Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: lNyKQQp2BJEcBa7x2z1mqX87K+NijTXYeeO2E8VsHLc=
Subject key identifier: 52:EC:4A:82:F0:26:83:EC:81:A5:73:D3:2C:CC:A7:D2:88:61:F1:AF
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019A4D743D673ABB8D3E4BBD6880F0E2DA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:54 +0000
Manifest this update: Tue 04 Nov 2025 06:00:54 +0000
Manifest next update: Wed 05 Nov 2025 06:00:54 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: lyeVxizZzqZM6iMtN7IN2S3kjZrs0seOEp3FKRDvJ7M=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3d:67:3a:bb:8d:3e:4b:bd:68:80:f0:e2:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Nov 4 06:00:54 2025 GMT
Not After : Nov 5 06:00:54 2025 GMT
Subject: CN=52ec4a82f02683ec81a573d32ccca7d28861f1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:5d:00:63:10:b9:aa:31:ed:92:22:50:6e:
ff:4c:8c:05:b7:0d:43:9e:0a:16:0b:2d:b6:0e:ac:
fd:c5:9c:a7:c6:bf:53:3d:4d:50:38:c9:7f:92:2d:
65:7e:21:64:3a:be:90:fc:b8:50:80:55:db:d7:b0:
a7:a3:fb:19:da:23:3c:a3:f1:35:12:5c:b7:a6:6a:
0a:9e:95:bd:a0:80:c0:22:ff:52:53:3c:c2:23:ec:
8c:42:48:51:4b:67:55:83:ec:e4:50:71:d9:9a:d4:
2d:55:e9:2d:c8:4f:77:3f:61:f1:30:96:97:98:ec:
a2:b5:11:01:d7:c0:a3:d8:fe:2d:27:bd:2d:0a:0c:
2f:84:55:e9:29:b8:95:0f:7b:c4:e8:92:01:f8:34:
a1:07:45:01:52:8d:85:6d:6e:1a:97:01:fb:a5:12:
fc:c7:50:5d:a2:3f:92:c7:a4:73:01:e1:e3:10:17:
bb:9d:c8:b9:ad:5b:bd:86:c3:26:40:7c:e4:5c:cd:
35:50:2c:02:33:49:d2:f6:cd:47:04:d8:c6:a4:69:
25:a2:f5:7d:93:b2:48:e3:57:2f:71:6a:16:11:71:
81:a0:bc:92:7c:6e:52:73:68:d1:c1:0f:ba:c1:15:
38:13:8b:fe:cc:f3:e4:cf:58:10:59:15:af:ae:22:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:4A:82:F0:26:83:EC:81:A5:73:D3:2C:CC:A7:D2:88:61:F1:AF
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:bd:df:2e:61:db:2a:d1:4b:c9:a1:64:8e:fe:5f:0d:0e:
54:6b:a2:d3:b2:c1:38:83:6a:79:39:26:71:3b:d4:5d:72:47:
92:48:bd:45:a4:c6:e5:69:f6:49:c3:ca:9a:c1:33:41:78:d0:
8e:ba:41:75:5d:13:04:01:06:2c:bf:77:17:85:80:b0:f2:2f:
8a:26:f5:e8:ab:15:79:3a:11:fb:46:df:64:60:b2:c3:9c:76:
b8:ad:2a:1a:a0:7f:b9:7f:bb:95:9d:f4:84:a7:d1:5f:35:c4:
1c:11:40:85:de:a6:ff:17:bc:e1:e2:6f:67:90:28:e4:db:44:
5c:e3:4f:1f:ac:8b:d6:81:ed:5d:e8:a1:03:56:a4:7b:1c:1b:
de:86:2b:85:ed:80:f6:f6:38:df:5f:73:e8:78:73:be:8a:3a:
8a:f3:c0:80:51:c0:81:5c:76:9f:71:db:5a:ad:f3:86:be:ec:
87:6f:56:df:ef:18:9c:25:52:35:b3:4e:e9:7e:52:56:5a:49:
81:d8:b9:ad:91:ea:9e:60:4c:42:a6:14:a0:84:d1:96:7a:ca:
e6:01:82:ee:92:df:cd:3a:ef:ca:23:8c:2e:40:c7:a5:d5:f5:
06:08:65:7a:a5:a8:1e:b6:6f:c6:11:07:59:d1:56:1d:c6:e3:
e6:20:9b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdD1nOruNPku9aIDw4toIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2
YWU3YzgwHhcNMjUxMTA0MDYwMDU0WhcNMjUxMTA1MDYwMDU0WjAzMTEwLwYDVQQD
Eyg1MmVjNGE4MmYwMjY4M2VjODFhNTczZDMyY2NjYTdkMjg4NjFmMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxtdAGMQuaox7ZIiUG7/TIwFtw1D
ngoWCy22Dqz9xZynxr9TPU1QOMl/ki1lfiFkOr6Q/LhQgFXb17Cno/sZ2iM8o/E1
Ely3pmoKnpW9oIDAIv9SUzzCI+yMQkhRS2dVg+zkUHHZmtQtVektyE93P2HxMJaX
mOyitREB18Cj2P4tJ70tCgwvhFXpKbiVD3vE6JIB+DShB0UBUo2FbW4alwH7pRL8
x1Bdoj+Sx6RzAeHjEBe7nci5rVu9hsMmQHzkXM01UCwCM0nS9s1HBNjGpGklovV9
k7JI41cvcWoWEXGBoLySfG5Sc2jRwQ+6wRU4E4v+zPPkz1gQWRWvriKfpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLsSoLwJoPsgaVz0yzMp9KIYfGvMB8GA1UdIwQY
MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt
MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5
LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzS93y5h
2yrRS8mhZI7+Xw0OVGui07LBOINqeTkmcTvUXXJHkki9RaTG5Wn2ScPKmsEzQXjQ
jrpBdV0TBAEGLL93F4WAsPIviib16KsVeToR+0bfZGCyw5x2uK0qGqB/uX+7lZ30
hKfRXzXEHBFAhd6m/xe84eJvZ5Ao5NtEXONPH6yL1oHtXeihA1akexwb3oYrhe2A
9vY4319z6Hhzvoo6ivPAgFHAgVx2n3HbWq3zhr7sh29W3+8YnCVSNbNO6X5SVlpJ
gdi5rZHqnmBMQqYUoITRlnrK5gGC7pLfzTrvyiOMLkDHpdX1BghleqWoHrZvxhEH
WdFWHcbj5iCbsg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:09 2025 by rpki-client