Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: p3rBn+Y7/es/28BvpBITAhNJ8x3CQZaHP4Nf3rOKcC0=
Subject key identifier: 64:03:68:C3:15:56:D0:55:7C:03:0D:73:CA:53:5F:A9:9E:E5:17:B0
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019A4DE1749ED7E4941F9667D724C56D509E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 05AF
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: ZcqlNl2y+G4i8fUYeXv1ajJzebPutgE77n4o8wmrrbM=)
2: QB5FpuPpmowESfKF6nGgHMXmFsg.roa (hash: 4U84FI9f905V3/Hwf++fcBDHdTLLsUUQSR6ku8lze+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:9e:d7:e4:94:1f:96:67:d7:24:c5:6d:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=640368c31556d0557c030d73ca535fa99ee517b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:0f:db:d4:28:9c:3d:d7:af:0e:ae:0a:2f:
c0:c8:bf:75:ca:f3:19:1a:e7:6f:3f:fe:ea:30:2a:
1a:3c:d9:99:3a:d8:03:10:54:37:47:4e:11:63:a7:
cd:27:60:15:cd:b8:88:39:44:8e:92:68:c8:7c:27:
48:46:a8:a8:88:42:2e:07:81:43:d6:a6:c9:76:46:
70:0f:5e:12:95:e6:3d:c7:7b:89:ff:6b:d9:6d:4e:
bd:41:f0:87:c2:53:a2:6a:f8:e6:0e:c0:1f:9a:3d:
fd:94:de:8f:21:95:a5:46:f5:14:32:48:53:e5:98:
d8:d7:64:67:b1:fc:e3:66:52:21:ff:5b:17:f8:ef:
16:01:5a:3e:23:72:9d:f5:63:e6:e7:00:66:43:ae:
83:5f:ac:f3:39:76:ad:b6:ee:87:74:e1:8f:f2:ad:
31:1d:8c:2b:c8:6d:5a:74:9f:07:52:c1:e3:72:f0:
64:46:f4:bb:35:db:f7:85:eb:f9:a2:39:c5:02:b9:
f9:e6:a8:51:3e:4e:51:a7:cd:00:ce:90:ab:84:e0:
54:31:d7:42:2d:5f:e5:e8:42:f2:95:a7:0e:e0:b1:
8e:f9:b1:46:8d:80:a3:7f:93:99:41:96:83:99:29:
76:9d:31:30:0e:5a:5d:4e:f3:06:9b:76:09:98:fa:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:68:C3:15:56:D0:55:7C:03:0D:73:CA:53:5F:A9:9E:E5:17:B0
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:af:60:f8:f3:0e:eb:96:f6:2e:4e:08:34:77:54:2c:ea:34:
64:b0:dc:3a:c5:b7:66:e2:b3:7d:43:cf:fd:b6:1f:14:07:96:
e8:18:e7:1e:94:63:50:69:3f:d3:a2:0b:58:91:69:33:61:b7:
34:29:09:da:8a:72:d7:00:7e:30:0a:03:cc:da:d3:a3:fb:19:
ce:82:28:c3:e8:06:fc:72:74:10:7b:46:70:3e:e5:b9:52:43:
5b:7d:61:c8:8a:86:51:bf:ba:55:df:ed:8e:59:ff:9d:3f:8e:
72:59:f9:ef:9b:96:d0:88:08:18:e8:2a:0e:0f:17:44:56:c1:
60:cd:76:5a:6c:e3:2a:0f:41:91:37:79:0a:22:02:5e:4e:b8:
56:34:29:60:a0:43:22:70:6d:01:7d:35:46:e7:1f:0c:fe:b5:
e0:af:69:59:95:8c:a8:7b:95:67:d5:0f:5d:71:c9:5d:48:12:
04:20:3c:b8:76:d6:24:05:18:db:09:bd:77:f8:da:61:27:d7:
a6:0e:a3:ae:c4:12:e0:c5:b4:e0:dd:29:60:28:eb:b6:4d:8a:
00:d1:33:c4:15:42:51:6b:83:64:21:69:0e:cc:cc:57:36:b7:
77:b6:d7:f8:5e:8a:02:62:e8:57:36:d0:1a:28:6d:83:98:fe:
5f:a3:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:18 2025 by rpki-client