Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: qO0bCvInlMwMjaWAFeJrFlEQ3fHFUZOWfUOZX8kKgN8=
Subject key identifier: 92:3D:E6:51:32:27:58:B0:53:2C:4B:F8:69:83:9D:D4:83:80:8D:B4
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 019A4F9948F2A655328B0B9F889E30BA6AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: FGdI8kvfmHtxJT8if++Dc2NE6p3uKMI0qmAA6dCnEhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:48:f2:a6:55:32:8b:0b:9f:88:9e:30:ba:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=923de651322758b0532c4bf869839dd483808db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:cb:28:2f:77:7d:be:e8:8e:32:f4:e2:94:
a7:3c:9e:db:bb:fc:7c:33:2f:d7:9b:a6:1a:87:1f:
ea:ca:de:06:41:0c:98:99:7e:ec:31:c5:14:0f:7c:
84:11:58:54:22:02:53:f5:12:dd:8a:86:12:95:4e:
b2:e1:7d:01:db:a5:86:de:c7:30:ac:0d:ee:f4:59:
e3:4c:3a:fe:a1:98:3c:1c:6f:d9:e4:e1:79:c5:59:
c8:e6:50:d9:9a:cf:d8:fe:9f:1d:35:c4:1f:93:26:
c3:46:2d:04:6f:2f:0f:3e:9b:f6:8a:a1:16:bd:de:
9e:a9:66:ac:5a:e5:4c:12:f1:6a:f1:eb:b3:06:15:
59:51:6a:1f:0f:d1:00:10:84:7d:3e:a9:26:49:d0:
81:21:df:1e:67:da:1e:27:88:ea:32:5b:dd:12:b3:
45:6e:09:3f:16:54:c1:04:43:72:10:c6:5d:59:d0:
58:04:13:6a:a9:0b:a5:46:44:ce:ea:3f:70:32:75:
45:f4:bf:e4:39:dc:f9:b3:08:8d:31:a3:9f:07:2d:
b0:98:b8:6f:59:f7:be:00:b9:2a:74:7f:c4:22:0f:
01:2a:28:b8:46:5a:d2:ea:e3:75:16:3d:0a:86:3e:
c2:f9:97:da:e8:d7:c8:5e:2f:14:62:3c:da:b9:d3:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:E6:51:32:27:58:B0:53:2C:4B:F8:69:83:9D:D4:83:80:8D:B4
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:38:8e:3b:02:b4:a6:d4:9b:77:0e:69:34:31:7f:5f:0b:87:
ee:a0:04:7c:52:a6:5d:29:e0:12:a7:64:93:57:d7:d2:a0:b8:
af:3e:69:6b:00:6c:45:de:58:8f:8e:e5:b2:0b:fc:c0:f4:e5:
d3:0c:2a:bd:b4:a6:a8:8f:cd:d1:65:7b:bf:20:76:c6:6e:59:
01:5d:02:1c:4c:92:cb:f0:70:38:54:06:19:d5:8d:65:b1:1a:
ad:81:d7:1e:c6:33:af:d6:0c:60:bb:8e:0a:7c:27:91:55:fc:
64:56:21:b1:4e:90:2a:03:5b:13:2a:10:3a:20:1b:0b:03:b0:
aa:b3:3b:48:b8:4d:bd:0e:d9:a6:f2:2d:e6:72:37:b4:b9:b0:
5e:17:5b:b2:95:74:15:ec:de:03:5b:57:de:6c:79:9b:fb:31:
e9:8f:66:35:16:47:72:fb:94:bf:e7:a2:58:32:35:37:58:36:
f4:09:df:b4:eb:d6:d8:fa:5d:b7:c7:5b:8d:a5:7c:64:e8:a5:
39:0a:03:b6:55:68:dc:cc:2d:48:ef:57:88:54:2b:a5:d8:24:
eb:db:1e:8c:94:84:07:82:4c:a2:52:96:a3:95:07:33:21:98:
f6:d0:b9:92:b4:36:e9:8c:a0:d8:2b:ff:c0:06:7b:38:0a:1e:
79:c2:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:48 2025 by rpki-client