1:47:af:cf:38:b0:c2:46:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jun 28 22:02:34 2025 GMT
Not After : Jun 29 22:02:34 2025 GMT
Subject: CN=402e482686897dd6eb3d49b5b878387f8b6a665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:94:c3:e2:a9:ec:13:31:5e:ff:84:77:6d:
49:7a:c7:c5:a5:6d:a5:ba:f9:7f:b1:ca:c5:c5:30:
d8:9a:4d:6b:d4:96:50:db:a2:84:be:c1:4e:e5:a4:
35:02:f7:76:6a:0b:b2:a3:e5:d3:87:9f:42:e7:84:
23:b6:43:a9:a1:39:54:13:41:dd:08:f5:68:aa:3e:
41:24:0b:9b:cb:d4:4c:57:ce:18:11:d1:5d:de:89:
2e:14:0a:4a:72:ae:4f:a4:9d:8c:26:f5:8a:9a:33:
51:92:0a:1e:c5:ec:d7:21:61:1e:16:aa:5f:f6:f5:
55:c4:66:71:4c:26:7f:69:eb:0a:03:d9:a6:55:4b:
8b:41:d8:b6:fd:4e:7a:58:a7:6b:c1:cb:c5:3f:e0:
38:56:f3:3d:23:56:2b:40:32:5e:21:0b:b5:26:6f:
f1:d1:db:45:e0:72:5b:89:33:99:82:58:9d:7a:90:
de:4f:e5:5f:b4:f6:57:8c:ba:98:6c:11:78:4d:30:
33:ca:c2:62:c3:90:fb:4a:f8:d0:73:a0:3b:de:ad:
56:bd:5f:93:9a:09:6f:25:32:6d:fc:45:05:ba:5e:
63:e3:23:d3:d6:c7:c6:fa:ee:9d:9b:17:f7:f3:b9:
06:a8:a5:d1:75:9d:89:79:86:02:c3:74:7a:e6:09:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:48:26:86:89:7D:D6:EB:3D:49:B5:B8:78:38:7F:8B:6A:66:5D
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:d3:9e:7a:94:70:87:2d:bd:44:66:ca:e9:62:bc:e7:73:
c9:27:bb:fa:a0:63:a9:0d:39:1a:bd:95:05:8d:0e:0f:75:6a:
37:ba:49:61:30:7a:14:a1:8c:ae:78:69:1d:a2:db:52:ae:18:
c4:b5:0e:49:d4:45:d6:30:ac:a6:06:43:9e:88:31:a0:fa:53:
e6:4f:7d:fa:4e:01:3b:df:3c:a3:7e:16:0e:42:b1:ee:9d:8b:
6c:4d:aa:fd:51:3e:5f:05:52:eb:86:e3:eb:d1:e2:ce:b1:f1:
8a:b9:80:67:63:28:3e:a6:d9:d9:0b:0a:3e:6f:41:d3:cb:b9:
10:11:15:50:e4:1c:b3:03:63:df:71:b5:62:03:d9:d4:43:2d:
33:58:9f:6d:31:f5:7c:00:5b:18:33:cc:6c:23:87:26:c5:4e:
93:f3:51:f4:6b:99:5f:8c:02:cc:4a:7d:97:ef:ba:37:9b:85:
80:63:b0:52:6f:3a:2c:e3:78:89:ff:cf:76:ad:7f:60:73:33:
a6:f2:a8:4d:37:69:e9:ff:18:02:30:c3:5e:e6:46:fd:6a:e5:
cd:90:ef:2b:ce:68:e5:b5:76:6b:3c:8a:9c:d5:98:d3:4a:78:
0a:f4:fe:2e:b3:76:93:58:ae:6d:f5:89:33:49:64:45:db:cc:
db:b2:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:19 2025 by rpki-client