Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: g+mOUBoknHLn2bfHekZN3POYPVH+U9/Tj6d1dGJwmdk=
Subject key identifier: C5:EC:BB:08:A5:61:21:13:83:7A:CA:3E:C2:CE:97:62:2F:3B:A6:E2
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 0199FBEBB6CC005D0135D83449DE691E21DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0ACF
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: SbUx7Pqcm+toyufWM7cIUVJxX7ot4PqBKXQjC2/AaKY=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b6:cc:00:5d:01:35:d8:34:49:de:69:1e:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=c5ecbb08a5612113837aca3ec2ce97622f3ba6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:39:35:b9:b1:d1:a6:1a:34:f7:b2:f8:ec:
4e:46:b9:b7:11:68:ea:77:29:ba:33:21:a6:21:04:
e9:ff:34:47:e4:18:9a:1d:eb:30:3a:2e:f3:2f:a0:
88:07:f6:bb:22:d1:88:aa:c3:a0:b1:7f:f5:fa:35:
57:d5:47:db:e0:53:61:bd:10:2a:29:0b:e8:d5:7f:
dc:c3:06:62:69:ac:2b:bb:c6:ac:2f:ee:60:e7:5b:
ba:91:1a:f4:92:29:ab:de:3f:3a:d8:64:94:0d:e7:
15:ef:3a:49:82:67:08:45:47:72:e3:c9:a1:15:d8:
12:72:c7:7c:af:0d:1b:a5:40:fa:7a:12:38:0e:aa:
a7:35:95:85:b8:9d:72:bd:fe:7d:6d:b4:7f:ba:20:
62:c0:ae:f7:01:17:4d:e8:ae:a2:85:93:6f:ad:4b:
d7:2c:b5:6b:a6:aa:97:6f:5b:59:cb:c5:d4:d3:1a:
68:cc:87:7c:10:7b:e5:e4:d9:1f:d2:13:84:30:32:
64:39:52:74:92:77:a1:cd:4d:c8:85:05:d3:47:b1:
a9:18:81:bc:6d:58:37:2f:ff:a2:68:d2:97:8f:fd:
7c:4d:45:3f:82:b8:89:e7:80:ec:13:8a:5c:a1:72:
0e:b4:e2:c4:de:dd:60:2f:13:1b:06:ea:87:31:40:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:BB:08:A5:61:21:13:83:7A:CA:3E:C2:CE:97:62:2F:3B:A6:E2
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:c7:d6:ea:8d:94:de:53:9f:0c:d3:8c:4e:fd:2f:db:76:
49:62:5d:2d:b3:bd:ef:96:7e:e4:4b:61:2e:a0:d2:ee:0d:7d:
47:d7:9d:e8:b1:9e:f1:fc:41:48:f7:ff:d9:1a:78:73:24:e6:
c5:e6:f1:97:e7:31:e3:6a:03:80:b6:85:1a:3c:94:25:26:68:
04:84:9f:19:97:dc:5f:a8:4e:38:2d:98:98:1b:8b:80:6c:60:
07:b3:0e:72:4f:00:e7:2b:e3:23:b4:e6:95:6f:c2:83:5a:e5:
08:14:d1:11:7d:a4:db:78:d7:4b:d4:a3:62:7c:c2:44:65:97:
fc:36:a8:54:9a:97:8e:b5:2c:8a:2a:cf:9c:cf:82:c8:39:e7:
e5:a3:56:1d:85:94:59:e5:26:16:5f:41:80:cc:38:86:2f:17:
93:a1:a0:8f:59:1f:fe:62:16:3d:47:cd:3d:68:8c:a0:f5:0b:
34:87:84:7e:31:41:03:43:0a:ef:f8:78:2b:7e:8d:9a:49:94:
39:e5:4f:46:e7:69:9d:d7:1b:40:85:d8:20:4b:86:6b:aa:fc:
e2:d0:92:1e:d6:39:2c:10:a0:75:26:46:28:7a:66:e5:38:a9:
e0:75:73:d4:5c:16:bd:3f:10:45:46:27:40:30:6c:cb:06:33:
4b:df:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:19 2025 by rpki-client