Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: eeiZcDQocY+hugwJ7pfKxOgPVrRweHFWVXf51NY6vVQ=
Subject key identifier: 14:AC:3E:43:04:6B:9F:61:7D:8B:64:2B:E8:C0:15:02:A3:25:11:89
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 019881669E7ED4C56D56D0B1E378892AAF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 1443
Signing time: Wed 06 Aug 2025 22:00:42 +0000
Manifest this update: Wed 06 Aug 2025 22:00:42 +0000
Manifest next update: Thu 07 Aug 2025 22:00:42 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: +Ic74jhqXk2nR5fUH5tGRbkRp/7fv57nagbFalaEp80=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:9e:7e:d4:c5:6d:56:d0:b1:e3:78:89:2a:af:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Aug 6 22:00:42 2025 GMT
Not After : Aug 7 22:00:42 2025 GMT
Subject: CN=14ac3e43046b9f617d8b642be8c01502a3251189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:82:f5:e1:4c:e7:8a:02:8e:f1:cf:9b:61:
41:da:47:9d:4e:fd:6b:2f:24:5b:72:5b:c3:be:7a:
d4:cc:1b:83:50:39:b6:56:3f:1f:a1:0d:0f:63:57:
43:a5:be:b1:5b:71:09:22:9d:1b:fd:4f:11:0d:cb:
df:60:96:3d:31:89:32:f8:55:29:74:43:ff:f4:1c:
2d:69:8d:79:98:18:b8:1e:85:61:18:a1:d0:9d:cd:
e1:64:bd:1f:ba:56:1a:c9:17:28:7e:18:0d:6f:a7:
30:40:1a:27:b6:9a:6f:ca:6f:eb:3a:62:fe:0f:bf:
de:5d:43:73:d6:01:6b:62:46:2a:e1:ba:7c:80:d0:
f4:6e:49:9c:ed:78:9a:3e:90:b2:a4:c3:4f:71:1b:
f3:05:ee:72:ec:06:d3:b3:f3:d9:ae:16:7d:02:c9:
82:71:bb:bc:93:7e:70:8a:1a:80:ee:fb:d7:1b:6b:
84:7d:ea:c3:90:bb:eb:90:51:c8:8e:bc:10:97:d1:
b1:42:29:17:2b:4d:22:39:f5:33:89:b7:77:09:cc:
f6:e8:9d:71:72:2f:e9:f1:4a:98:e5:a0:49:6a:21:
76:f5:25:05:0a:10:3a:07:79:f6:24:1c:e8:83:ec:
f7:c2:aa:62:7d:49:27:5e:1f:58:b1:20:ff:85:0b:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AC:3E:43:04:6B:9F:61:7D:8B:64:2B:E8:C0:15:02:A3:25:11:89
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:06:44:28:53:6f:86:d5:66:b8:e9:52:85:b3:95:74:bd:7a:
ab:7e:6a:d2:6f:b5:35:74:60:22:60:2b:a3:c3:57:e9:0b:91:
2c:60:aa:d8:a9:ba:70:dc:6b:32:cd:43:06:42:ad:54:d4:d2:
69:34:9a:46:be:e9:02:cd:e7:3c:b2:de:ff:ad:a6:1d:54:84:
fc:a7:83:36:82:5a:08:3f:c4:f0:97:ec:22:1a:bc:e4:55:0d:
b7:92:bb:30:b0:af:31:bc:ae:9a:9c:57:82:8f:cb:54:99:6b:
84:a9:21:4e:cd:7c:92:d2:4a:80:ea:4d:fd:ef:77:74:f4:20:
b1:d1:cf:c6:af:b8:fb:f2:b1:8f:93:bd:bf:2b:43:d8:82:55:
ec:48:d4:63:6b:f1:9f:84:4c:20:e0:e3:15:ef:e3:6c:61:ff:
84:eb:a5:78:fc:ea:46:36:be:b6:42:46:54:2f:0a:fb:55:c1:
14:4a:f4:a8:c5:e7:d0:b0:11:9f:09:ce:2b:8a:df:ed:5f:2d:
96:fa:9f:9b:49:18:b1:9d:c2:8f:fd:5e:b3:76:5f:3f:9b:cc:
db:0a:74:1e:8e:e6:18:76:b1:de:c2:3b:8b:35:8a:fe:ca:14:
9a:6e:fe:bf:0f:36:b0:49:22:59:22:a7:ee:62:ce:f1:2e:08:
49:44:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:07 2025 by rpki-client