Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: wu350EBZXMPEuFwBqyUh++lFdIbdW1upm/wJYKGBHic=
Subject key identifier: 19:38:3D:CF:BE:E3:C0:24:54:F7:7F:2D:04:AB:C7:02:0C:1D:9B:CE
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 0198D70607940D47F364F89CF8EA73824541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: Uge5NNlsOuri79KU4j2al/r7KLH41fRJ3VyzsSp/1no=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:07:94:0d:47:f3:64:f8:9c:f8:ea:73:82:45:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=19383dcfbee3c02454f77f2d04abc7020c1d9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:45:0a:29:fa:11:92:ac:70:77:6b:c5:57:
a4:92:a5:3d:d7:01:24:2a:5d:36:4c:1d:c1:c7:01:
fe:db:1b:bf:ff:c2:ae:84:51:86:23:28:d4:63:18:
a4:3e:0d:fb:f6:ea:8c:68:ae:24:46:4a:9d:4c:7e:
11:69:aa:88:94:8f:66:7b:13:20:9c:27:26:67:67:
4c:4e:e2:d6:08:bd:45:f5:44:6a:63:98:38:4d:24:
3c:d8:94:7a:87:06:34:0e:83:d4:72:57:56:1c:42:
db:c1:b3:38:6e:e0:14:dd:e2:0f:70:24:de:fc:53:
ca:28:b2:7e:98:51:eb:76:ef:85:31:9c:c3:5e:54:
1d:03:b5:c8:64:5c:d5:79:7c:ae:aa:f0:67:35:5f:
5e:ac:7d:3c:70:21:07:de:a9:e4:12:08:69:3b:1d:
46:64:6a:82:0f:58:91:ad:94:b3:8a:dd:84:16:8a:
b1:71:14:38:05:19:e4:82:3d:d1:7d:a3:1e:95:a2:
ea:54:27:20:6d:4e:11:89:3c:e6:90:7e:1f:b3:74:
1d:31:7e:e5:1c:8f:74:56:81:d5:cf:d8:a2:3e:e4:
6b:a8:85:dd:97:d4:86:59:43:e2:95:5a:4a:79:68:
94:a8:86:e7:3c:32:d9:ce:ab:d9:32:35:99:74:fa:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:3D:CF:BE:E3:C0:24:54:F7:7F:2D:04:AB:C7:02:0C:1D:9B:CE
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d9:a1:05:48:79:fc:fb:72:1f:e7:2a:57:87:48:db:1d:fb:
26:60:81:c3:e4:61:5c:1c:61:14:c0:93:f0:5c:aa:4e:55:54:
1c:6a:5a:37:0e:0d:29:f6:92:2d:a2:8d:7b:c0:8b:20:a4:99:
8b:30:ff:2a:a0:f4:90:25:2d:fd:60:de:48:ad:73:96:c4:c3:
a4:4d:00:c9:22:83:21:6a:5e:a5:ba:47:1e:25:73:33:7b:46:
a0:f0:2d:9c:a4:81:9a:7a:0a:ac:b0:f7:07:ca:53:03:c2:7b:
15:af:a3:10:a4:12:0e:c5:1f:9a:e5:df:69:70:50:90:fb:3b:
32:d1:d3:a1:7f:ee:21:ce:8c:14:a3:78:6e:12:75:d4:87:c2:
38:bc:1b:64:c1:b7:53:48:57:e1:9f:9a:ad:26:a7:29:30:4b:
0d:97:d1:61:f9:53:5a:1d:c2:d3:c2:a0:d5:dd:16:17:9d:95:
d9:10:90:38:7e:13:d6:5e:42:90:06:f3:26:86:fa:0d:eb:42:
8d:ef:3f:cf:5c:2e:68:4c:cd:02:b0:f2:b9:5c:91:e3:5d:e2:
10:a5:3c:fd:dd:dc:9e:18:97:ae:43:0b:10:99:32:d9:25:32:
e2:2b:a1:96:96:7d:0e:1d:a6:c2:fc:12:df:10:b6:ed:07:19:
06:3b:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:44 2025 by rpki-client