Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: lU1ZnjXkLhLVS1zVKetzNhR5Gn+XKxZ9EektjY7eXYI=
Subject key identifier: 01:77:00:37:D0:38:3E:1E:93:9A:C9:2D:27:84:1D:EC:E1:1E:84:08
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 019A4F2B6A5A83300E9AFA983A747AB52D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: V10PKZ4waSAaXOSJR1V/rWlK21AWDaK/sjfgx7xV2OM=)
2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:6a:5a:83:30:0e:9a:fa:98:3a:74:7a:b5:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=01770037d0383e1e939ac92d27841dece11e8408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:d8:4b:41:20:29:31:fd:1a:a2:65:95:8e:
e8:a1:b4:aa:0e:be:ed:a6:b8:ee:ab:35:06:7e:06:
38:4f:2d:a8:c6:81:50:46:18:dc:4e:1f:a7:b3:fa:
0f:82:1b:ec:fc:53:b5:09:53:19:7f:3c:94:f3:eb:
fd:96:e4:aa:3c:7b:b7:65:d8:b5:7f:1c:f8:c9:c6:
60:08:72:4a:51:a9:3a:11:d0:97:09:04:2b:ae:5f:
06:a9:1d:d6:20:2b:e4:de:3f:c7:65:e5:50:d1:1c:
5b:aa:4a:f2:09:19:dd:3b:29:8b:42:fc:51:74:22:
50:81:f3:45:76:b9:ba:04:ac:56:22:29:ed:ca:60:
5a:3d:a0:71:bf:b4:88:ca:c8:43:b2:cb:21:34:bf:
ae:81:03:88:6e:6b:28:7b:a4:35:d3:ca:31:20:fb:
a3:c2:37:d4:eb:1f:d1:bf:54:2d:7e:cd:ab:93:39:
82:40:59:de:5e:67:f7:30:6f:2f:e6:83:2d:dd:61:
11:0c:fc:b0:e3:c7:e2:ac:7d:64:e5:4e:61:e4:54:
1e:a1:d4:59:d9:4f:90:b3:0f:39:c3:f8:e9:bb:e2:
cd:86:3d:24:53:b7:7a:ec:6c:08:b4:b0:2d:c7:ea:
cb:d1:99:c8:4c:73:f2:d5:a7:a1:dd:9b:ee:2f:9a:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:00:37:D0:38:3E:1E:93:9A:C9:2D:27:84:1D:EC:E1:1E:84:08
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:6e:59:c5:b1:03:fd:60:ff:8f:57:de:19:e8:6d:45:14:
15:93:39:f5:88:36:8a:77:02:60:43:8b:44:39:2c:8f:fe:fe:
65:90:c3:0b:77:8d:c5:74:52:9e:4b:db:82:ab:68:5f:bc:a5:
ba:c9:df:8a:20:c6:4d:77:e6:93:25:72:b0:fb:c0:4b:a6:0c:
22:88:cb:3f:cb:53:57:d8:85:3c:7d:b8:31:56:19:90:99:80:
d9:d9:2e:a1:b7:12:2e:b6:fc:e5:ae:46:1e:87:49:35:f2:87:
02:7a:6f:f5:1e:0f:2a:79:ad:4e:6d:07:0f:46:59:9a:c7:86:
5b:dc:10:cc:a7:f1:b9:63:1c:55:e0:d7:de:df:49:34:97:a2:
ff:fc:38:60:de:3c:88:0a:6b:83:27:84:f7:96:77:03:a9:7e:
80:c3:4d:b9:35:5d:2e:cf:f0:a5:2d:ec:1d:a2:3d:f1:45:30:
f9:f4:69:88:ce:23:fd:ab:21:16:bc:ed:e7:ad:ef:fd:e6:46:
79:f8:a1:54:eb:79:62:7e:77:4a:56:ad:56:7b:3a:6d:d6:79:
9f:b0:b9:ca:d0:2d:bb:d1:9b:bd:b9:dc:47:9b:e5:82:70:e5:
b7:c8:36:55:33:c8:41:1f:d5:c1:80:5d:f3:fa:53:50:da:c2:
fc:8c:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:03 2025 by rpki-client