Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: kfTPT0/d8tvJwbTnpe7QlUqlDonds1Ksc5QYiNQtbYs=
Subject key identifier: 8F:7B:D2:36:5D:A1:D8:C1:C5:15:09:FD:FA:20:05:F3:76:C6:19:5E
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 01976F2CDA3C0B10CFC75DD24473215C424B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 13B5
Signing time: Sat 14 Jun 2025 16:01:39 +0000
Manifest this update: Sat 14 Jun 2025 16:01:39 +0000
Manifest next update: Sun 15 Jun 2025 16:01:39 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: jU/4QKGl5zvjyu9NS8jTmLQXOdB0EcaLCHeGMHetDGw=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:da:3c:0b:10:cf:c7:5d:d2:44:73:21:5c:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jun 14 16:01:39 2025 GMT
Not After : Jun 15 16:01:39 2025 GMT
Subject: CN=8f7bd2365da1d8c1c51509fdfa2005f376c6195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:a5:ce:c6:4d:6b:fe:5e:a0:7b:a3:d4:76:
50:e5:45:13:4c:03:98:f4:af:f5:76:bb:dc:62:5a:
15:2b:6e:93:23:43:49:ec:e1:57:09:d0:20:c7:cb:
ac:4e:80:14:5e:f3:91:cf:fc:b9:e2:2d:c3:7d:85:
66:ee:a5:5e:38:97:8e:0c:fb:9c:2b:5c:0a:3e:d5:
63:95:da:77:b3:be:77:74:dc:41:7e:87:c6:2f:86:
64:69:42:9b:1b:d9:d2:c2:3d:04:ce:0d:a5:15:94:
0d:89:55:b5:e4:e3:8e:ff:b8:e4:76:c9:21:bb:2e:
e2:cd:34:82:31:02:87:c3:38:55:84:2f:6d:19:70:
90:11:39:08:f5:cf:3f:7c:8c:53:47:9e:62:ad:43:
6d:41:06:5a:1e:55:e7:a3:5f:93:90:50:e3:70:ad:
17:1e:2b:3a:2e:0a:bc:bd:22:5d:71:e1:92:3c:30:
7f:38:d6:b8:ab:e7:2e:06:72:1c:12:58:b7:1e:6c:
4f:4b:1f:9f:ea:6d:77:a6:36:b0:b8:3b:0b:ba:17:
34:cd:65:3c:ef:a5:09:bd:52:6e:3a:e0:7e:f3:e1:
62:a2:45:b4:0a:a1:b3:35:ba:46:36:d0:76:3b:3a:
af:b4:b2:15:f8:a0:23:b1:39:ca:b2:b6:52:e5:85:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:D2:36:5D:A1:D8:C1:C5:15:09:FD:FA:20:05:F3:76:C6:19:5E
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:84:41:88:76:8f:b0:eb:c1:d7:3e:d5:75:9e:e5:35:9f:
62:69:b8:f2:ed:e9:ec:3e:95:c4:c3:1f:df:86:97:01:95:4b:
34:6a:26:98:6f:ad:12:99:22:1e:32:87:41:3f:cd:38:ef:75:
33:7f:65:6f:9c:38:c7:24:09:00:68:50:f7:85:dd:98:f8:ee:
4a:b7:ed:2f:97:77:ca:d1:75:fe:6b:da:b4:9d:c7:72:e3:0c:
2d:11:ae:d4:e7:63:b1:e9:ce:11:cd:bb:3a:1c:c6:46:98:4c:
36:bf:68:25:96:97:89:98:16:3e:a4:99:1e:fc:a1:d6:f1:17:
e9:1a:1f:4b:10:0c:32:ea:53:64:3b:33:bd:f7:10:85:4e:0b:
10:58:ce:06:89:6c:df:38:82:2a:c5:c9:bd:dc:cc:55:bb:cd:
de:25:4c:fc:67:29:10:95:b9:d4:b0:e5:23:e5:e8:5e:32:ed:
a4:0c:43:3e:69:a7:83:97:ee:dc:bb:ba:b7:cb:7c:4e:2c:bf:
ea:fe:23:33:b4:12:9d:dd:83:73:a3:33:ad:09:6b:c4:42:f7:
d8:27:1f:ea:5b:05:f0:6f:1b:2f:5c:c4:7a:7f:2a:59:17:31:
4c:af:3e:ce:a9:ba:ed:f9:31:7d:09:1e:de:90:4f:0f:60:7a:
33:99:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:14 2025 by rpki-client