Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: uhsJPIehzST58WeXTy46+coWn3RDYyz9e348l3NeeCk=
Subject key identifier: 6D:3C:EA:E5:D3:51:32:15:52:DD:4C:93:C5:C8:E0:8D:46:C2:BB:9C
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019873E3237603139DCA824C3632E0E2061D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:02 +0000
Manifest this update: Mon 04 Aug 2025 07:02:02 +0000
Manifest next update: Tue 05 Aug 2025 07:02:02 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: KOVNod9Rtdy0ocnr8LB4ny2/RmQ/9R5kdJ5QI94EdEI=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:23:76:03:13:9d:ca:82:4c:36:32:e0:e2:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Aug 4 07:02:02 2025 GMT
Not After : Aug 5 07:02:02 2025 GMT
Subject: CN=6d3ceae5d351321552dd4c93c5c8e08d46c2bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:08:c0:49:60:3c:b7:a9:a1:00:aa:a0:4f:
c6:5c:89:ab:85:e8:99:a5:f1:c9:1f:a0:ab:cf:91:
7d:2e:ef:c8:17:b8:ad:07:f8:6a:11:c2:58:ba:7e:
23:91:49:a0:08:15:15:5a:64:f7:61:64:9c:cc:64:
24:94:e5:32:93:59:22:41:82:a7:0d:cc:15:61:01:
f4:e9:3b:c0:85:4f:9e:92:0b:77:af:ed:b8:27:46:
78:6b:89:c5:97:19:4e:d9:ba:e8:bc:b5:5f:93:2c:
7f:4c:63:f6:36:51:f4:bb:35:d5:1f:f0:fe:cc:14:
d4:27:12:64:d1:4a:91:72:10:33:8f:28:b5:94:b2:
89:d4:80:51:bf:75:c7:63:35:fa:21:19:dc:a9:18:
e1:9e:c7:d2:41:d4:79:09:a4:02:39:7a:ac:39:39:
fe:30:e8:66:f6:8e:cd:00:7e:3b:7f:44:ed:c6:e6:
b7:76:7e:2f:1f:de:6a:4d:fc:36:b3:2e:a2:c0:1a:
35:bc:b9:34:e7:40:e4:c5:b0:d5:c6:fb:33:c9:eb:
15:66:d9:27:12:af:ec:a1:93:0c:81:18:8e:15:83:
5b:7d:6f:67:64:0f:7c:77:75:d3:ad:ae:78:9c:cd:
94:07:e4:d5:19:2a:ba:c2:ce:de:ce:fe:8d:f2:33:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:EA:E5:D3:51:32:15:52:DD:4C:93:C5:C8:E0:8D:46:C2:BB:9C
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a1:e9:70:cd:38:ec:45:19:60:e3:bd:1a:4a:a2:3e:a6:7f:
ed:6a:c3:97:c9:33:28:2f:cc:7d:3f:7b:8b:5c:0b:cf:19:b3:
7f:eb:79:21:43:72:fc:0c:39:ab:29:05:d0:b8:79:5c:dd:52:
11:1b:0d:5f:6f:96:ea:5b:76:96:28:87:8b:da:a9:00:2a:bc:
2b:84:f4:ea:00:53:23:68:f2:42:b3:d2:b9:a0:8a:5c:4f:8b:
d6:b3:07:3f:db:65:49:d3:f5:92:15:cc:f1:71:a7:04:7a:26:
a3:2b:64:08:fe:f0:55:fd:1b:33:19:ae:d1:d4:f2:50:0f:12:
21:91:99:bc:19:37:ab:4d:d2:cb:6e:1b:fa:25:69:d6:7b:15:
0b:54:6b:49:71:8d:04:33:2d:e9:b6:00:dc:d4:8f:5d:b1:7e:
af:af:3f:0a:da:2d:d2:11:37:bd:6b:97:ae:99:77:b4:f1:fd:
20:32:c2:c1:8a:16:9c:86:dd:ba:6e:14:b9:70:71:44:9c:9b:
df:ec:e2:31:ad:8d:be:59:7e:fb:bb:94:0e:17:c9:19:98:6e:
0e:50:2f:5a:06:f5:2b:23:14:ef:c5:07:81:ea:0f:5d:c8:c5:
49:ee:98:72:5d:a7:70:8e:cb:d8:f7:5c:e3:d7:3b:1b:32:db:
34:5a:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:33 2025 by rpki-client