Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: fOffiTnvTMWXg/LTisX2kTulWq17sSqy02ZrhjUqDu8=
Subject key identifier: 32:4D:39:C9:39:C5:16:70:58:06:C8:C8:62:30:FA:B4:68:F9:A2:27
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 0197D5878F4604A5AF16E7FAE832780A8E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: 97
Signing time: Fri 04 Jul 2025 13:02:00 +0000
Manifest this update: Fri 04 Jul 2025 13:02:00 +0000
Manifest next update: Sat 05 Jul 2025 13:02:00 +0000
Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: ssYGtdAyA/G/9EmGlZWQfvsj7+IVOYN9W/e5RPeTIbE=)
2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:8f:46:04:a5:af:16:e7:fa:e8:32:78:0a:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Jul 4 13:02:00 2025 GMT
Not After : Jul 5 13:02:00 2025 GMT
Subject: CN=324d39c939c516705806c8c86230fab468f9a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:46:04:17:f8:6a:a9:21:f6:8e:70:07:2d:
c5:3c:10:ac:4e:3b:65:e7:28:87:8f:ae:a6:d6:a2:
3a:ad:14:71:04:04:ca:5b:1a:28:28:9b:0f:8b:e2:
85:a4:33:90:09:93:de:37:0b:ad:33:d2:d8:00:d9:
0e:8a:29:81:fc:d1:b6:91:41:4f:40:9c:46:34:18:
05:47:ed:8a:37:98:56:2f:d6:99:76:31:bf:db:9e:
da:f7:d3:04:42:c6:ae:d8:98:30:47:94:73:5b:8f:
b1:01:8f:63:27:69:30:2c:5d:16:0b:23:f2:ba:b0:
87:6e:ff:05:df:fa:dc:52:0a:29:f7:fe:66:f5:a2:
5a:d2:d4:c6:12:06:a8:5c:b1:4c:60:37:12:f1:3b:
2f:0d:65:b4:a7:35:83:fb:c3:3e:6e:db:4d:23:72:
29:b2:ac:01:12:c9:cf:58:a7:a9:99:55:23:b7:c1:
56:23:4d:15:4b:0c:93:8f:68:88:c5:b1:b9:83:fd:
d8:a0:0c:f6:7a:dc:b8:b3:ec:86:8d:f6:6c:71:82:
31:36:c2:c1:eb:93:46:78:dc:63:49:c4:23:04:4a:
08:7c:51:7d:d3:b8:85:62:25:85:72:c1:3c:73:b2:
c2:55:c2:1d:69:3a:3b:97:19:3e:32:9f:ad:03:2f:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:39:C9:39:C5:16:70:58:06:C8:C8:62:30:FA:B4:68:F9:A2:27
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:5b:fc:d4:d8:55:41:65:f0:c7:26:df:79:29:1d:09:73:
51:41:9c:8a:10:41:e0:04:34:70:d2:ac:bd:79:71:01:a8:6b:
70:55:e3:31:5a:2c:e9:68:39:3d:17:51:a7:16:70:ae:86:18:
34:7f:e9:f5:e7:e5:a8:bd:a3:61:61:bd:73:53:7e:47:fa:55:
94:58:f8:d3:20:69:e9:8a:fa:81:6b:89:31:10:a3:31:b8:b5:
57:2f:76:9c:cd:4e:10:b4:e1:7c:51:3e:40:bf:ad:3c:24:56:
44:67:1f:c7:64:af:02:ac:b0:ba:6e:90:22:a7:61:a9:3c:a8:
58:6e:9b:f1:79:dd:91:ed:ff:f9:22:c5:1c:8d:c4:25:be:ef:
7a:e7:37:b9:29:6b:05:1b:cd:a7:12:89:31:a6:86:78:c3:96:
d2:7b:cc:54:4e:e3:97:17:49:06:71:af:9d:32:61:1d:98:e4:
6b:5c:c1:d5:62:57:5b:b7:64:32:53:10:ab:a0:81:5b:a3:05:
41:4b:7c:78:00:24:bc:2c:cf:24:db:78:1c:f2:d5:a5:f7:cd:
bc:17:c1:ee:a9:8e:74:fa:b5:7a:98:fa:b1:d5:90:7c:a8:6e:
2d:8f:85:8d:72:0f:13:06:f1:26:24:85:f4:be:25:28:62:62:
1b:85:7b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVh49GBKWvFuf66DJ4Co4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy
ZTM2ZWYwHhcNMjUwNzA0MTMwMjAwWhcNMjUwNzA1MTMwMjAwWjAzMTEwLwYDVQQD
EygzMjRkMzljOTM5YzUxNjcwNTgwNmM4Yzg2MjMwZmFiNDY4ZjlhMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9GBBf4aqkh9o5wBy3FPBCsTjtl
5yiHj66m1qI6rRRxBATKWxooKJsPi+KFpDOQCZPeNwutM9LYANkOiimB/NG2kUFP
QJxGNBgFR+2KN5hWL9aZdjG/257a99MEQsau2JgwR5RzW4+xAY9jJ2kwLF0WCyPy
urCHbv8F3/rcUgop9/5m9aJa0tTGEgaoXLFMYDcS8TsvDWW0pzWD+8M+bttNI3Ip
sqwBEsnPWKepmVUjt8FWI00VSwyTj2iIxbG5g/3YoAz2ety4s+yGjfZscYIxNsLB
65NGeNxjScQjBEoIfFF907iFYiWFcsE8c7LCVcIdaTo7lxk+Mp+tAy+x0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJNOck5xRZwWAbIyGIw+rRo+aInMB8GA1UdIwQY
MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt
ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4
LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAashb/NTY
VUFl8Mcm33kpHQlzUUGcihBB4AQ0cNKsvXlxAahrcFXjMVos6Wg5PRdRpxZwroYY
NH/p9eflqL2jYWG9c1N+R/pVlFj40yBp6Yr6gWuJMRCjMbi1Vy92nM1OELThfFE+
QL+tPCRWRGcfx2SvAqywum6QIqdhqTyoWG6b8Xndke3/+SLFHI3EJb7veuc3uSlr
BRvNpxKJMaaGeMOW0nvMVE7jlxdJBnGvnTJhHZjka1zB1WJXW7dkMlMQq6CBW6MF
QUt8eAAkvCzPJNt4HPLVpffNvBfB7qmOdPq1epj6sdWQfKhuLY+FjXIPEwbxJiSF
9L4lKGJiG4V7bw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:52:26 2025 by rpki-client