Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: uoirnaENWFj4LJU9ja2spyGFlbOWDMliCz3Jcj/TTHQ=
Subject key identifier: 19:A5:B9:60:A9:E4:65:4C:B0:4F:D2:5A:E4:D1:1C:C9:74:79:0F:47
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019894487E048E61CC90E7AE0BF9D9314D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 033F
Signing time: Sun 10 Aug 2025 14:00:35 +0000
Manifest this update: Sun 10 Aug 2025 14:00:35 +0000
Manifest next update: Mon 11 Aug 2025 14:00:35 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: r8zwtsRbTB1+WVIvKkMyMr4NYogCE0rdInNbADf9Ecs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:7e:04:8e:61:cc:90:e7:ae:0b:f9:d9:31:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Aug 10 14:00:35 2025 GMT
Not After : Aug 11 14:00:35 2025 GMT
Subject: CN=19a5b960a9e4654cb04fd25ae4d11cc974790f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:a3:01:61:d3:ba:92:92:d6:01:e7:2c:75:
1b:cd:95:ef:f5:6d:b9:e6:14:53:5b:72:80:98:4d:
0e:7e:67:9e:c3:69:62:4b:00:f5:9c:57:09:d5:b5:
c6:ba:e1:ba:a4:2f:7b:f6:83:1a:19:ad:a0:e3:b3:
44:0c:97:25:7e:ba:f7:18:73:64:9b:d1:3b:cc:98:
a3:33:77:8d:84:1e:53:b5:e6:8f:14:a7:d0:1a:e5:
b1:d1:55:26:df:f4:01:bc:a4:f6:79:6e:66:ae:bc:
0e:7d:3b:9d:bd:ca:46:50:f6:7e:d8:46:0b:1f:87:
b0:0b:9e:53:13:0e:22:09:20:c8:4d:33:b7:97:03:
1c:61:2f:d9:ad:3e:0c:a3:2f:a9:be:cc:c5:79:e2:
3d:df:19:fc:2c:34:1c:0e:27:75:d5:2e:8b:4a:a1:
f9:a4:17:55:f3:44:56:36:9f:0f:46:c8:11:71:15:
79:b2:93:4c:50:78:08:65:2a:3c:b4:2f:33:81:a3:
ce:2a:be:5e:6e:42:bd:66:04:e5:45:e5:9a:00:c6:
ba:eb:97:83:b8:03:08:7e:3c:77:a5:29:1c:27:04:
05:cd:b3:33:2c:0a:61:49:66:74:de:12:7b:ec:13:
f3:c5:ac:4a:2e:e0:b7:23:ca:ad:c7:9c:86:0f:95:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:B9:60:A9:E4:65:4C:B0:4F:D2:5A:E4:D1:1C:C9:74:79:0F:47
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7e:b5:09:8b:29:1f:66:06:42:81:1d:93:b3:49:18:e1:18:
95:23:9a:de:e8:fa:7d:0f:2e:a5:16:ab:db:02:d7:70:82:8c:
75:02:28:dc:be:b8:8e:37:85:f0:70:cb:b1:93:d2:18:bc:71:
ef:27:24:d0:46:30:a5:00:b0:37:fa:d1:c1:fa:3c:51:db:3e:
4c:13:36:9d:0c:87:3a:12:18:ba:c3:2c:7d:18:21:7a:2d:4a:
17:23:08:30:f1:42:84:89:30:8d:0a:f8:a4:8c:d2:d0:57:e0:
21:73:90:e4:e9:9f:3e:15:d1:bb:91:d8:8b:f1:54:93:35:b0:
2f:41:21:d7:4f:dd:60:bc:89:4d:f2:49:6b:a8:e2:ce:8c:96:
ca:c7:4f:0c:77:2a:bd:08:94:d4:81:4a:4a:f7:25:e9:c2:f8:
ed:58:3a:e0:49:e4:15:2e:7e:71:f7:b6:06:cd:9a:99:a3:9b:
45:1b:90:50:55:02:f4:b3:bf:3a:ab:ea:d8:cd:fb:eb:e5:43:
53:9f:6b:5c:f3:f6:5c:12:03:8a:c5:5c:16:bf:2e:37:71:21:
b0:08:99:5f:89:07:ac:02:d6:b5:58:d2:90:e4:c8:f9:74:c3:
1f:87:64:f4:19:23:33:89:f8:27:ae:ef:15:9d:2b:0e:8f:7c:
85:fe:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:23 2025 by rpki-client