Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: IDvZvzaUiABB0s+mQrr+VAG/jNZ2JzQpU0OuY9ckoOo=
Subject key identifier: BF:CC:97:70:DC:48:44:43:B1:E4:66:D6:2D:3D:20:EC:4F:B9:5D:B4
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019872CF5CAC76BDA22FF0349043EBC744F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 139B
Signing time: Mon 04 Aug 2025 02:00:48 +0000
Manifest this update: Mon 04 Aug 2025 02:00:48 +0000
Manifest next update: Tue 05 Aug 2025 02:00:48 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: 3dnR0bL0DGbe1gcUAXFN5eaI+HgZ7lPfF86x0vtlV3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:5c:ac:76:bd:a2:2f:f0:34:90:43:eb:c7:44:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Aug 4 02:00:48 2025 GMT
Not After : Aug 5 02:00:48 2025 GMT
Subject: CN=bfcc9770dc484443b1e466d62d3d20ec4fb95db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:46:ed:9e:07:12:7b:1e:8f:df:76:e0:c2:
09:cb:ac:25:5c:68:7c:b9:a2:26:bb:d5:12:06:18:
42:5c:fe:0f:63:4a:fd:0d:3a:03:e0:3a:e6:71:c2:
1b:07:fb:2b:2a:46:d3:4b:f9:c5:68:79:19:1a:64:
07:c0:86:6a:3c:60:df:bf:b6:e1:f5:6e:34:e1:ad:
76:3f:51:c1:2e:4d:cf:90:2c:a8:e8:69:de:02:26:
a6:c4:36:f0:cb:39:1a:a8:cf:9a:2d:21:c7:a0:5f:
7c:24:18:c7:d2:93:c8:c5:ab:52:ef:47:4a:e3:aa:
13:e6:ec:99:d6:42:32:7a:27:05:8d:83:dc:7f:00:
b6:15:27:d3:d4:ad:2f:dc:ae:c4:01:de:6e:48:3f:
d0:50:a1:c8:db:fa:95:53:49:bd:fe:53:ab:91:28:
4b:1c:d5:a2:9b:83:bd:fe:81:0f:b5:d9:de:bb:02:
ae:ad:3f:37:66:d6:b6:2c:17:0b:ad:a1:bb:f1:8d:
8d:8a:4a:69:d2:28:5f:eb:8d:24:02:3a:1f:0d:07:
ed:a6:ac:9e:6e:de:ba:b2:4e:18:4d:55:57:df:52:
19:8a:74:7c:ca:9e:87:2b:9d:c8:85:2a:db:3e:65:
b3:03:cf:f0:ac:b6:fa:43:ff:d9:27:70:fc:1f:a6:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CC:97:70:DC:48:44:43:B1:E4:66:D6:2D:3D:20:EC:4F:B9:5D:B4
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:df:46:56:87:49:3c:9e:93:5c:67:33:c8:57:7f:91:ab:
b2:ce:1d:43:12:35:c9:48:17:8f:84:5f:5a:82:37:c8:4a:55:
a6:57:86:45:92:73:12:d3:22:b1:55:85:88:f9:66:1d:40:6c:
a3:99:07:ac:e8:de:be:87:91:16:43:f3:d9:0b:d4:db:83:64:
50:c6:8e:e0:ab:d8:d2:3c:5d:b6:ab:5d:d3:29:6e:f0:94:2b:
e8:db:72:78:39:31:60:31:b9:c8:1d:1f:de:d0:c6:5a:9f:0b:
2c:ee:36:f1:4d:77:fe:2f:b8:d0:fe:39:12:85:86:6e:f7:e9:
e3:6e:c9:81:06:8e:a3:c1:98:48:97:fe:a4:3f:53:c3:88:ba:
f5:4a:a1:62:da:f9:34:b0:e7:54:6f:56:c2:24:44:3a:81:a6:
44:9a:a3:f9:b5:6d:6d:99:f1:78:d8:5b:3d:5b:b4:70:49:19:
82:23:40:9b:73:e0:5b:df:86:e8:5f:22:58:ff:3b:10:d1:33:
c2:6b:ed:c4:76:dc:63:05:a7:52:7a:62:db:fd:7b:a8:09:38:
5f:85:5e:d0:08:3d:3d:53:01:ae:a6:6c:cf:fe:42:84:b1:36:
2f:04:cc:8c:a4:d3:af:f6:a6:c3:41:3e:8a:21:8d:3d:85:c4:
2c:18:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:18 2025 by rpki-client