Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: LRullqFkWZ6n8MhRRX2/XkhFbp0CxPhKShZuwN5wj78=
Subject key identifier: 51:F9:F3:82:E9:0C:04:C6:5A:8F:7E:FA:93:F4:07:87:04:1E:0D:5C
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019770E34E5E4D8FEDC30F81DDE9F8B5FC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:34 +0000
Manifest this update: Sun 15 Jun 2025 00:00:34 +0000
Manifest next update: Mon 16 Jun 2025 00:00:34 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: w8ibbA4xEKVtpNFMJPLMyFC1rcsJFvWMvAv/o9hzFC0=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:4e:5e:4d:8f:ed:c3:0f:81:dd:e9:f8:b5:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jun 15 00:00:34 2025 GMT
Not After : Jun 16 00:00:34 2025 GMT
Subject: CN=51f9f382e90c04c65a8f7efa93f40787041e0d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:e9:47:72:83:67:49:50:4e:2a:1a:19:d8:
42:48:11:42:7b:d0:59:bd:0a:f2:66:2e:82:5d:4b:
41:6e:f4:a4:96:a2:aa:6c:34:6a:03:3a:02:7e:2f:
df:a5:96:cd:56:36:6a:67:50:c7:f1:b3:37:47:d7:
1c:43:50:63:e1:68:1e:c1:5a:1d:9e:3a:31:98:e0:
ea:60:69:52:85:9c:9e:81:f7:50:a0:4a:19:45:b8:
ef:cc:97:7f:cb:07:1f:62:e5:d1:b2:c3:0a:d3:8a:
18:7b:41:cf:d8:b8:a6:6c:67:54:aa:56:96:6e:5a:
33:ef:4f:fe:07:a3:1f:ea:fb:0b:c9:ff:ef:5b:ce:
92:d9:2a:63:ac:ea:2d:2c:ff:bd:fb:90:95:a6:3c:
3e:aa:c2:24:48:cb:d9:23:d4:34:45:f1:3b:e9:65:
16:f4:56:b7:1d:b6:f3:48:b7:f5:63:36:02:20:55:
b3:7d:ca:ab:4b:f5:5b:82:a6:e7:8d:af:65:89:62:
ba:0f:2f:70:80:11:50:2d:db:32:9a:23:28:ad:9e:
14:88:1d:22:b8:af:9d:f6:80:3e:b1:38:e4:7f:c1:
f1:7e:e6:94:ae:23:5e:67:ac:9d:eb:cf:a4:8d:90:
2e:f6:21:5d:68:3c:18:2a:a7:8d:7f:de:18:70:4a:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:F3:82:E9:0C:04:C6:5A:8F:7E:FA:93:F4:07:87:04:1E:0D:5C
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:c6:26:40:f3:d1:e2:46:cf:cf:0f:82:05:b5:1e:b2:c9:
42:c6:98:13:d1:da:98:5d:c6:26:b1:2e:b9:f5:70:0c:68:7f:
de:10:a0:74:57:82:96:e1:17:6b:7b:63:55:3c:78:c6:54:eb:
53:1c:2d:88:46:c7:22:79:87:18:c4:35:75:c7:ca:62:b8:30:
cb:3e:8d:43:aa:69:56:22:52:19:dc:1a:7d:c8:6e:21:4b:6c:
29:dc:9b:a2:7d:13:4e:d4:c3:d3:f0:ec:9f:77:65:b1:9c:64:
0b:d9:de:b1:f3:a0:00:31:c0:39:dc:45:c9:08:d1:06:4b:27:
af:a4:4f:93:b6:3a:d6:f2:b5:25:53:ae:8a:f0:05:7a:09:c1:
3e:cd:0a:27:25:8a:1f:14:93:ef:46:59:f5:00:43:d1:e7:75:
20:67:f5:ae:ef:ef:77:96:f8:08:fb:7f:1b:d3:ed:e7:8e:04:
10:7a:7d:32:d8:97:b2:b8:ff:72:e9:ce:57:51:3d:6b:50:90:
55:8d:dc:79:23:0b:db:a9:a4:29:e6:ea:02:83:82:78:ca:ea:
ce:2c:dc:55:22:ee:94:25:de:4a:7f:65:5e:4a:de:ac:af:62:
1a:bd:5c:fc:0e:c6:58:a0:f1:5a:84:6c:31:14:50:7d:09:f8:
cd:43:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:06 2025 by rpki-client