Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: Ifu7RSo+zGnubBvLf8X+tDAUO93xUxmejP4faz1lbqE=
Subject key identifier: B3:4A:FE:C0:95:C2:6B:12:04:DF:63:FD:03:E5:C3:7A:F2:2C:38:9B
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 01969296021593C035232A3FC7738F3E7C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0235
Signing time: Fri 02 May 2025 20:00:26 +0000
Manifest this update: Fri 02 May 2025 20:00:26 +0000
Manifest next update: Sat 03 May 2025 20:00:26 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: jVX4n76tWl5MZa5IiaSfalYbsR3soDihxakDiC17HLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:02:15:93:c0:35:23:2a:3f:c7:73:8f:3e:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: May 2 20:00:26 2025 GMT
Not After : May 3 20:00:26 2025 GMT
Subject: CN=b34afec095c26b1204df63fd03e5c37af22c389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:88:3f:f2:81:d6:02:27:b8:2a:ef:ee:6e:
1a:f3:a3:07:d3:61:ec:4e:fc:f8:24:c5:d2:9a:40:
c9:2d:4d:07:77:d0:b4:c4:39:6f:31:9a:06:bc:37:
31:c3:7e:82:1f:d2:cd:d6:e7:67:d0:c0:30:34:ba:
36:26:cc:db:9b:36:c9:cc:73:90:3a:bc:a6:c3:9a:
46:d6:29:22:f5:d8:b0:53:59:b4:cd:da:93:dd:ab:
72:c6:cd:da:88:c3:01:b0:5e:ea:c3:45:84:e5:0c:
de:90:8b:48:6f:4b:07:5c:af:7a:1b:b6:af:96:36:
3a:1a:23:a1:12:74:e6:2d:c1:fe:77:d5:87:db:88:
a3:b1:88:57:71:c8:7c:06:d6:5a:68:72:71:94:80:
8d:dd:78:5e:fa:0f:d6:da:97:a4:e7:64:25:a1:61:
91:cd:e7:03:5e:30:fa:f7:32:d5:88:85:05:26:ac:
cf:a3:37:fd:f1:ea:24:44:54:39:35:88:6f:80:3c:
b0:6e:b5:4b:7a:a7:44:94:83:49:e3:7c:81:c2:b1:
8b:b1:ea:8a:6b:aa:bb:47:a7:86:60:cb:80:9e:5c:
29:1e:b6:08:dd:d1:ec:23:b8:d2:24:7a:ea:45:be:
ea:eb:da:82:d0:0f:17:cf:e3:6b:34:10:a6:d8:a1:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:FE:C0:95:C2:6B:12:04:DF:63:FD:03:E5:C3:7A:F2:2C:38:9B
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:05:63:2d:50:bd:8d:b5:82:e6:f8:81:2b:8e:f4:9c:2d:e1:
ce:1d:7d:a2:d4:87:e2:19:29:b7:c1:a8:9a:75:90:3f:94:07:
8d:70:7f:ea:43:54:25:ef:55:a3:25:d0:27:06:36:2e:f1:a2:
25:84:86:8d:a9:7b:60:f0:0b:84:23:88:95:23:f1:4c:dc:77:
27:f7:a0:2b:5b:a1:4d:e4:3a:56:3e:20:50:20:56:3a:78:c3:
19:11:dd:5a:68:de:1a:4d:78:8e:a8:07:3a:73:8e:fa:59:1d:
a5:2d:36:00:04:d2:9f:8c:79:36:b9:c1:b9:6f:88:8b:ff:ca:
6a:a1:2b:61:2f:e2:2b:f0:64:84:3e:1c:b7:c3:f9:9b:cd:04:
9b:05:ab:63:e0:e8:53:6e:e6:69:5e:e8:6d:7f:00:3d:d6:dc:
eb:34:62:6d:19:b6:c8:e2:41:da:27:d1:55:52:94:d1:ec:c9:
8d:e3:0f:b3:1b:e2:3a:9e:b4:e3:be:63:df:e4:d2:7c:35:2f:
f6:17:e1:cd:2d:4c:57:d3:9a:7a:99:c2:08:fb:93:e7:f3:8f:
0f:fa:e8:b2:0c:4d:c2:7a:ed:fe:fa:91:e6:ee:0d:0a:d8:60:
0d:5c:04:b0:df:6c:ae:24:d4:89:a1:6d:2c:16:14:b8:5a:64:
a1:bd:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:15:26 2025 by rpki-client