Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: HY/V7i3nUHhRHYCDXUrrx2PUKEyr1VXPkq71Lfn9MWs=
Subject key identifier: 4A:E4:CF:99:3D:DE:5D:AA:E8:6F:88:E5:24:07:68:66:63:24:BB:3B
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 019894B82EA1CC00679E48075994E0C928B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1630
Signing time: Sun 10 Aug 2025 16:02:35 +0000
Manifest this update: Sun 10 Aug 2025 16:02:35 +0000
Manifest next update: Mon 11 Aug 2025 16:02:35 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: vvvXoqihtxGr5yVB2wwspcaWYhu/ZYEh+HBXWYFU264=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:2e:a1:cc:00:67:9e:48:07:59:94:e0:c9:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Aug 10 16:02:35 2025 GMT
Not After : Aug 11 16:02:35 2025 GMT
Subject: CN=4ae4cf993dde5daae86f88e5240768666324bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:0c:fe:0d:19:33:78:d0:e3:7f:ed:e9:64:
1f:0f:e9:06:4b:2b:66:a4:8c:39:fe:06:8d:53:cd:
e3:1a:c6:7b:6d:a8:96:aa:06:32:c9:63:92:70:be:
2e:d6:2f:cb:11:19:b3:e0:08:d5:cb:3d:6d:4d:25:
c1:16:0f:69:73:9c:11:e2:62:8a:10:fd:65:37:f4:
78:91:e6:53:03:fb:d3:72:29:ca:52:58:72:c0:07:
be:96:11:bd:45:f2:51:84:60:b6:36:c0:6c:35:6e:
bb:af:82:04:6c:31:31:be:dc:f0:69:27:38:4d:6a:
a2:73:f5:90:8b:63:c3:5e:16:5c:bc:8f:b6:a4:a4:
63:64:e1:33:d4:00:72:9c:d3:c4:4c:3c:78:90:dd:
ad:22:25:12:a7:4e:17:64:0e:85:bb:2a:42:2c:78:
29:a6:b4:1a:4d:80:f9:3c:ac:a4:e7:40:c5:ec:cf:
30:79:24:a8:22:2b:c3:d3:c8:a9:35:14:b8:1b:99:
59:86:fa:31:e8:93:5c:0a:c9:e2:93:50:ee:e8:42:
d1:4b:38:63:18:66:5e:b0:f9:73:5a:64:7b:e2:26:
5d:65:c2:8a:bd:35:66:f5:b2:63:09:77:17:af:9a:
20:78:73:70:fa:29:a1:16:3b:c0:0f:8d:3a:7a:e8:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:CF:99:3D:DE:5D:AA:E8:6F:88:E5:24:07:68:66:63:24:BB:3B
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5e:bb:21:18:25:05:1b:56:45:e5:eb:7a:85:82:9c:69:9c:
a8:90:ea:1d:64:7f:35:51:cc:c5:d5:ef:47:9a:4c:fd:c0:9e:
6b:86:7b:dc:c8:ed:26:f5:27:ba:60:c9:d5:ec:74:5f:92:42:
8c:3d:00:8c:17:e5:78:6c:ba:58:e6:98:2f:a9:38:b4:6e:f4:
a6:49:de:f5:31:ec:2b:03:12:cc:a7:4d:8a:7a:46:6b:0e:c6:
c3:d6:41:b9:d0:b3:69:16:d8:2a:cc:ae:d8:6e:38:34:97:26:
75:15:67:ee:2b:d7:2d:c7:09:b8:0a:ab:10:c3:36:96:e6:ec:
10:9a:49:7f:0f:ff:2e:b6:10:42:e5:07:a3:0a:b9:a3:f2:db:
46:98:49:b2:ff:24:ae:01:c1:f1:b8:27:e1:91:f2:b7:60:68:
72:75:23:2e:82:a9:96:e7:88:d9:0e:4a:f9:81:d8:73:d7:04:
09:0d:46:9c:a8:49:d4:dd:56:bf:e0:20:9d:85:ce:fa:48:c3:
2a:e4:61:c4:3f:be:e1:98:ca:8f:77:dc:ad:d9:f0:89:0d:e4:
87:37:ce:9a:d8:77:4c:d4:d8:07:5f:0d:43:31:a1:a5:02:cb:
25:3c:f0:c4:6e:e2:53:81:8f:9f:93:87:04:20:aa:fa:f2:87:
94:72:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:54 2025 by rpki-client