Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: UCzbc5TwQx8SAgoM2DeSNFT/UqskgXpSdaUfmxhQBAg=
Subject key identifier: B0:E2:C0:17:7E:F6:45:7D:36:54:0B:BE:2B:32:34:30:27:0E:D5:B5
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 01976BBD89579FE5B3926B892596B703EB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:01:12 +0000
Manifest this update: Sat 14 Jun 2025 00:01:12 +0000
Manifest next update: Sun 15 Jun 2025 00:01:12 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: C3IFdSQnfZEjkNxI0U4sFsMJbNaWhwndwuq8TKnlebM=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:89:57:9f:e5:b3:92:6b:89:25:96:b7:03:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Jun 14 00:01:12 2025 GMT
Not After : Jun 15 00:01:12 2025 GMT
Subject: CN=b0e2c0177ef6457d36540bbe2b323430270ed5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:66:0f:76:00:6d:1f:95:c5:a7:7b:01:68:
a9:e7:a4:4c:38:3f:d0:79:43:4e:41:5d:4d:dc:e8:
01:1b:04:b7:35:fa:61:2c:88:04:d3:04:c1:47:43:
e7:cd:1a:7d:be:48:10:39:e1:26:3a:b0:c6:5f:84:
bb:77:af:23:73:48:0f:d0:a4:b0:72:66:85:7b:9c:
f3:ef:91:6f:5f:44:28:ce:7b:3b:cb:96:d5:6c:b9:
a2:9b:8b:da:40:c3:d6:e9:05:18:c5:7d:19:eb:cc:
86:d0:36:e2:38:8b:f4:df:b1:26:5f:ef:b2:e7:fc:
23:bf:0f:a8:ff:a2:6d:8e:56:21:d4:a9:6a:12:e7:
e6:6b:cf:02:52:91:96:c9:98:46:cb:93:3c:51:60:
6b:68:30:7c:53:8e:9b:93:99:7f:d4:93:63:f9:10:
74:47:b4:e3:fb:91:ae:42:00:53:58:6b:db:23:67:
57:55:d6:2b:66:82:1e:f4:be:99:e7:0c:ef:8d:26:
d2:b0:f3:5f:3a:01:93:97:e6:d4:58:f6:c2:99:6c:
39:8b:fe:cf:2e:15:6b:0b:b3:11:77:4a:3b:7e:15:
83:ad:55:8e:63:37:2d:48:ba:34:89:67:32:05:f9:
17:a1:89:d4:dd:0f:96:17:b1:a6:43:cc:50:54:6f:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E2:C0:17:7E:F6:45:7D:36:54:0B:BE:2B:32:34:30:27:0E:D5:B5
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:bf:de:e4:be:ae:26:ac:63:d6:3d:ae:54:f8:9a:5d:82:
d4:37:9a:fa:2d:84:e2:0f:bf:d1:de:21:37:50:04:93:71:6a:
07:a2:93:fb:13:aa:dc:43:0c:08:df:0d:ba:c5:77:91:f3:73:
9e:d2:d0:89:25:bb:23:ac:43:fb:bd:71:65:64:d5:da:6a:95:
fd:99:3a:9c:cc:03:79:bc:cd:17:a1:bc:62:f5:ac:83:80:08:
70:f0:2e:4b:38:55:5e:45:b1:27:59:68:98:dd:cc:c3:f6:db:
fb:e6:a9:55:7e:ca:e1:df:94:7c:57:c5:7f:9a:f5:7c:2e:7f:
1d:0b:25:39:73:d5:75:43:7d:4b:ca:c7:b2:f1:26:aa:a6:33:
ce:df:24:74:ea:be:dc:ae:23:2b:1c:70:02:96:a3:35:64:ac:
20:de:34:8c:e2:a4:b7:68:1f:ac:ac:2b:67:ea:41:f7:af:08:
49:c8:7b:a4:5f:5e:f7:f3:ca:d3:83:7b:d4:d8:ca:3a:68:18:
cc:22:e2:e7:58:20:7d:97:e1:09:0d:8a:32:03:04:57:bf:1f:
0b:78:f0:7b:ca:dd:fe:49:e2:5d:00:66:fb:e1:64:02:df:c5:
a0:1d:b2:81:49:15:bc:8e:7f:b1:8b:25:a2:94:f7:5e:33:ac:
68:e2:91:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvYlXn+WzkmuJJZa3A+uMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2
YWU3YzgwHhcNMjUwNjE0MDAwMTEyWhcNMjUwNjE1MDAwMTEyWjAzMTEwLwYDVQQD
EyhiMGUyYzAxNzdlZjY0NTdkMzY1NDBiYmUyYjMyMzQzMDI3MGVkNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDBmD3YAbR+Vxad7AWip56RMOD/Q
eUNOQV1N3OgBGwS3NfphLIgE0wTBR0PnzRp9vkgQOeEmOrDGX4S7d68jc0gP0KSw
cmaFe5zz75FvX0Qozns7y5bVbLmim4vaQMPW6QUYxX0Z68yG0DbiOIv037EmX++y
5/wjvw+o/6JtjlYh1KlqEufma88CUpGWyZhGy5M8UWBraDB8U46bk5l/1JNj+RB0
R7Tj+5GuQgBTWGvbI2dXVdYrZoIe9L6Z5wzvjSbSsPNfOgGTl+bUWPbCmWw5i/7P
LhVrC7MRd0o7fhWDrVWOYzctSLo0iWcyBfkXoYnU3Q+WF7GmQ8xQVG9/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDiwBd+9kV9NlQLvisyNDAnDtW1MB8GA1UdIwQY
MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt
MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5
LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfS/3uS+
riasY9Y9rlT4ml2C1Dea+i2E4g+/0d4hN1AEk3FqB6KT+xOq3EMMCN8NusV3kfNz
ntLQiSW7I6xD+71xZWTV2mqV/Zk6nMwDebzNF6G8YvWsg4AIcPAuSzhVXkWxJ1lo
mN3Mw/bb++apVX7K4d+UfFfFf5r1fC5/HQslOXPVdUN9S8rHsvEmqqYzzt8kdOq+
3K4jKxxwApajNWSsIN40jOKkt2gfrKwrZ+pB968ISch7pF9e9/PK04N71NjKOmgY
zCLi51ggfZfhCQ2KMgMEV78fC3jwe8rd/kniXQBm++FkAt/FoB2ygUkVvI5/sYsl
opT3XjOsaOKRQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:00 2025 by rpki-client