Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: /Qqc9RPBSOv2Vbv6PRTo3eGlVE0LULUbH9My4ZHEBbc=
Subject key identifier: 06:9F:B4:B9:FC:43:44:3B:ED:A7:16:24:CC:1C:C5:87:3B:E0:FE:19
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 0199FC8FC85A870A7AA5AF5B7A3D28D82080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: B1VnGfNdJk176Dli2BjPGnEZZahB0llBJxj9asjwOmA=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c8:5a:87:0a:7a:a5:af:5b:7a:3d:28:d8:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=069fb4b9fc43443beda71624cc1cc5873be0fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:0b:30:d1:0c:46:c3:14:1b:3c:9b:d1:12:
72:1c:32:b9:9d:27:7b:cc:3a:e0:9d:da:b9:9b:d3:
36:19:be:7e:d6:61:f8:cb:0f:91:e1:d9:c3:fb:6c:
ef:c5:a8:f2:9a:79:83:f8:d9:65:3f:81:a5:9a:4a:
19:b3:18:b1:bd:a6:2c:26:3d:00:8d:fb:aa:1f:19:
6d:7c:36:54:64:83:67:3e:51:30:18:2a:aa:a6:85:
aa:e9:f3:dc:65:98:1f:a9:1e:56:54:ed:31:ed:1a:
92:0a:33:7f:1d:88:3c:c8:da:58:c6:32:d7:6c:fb:
a4:c0:ac:06:6c:cb:eb:7a:3d:06:34:5e:16:ab:6e:
f1:fd:ad:ba:5c:6b:d0:cb:ed:86:44:84:53:16:da:
9b:54:e3:46:c3:21:50:c7:06:36:e5:cd:3e:4c:c6:
8e:b6:32:b5:0d:41:7b:2c:86:5b:02:22:63:f6:f1:
9c:ce:55:d8:61:69:97:09:7d:0d:4e:c4:db:e4:73:
88:e6:eb:25:dc:dd:70:91:7f:1b:50:ba:bc:9a:b8:
4f:02:09:46:ec:ec:09:94:b2:05:86:f4:44:7a:ba:
ef:2f:77:8e:9d:16:5e:ed:d2:bd:0c:97:dc:e8:6b:
f8:91:25:25:f8:73:4b:73:74:af:74:62:1e:fb:4f:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:B4:B9:FC:43:44:3B:ED:A7:16:24:CC:1C:C5:87:3B:E0:FE:19
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:37:17:87:38:3e:be:81:3f:19:6d:db:86:0a:11:40:7d:
c5:d5:87:50:cd:a3:13:0f:bb:d5:37:f1:68:90:6e:e6:7c:d0:
73:46:ba:8e:c2:47:88:db:b8:0a:b3:6f:10:84:c6:85:f7:5e:
ee:57:01:f2:46:34:02:d1:b0:6c:67:3a:0a:6a:d7:61:f4:f0:
da:91:38:8d:da:01:65:57:6b:54:7f:4a:76:44:18:a3:b6:90:
61:8f:0f:e0:4c:ef:90:5f:e5:ce:fa:5f:0c:a2:55:43:49:9a:
fa:d2:11:9c:97:2c:d3:86:2b:38:b8:0e:48:c7:13:ad:5e:d3:
7b:3b:1e:e1:27:cb:40:2c:f0:3a:f4:71:8b:23:8d:87:78:5d:
17:59:a5:aa:1f:80:61:95:e6:58:d3:b3:03:81:3c:5d:8e:c2:
69:81:d6:00:bb:c6:6e:0b:8d:97:05:03:b8:0c:99:d0:36:97:
f8:05:e9:8b:20:c5:66:19:0e:d1:3c:43:2b:5a:06:e4:bf:24:
8d:ff:62:88:a5:75:bc:6c:0e:00:92:e2:d6:ed:e2:86:68:f0:
f9:2c:7c:03:d6:c6:1c:d7:1b:7a:3b:4d:bb:80:ed:9c:07:25:
3c:46:bb:fc:ba:b8:48:9a:d5:06:6f:1c:30:c3:0d:6d:7d:05:
f9:89:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:26 2025 by rpki-client