Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: OXsKh4lQfuMhG+2NfKu6IYFeaDojcCpmT2PJLjNp0Hc=
Subject key identifier: 30:24:B7:84:20:93:C8:A3:1F:9B:26:4F:74:6D:C2:F9:28:33:88:7A
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 01987C0A0D605AC2B1EAEED92986EE04B6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 21:01:30 +0000
Manifest this update: Tue 05 Aug 2025 21:01:30 +0000
Manifest next update: Wed 06 Aug 2025 21:01:30 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 3Sjh/6yMXugaWLBDcMSbKI/67Z8pvj+91sfgjvHH6iA=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:0d:60:5a:c2:b1:ea:ee:d9:29:86:ee:04:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Aug 5 21:01:30 2025 GMT
Not After : Aug 6 21:01:30 2025 GMT
Subject: CN=3024b7842093c8a31f9b264f746dc2f92833887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:36:d1:f5:64:30:33:b1:d7:b4:67:73:7e:
8b:8e:dc:6f:1a:0b:ab:a6:98:4a:5d:95:7e:66:9c:
53:f9:cf:50:52:34:ab:c4:d7:cc:c7:6c:8b:e8:fa:
11:82:13:10:1a:75:4f:1e:77:96:90:a1:f6:7c:b5:
d9:20:0c:80:9e:7e:b3:a6:61:f8:48:83:a1:b8:34:
ec:4c:2f:fd:db:62:d2:bd:2c:17:99:91:f7:78:07:
d3:c9:c5:03:82:3e:39:02:7d:4f:4f:ca:f2:77:08:
b2:b5:1b:df:e6:37:58:9f:76:0b:3c:ac:92:b7:43:
f6:30:be:15:7d:48:09:a2:dc:87:af:d6:52:1b:5a:
e9:af:6e:80:f1:2f:87:7f:19:49:08:15:fa:cd:17:
f4:06:f8:83:f5:e1:86:35:7b:95:64:0e:69:8a:b4:
04:ba:7c:43:27:aa:aa:6c:f8:d6:49:7a:cd:8b:df:
d8:cd:19:d0:34:a2:55:e6:05:90:04:66:38:37:fb:
49:33:c2:17:f6:c1:2e:55:05:f8:29:c2:98:de:a3:
ec:25:8f:20:59:12:a0:d5:eb:cf:39:1e:cc:7e:41:
45:ca:11:90:89:ab:8b:c0:f1:cf:71:35:0c:54:e3:
d2:8f:12:7f:3f:e7:85:09:d5:c8:25:dc:9b:6e:d9:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:B7:84:20:93:C8:A3:1F:9B:26:4F:74:6D:C2:F9:28:33:88:7A
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7d:9a:53:b2:74:72:2b:38:4f:96:24:cc:7b:49:a5:3a:1f:
2b:43:8b:7d:d4:a5:b5:62:62:c3:ed:a1:d1:95:3b:bf:95:de:
ac:ac:45:9d:09:45:53:5b:f4:ae:d8:86:43:57:c2:4a:8c:f3:
6c:49:4c:22:63:15:0c:81:4f:ed:ad:22:92:cf:e7:0c:5f:7f:
f3:f0:47:7c:b3:eb:c2:aa:ad:eb:cc:ba:7c:c2:5d:a6:cd:17:
55:0b:fa:9a:39:10:27:75:d2:21:5e:06:5f:77:94:33:00:c0:
77:39:e1:79:c4:2d:06:1d:0a:52:1c:a9:7b:86:28:d3:57:5f:
fc:58:e5:a0:5f:11:c6:06:6a:d2:1b:27:77:e5:58:b9:55:b3:
14:2e:b9:90:e9:b3:be:bb:a4:07:ba:a4:70:58:53:75:dd:4a:
80:d8:97:a1:e0:5c:63:09:50:9e:fc:2b:49:35:f2:fa:86:c0:
91:f7:68:25:2e:45:a4:7f:df:53:60:76:52:64:20:97:6d:56:
cf:df:f2:35:4a:8e:e3:68:d1:b2:fb:68:76:3d:30:1d:7f:a7:
71:08:b4:2b:bd:61:99:17:7d:fd:68:f9:1f:56:24:e1:71:6a:
7f:ee:87:ad:bc:e5:b9:2a:71:34:4a:db:e4:75:e5:b2:31:86:
cb:96:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:39 2025 by rpki-client