Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: 2nbWVzvubRy8+OTUNf2TqBR51x+0yhUtu+XoZ415uuI=
Subject key identifier: E2:40:08:F7:21:0C:A9:0F:61:65:B4:28:F5:DC:0C:0D:66:9B:10:79
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 0198808B96145BC3E51B4AA6810BC681B7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 14DA
Signing time: Wed 06 Aug 2025 18:01:28 +0000
Manifest this update: Wed 06 Aug 2025 18:01:28 +0000
Manifest next update: Thu 07 Aug 2025 18:01:28 +0000
Files and hashes: 1: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: u7+iKZ5Bxw12GlmUBKzHwqugoIkuTfe0W0YiXkyGY50=)
2: RyM0TaDcy3MATcF4kZgnomIhcSc.roa (hash: u1hwu96g0Ti3Leptf/8mOz/le6P/VB383vy/UE8/YqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:96:14:5b:c3:e5:1b:4a:a6:81:0b:c6:81:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Aug 6 18:01:28 2025 GMT
Not After : Aug 7 18:01:28 2025 GMT
Subject: CN=e24008f7210ca90f6165b428f5dc0c0d669b1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:ca:e5:c9:e1:dc:92:16:a2:8a:b5:35:a0:
f6:a3:6e:64:8d:92:d1:10:37:20:a1:ed:83:b6:a1:
70:f9:23:69:da:6f:c3:cb:24:fd:7e:6d:f1:a0:d3:
4c:32:9d:cc:a9:cb:a5:2b:16:74:0e:d0:61:dc:a9:
f1:4c:e1:7f:ee:ea:fd:aa:4a:89:de:78:95:ce:c7:
6e:69:1a:f2:92:4b:58:a3:ff:64:a3:78:84:0a:db:
f1:82:f6:e2:fc:c7:3a:9c:25:1f:b3:7e:b8:f6:8e:
97:ac:05:da:10:11:1e:b5:fd:3a:b3:25:e4:7b:2c:
c9:89:d3:bb:98:3e:15:9a:7c:f9:2d:54:54:f3:bb:
8b:30:04:7c:51:bf:fe:99:e0:2d:85:eb:ba:37:d4:
08:95:cd:23:18:ab:9f:09:ef:8a:39:57:e0:1e:02:
8e:1d:6b:dd:fb:10:a9:e0:44:3d:26:bd:f4:08:2a:
9c:26:4e:7b:d2:62:fc:81:ea:ef:eb:90:60:84:9c:
4a:48:08:9a:d3:5c:c7:77:ab:93:27:9e:a9:b1:67:
78:af:12:f0:47:af:51:89:55:e3:e3:6e:b9:50:3f:
af:7f:a0:93:6f:8f:f7:f1:61:93:67:dc:fb:9a:99:
d5:2f:93:5a:63:04:6e:48:ba:ee:fe:7e:f6:8c:4d:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:08:F7:21:0C:A9:0F:61:65:B4:28:F5:DC:0C:0D:66:9B:10:79
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2c:68:a6:bd:5d:30:7f:d3:59:ec:c8:d3:c9:0b:5b:38:a4:
48:ce:d0:c1:90:5e:39:50:7f:33:78:77:77:28:45:75:95:1b:
ff:74:b8:2a:4b:40:29:5b:d1:32:09:cb:9f:94:9d:bd:f2:48:
cb:08:5b:e8:4e:19:67:df:22:2b:b9:cc:88:0b:2e:4c:9e:17:
d0:d5:37:a5:b4:74:89:14:71:b4:b3:82:c6:e0:fd:b2:3d:f1:
af:09:ff:46:66:28:78:37:b8:e1:a9:05:ff:fd:ab:9c:54:84:
03:96:08:1e:34:9e:53:6c:50:2d:24:35:bf:19:1b:37:bb:c7:
ea:d5:a9:fb:a1:d2:41:39:63:cf:04:e5:f8:ce:7c:c5:79:20:
58:19:74:80:e3:28:35:5d:ad:51:bd:d9:11:59:aa:ed:40:88:
80:85:bd:8c:a6:a2:48:a2:e6:f7:b8:fd:11:ac:44:83:d9:08:
7e:1e:95:14:39:be:11:73:f4:37:3b:4b:e1:7f:5d:e2:91:00:
bf:90:55:75:45:f0:09:03:15:0f:80:61:65:06:4a:35:a4:cc:
87:0c:9e:fd:48:dd:e7:1b:98:a2:c4:20:07:59:4f:ad:1b:90:
93:10:9a:8b:90:72:70:a1:3a:1b:ad:7a:73:83:6a:ea:bc:dc:
5c:ef:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:55 2025 by rpki-client