Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: DCZOvzlfBi5efhNTBat6qpVxOKjGIa/a2Y/zHXIvyfU=
Subject key identifier: 25:82:B8:E3:3E:41:0B:F5:EB:26:A6:DC:19:96:2E:D1:46:99:E1:A4
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 0198819E20C94F8F8FC54CA645D19E80FD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1625
Signing time: Wed 06 Aug 2025 23:01:20 +0000
Manifest this update: Wed 06 Aug 2025 23:01:20 +0000
Manifest next update: Thu 07 Aug 2025 23:01:20 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: wNwfEg8cqM+zfe0FlqQ/aziyndcwKowR1hiztqD1I40=)
2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:20:c9:4f:8f:8f:c5:4c:a6:45:d1:9e:80:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Aug 6 23:01:20 2025 GMT
Not After : Aug 7 23:01:20 2025 GMT
Subject: CN=2582b8e33e410bf5eb26a6dc19962ed14699e1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:4f:f2:07:36:a2:93:15:be:cf:25:9e:ff:
a4:65:9b:70:56:43:9b:9b:31:9b:12:a7:03:66:02:
d8:17:de:00:72:bd:cc:14:1a:41:d0:e4:46:7f:60:
56:e8:6e:99:6e:ba:07:99:7e:cf:29:83:ce:3f:1e:
ae:26:01:75:85:1b:6b:56:6c:58:27:9d:e8:9e:be:
cd:ea:33:1a:e8:25:03:b5:80:aa:f2:db:3d:cb:e6:
d6:fe:e1:ae:39:f7:fd:cf:9c:6e:c9:36:e1:36:76:
7b:8e:8d:bf:41:50:52:dd:f6:6b:26:81:27:18:37:
e0:cf:d6:60:cc:18:dd:75:b8:f4:a1:6a:f0:aa:38:
46:12:80:79:7b:7d:6f:6a:f4:13:2e:db:68:cd:08:
0d:ba:96:45:01:ce:d2:b7:ae:ea:6f:33:60:47:b0:
f3:4e:13:ad:c3:eb:bb:59:93:71:91:25:45:a5:14:
7b:a2:7f:96:83:32:10:9e:1a:84:57:77:c5:c9:2f:
fc:b2:0b:13:e0:f6:a7:d0:da:ad:2c:24:f4:32:a3:
24:1d:40:1f:70:53:09:b0:b9:99:29:e6:0e:18:d1:
46:83:45:31:89:52:a2:cd:f7:78:2a:19:ad:db:cc:
9d:84:41:ce:50:42:b9:c5:df:d0:25:b6:2e:9f:40:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:B8:E3:3E:41:0B:F5:EB:26:A6:DC:19:96:2E:D1:46:99:E1:A4
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:61:76:74:44:44:41:e1:2c:86:97:55:6c:05:17:c5:e6:
cd:af:b7:7e:20:91:83:fb:6d:28:62:19:00:16:a5:27:16:d0:
5b:44:ad:c2:66:ea:6e:fe:ef:61:6e:46:08:cb:1b:11:f7:4a:
d2:15:fc:bb:fd:c6:6a:64:df:ee:0a:95:09:5c:d5:ef:29:0c:
a5:35:83:f2:a2:10:be:de:28:c6:88:08:10:8c:29:ed:d7:47:
7e:87:79:c6:d2:b6:07:21:91:dc:d4:6b:d6:cb:bc:bf:7d:d9:
56:22:c8:3d:fc:be:13:8c:83:0c:82:99:6e:2c:1b:e3:8c:a1:
fb:39:75:2c:a3:cc:d2:a9:a3:62:29:da:27:49:1b:f3:71:0d:
6e:4b:56:3c:0f:4e:d2:d7:b9:0b:ca:21:3e:6f:26:51:d2:6c:
c2:05:ad:67:54:10:f9:ce:45:79:f3:11:d5:a1:09:6f:7e:d8:
72:ff:ed:4d:6f:3b:70:84:27:4b:38:e5:71:c6:b1:fa:55:45:
84:52:4d:fc:66:3f:df:39:78:9b:89:66:75:e3:2d:43:a1:5f:
73:3f:79:c1:5d:6b:54:25:d1:49:85:e6:c4:36:65:54:62:8a:
86:04:1d:0e:cf:a1:6a:af:d1:4e:5f:48:30:8a:62:9a:0e:5a:
89:16:13:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBniDJT4+PxUymRdGegP0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz
NDdmZDEwHhcNMjUwODA2MjMwMTIwWhcNMjUwODA3MjMwMTIwWjAzMTEwLwYDVQQD
EygyNTgyYjhlMzNlNDEwYmY1ZWIyNmE2ZGMxOTk2MmVkMTQ2OTllMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqupP8gc2opMVvs8lnv+kZZtwVkOb
mzGbEqcDZgLYF94Acr3MFBpB0ORGf2BW6G6ZbroHmX7PKYPOPx6uJgF1hRtrVmxY
J53onr7N6jMa6CUDtYCq8ts9y+bW/uGuOff9z5xuyTbhNnZ7jo2/QVBS3fZrJoEn
GDfgz9ZgzBjddbj0oWrwqjhGEoB5e31vavQTLttozQgNupZFAc7St67qbzNgR7Dz
ThOtw+u7WZNxkSVFpRR7on+WgzIQnhqEV3fFyS/8sgsT4Pan0NqtLCT0MqMkHUAf
cFMJsLmZKeYOGNFGg0UxiVKizfd4Khmt28ydhEHOUEK5xd/QJbYun0CsfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWCuOM+QQv16yam3BmWLtFGmeGkMB8GA1UdIwQY
MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt
YjZjYzRkNTcxMTdlLzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl
LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ1hdnRE
REHhLIaXVWwFF8Xmza+3fiCRg/ttKGIZABalJxbQW0Stwmbqbv7vYW5GCMsbEfdK
0hX8u/3GamTf7gqVCVzV7ykMpTWD8qIQvt4oxogIEIwp7ddHfod5xtK2ByGR3NRr
1su8v33ZViLIPfy+E4yDDIKZbiwb44yh+zl1LKPM0qmjYinaJ0kb83ENbktWPA9O
0te5C8ohPm8mUdJswgWtZ1QQ+c5FefMR1aEJb37Ycv/tTW87cIQnSzjlccax+lVF
hFJN/GY/3zl4m4lmdeMtQ6Ffcz95wV1rVCXRSYXmxDZlVGKKhgQdDs+haq/RTl9I
MIpimg5aiRYTpA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:28 2025 by rpki-client