Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: axGr1UeVxPrt0ke4nwR4o8N/cLmcnORXogXd2BxtAi0=
Subject key identifier: 7F:24:DE:4A:7C:B0:07:EF:3A:FC:04:72:28:28:A2:F5:3E:BD:8A:AB
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 01987B9CDDEDAE6E25403C69FA2260D6704B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0A08
Signing time: Tue 05 Aug 2025 19:02:14 +0000
Manifest this update: Tue 05 Aug 2025 19:02:14 +0000
Manifest next update: Wed 06 Aug 2025 19:02:14 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: 9FTmvt4DmOoRbCxXIfycFTDL4ih8JipsjgDHRKGAKnk=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:dd:ed:ae:6e:25:40:3c:69:fa:22:60:d6:70:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Aug 5 19:02:14 2025 GMT
Not After : Aug 6 19:02:14 2025 GMT
Subject: CN=7f24de4a7cb007ef3afc04722828a2f53ebd8aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:bc:c3:90:93:5c:6c:2b:6c:41:7f:74:0e:
00:15:28:f6:03:d1:53:c3:e4:ea:71:25:e2:06:e5:
33:ae:af:7d:70:db:5f:59:0b:25:6a:40:4b:d1:22:
63:b9:81:47:4e:0d:25:ba:7d:7c:c0:b1:67:7d:4e:
ea:2f:aa:ea:e1:4a:54:50:64:21:3b:7c:cb:e6:e6:
2e:b5:70:7a:83:86:f7:47:3f:1f:8b:75:8b:8f:6e:
ac:da:30:8e:81:7c:6d:33:12:7e:75:ad:1e:ad:a7:
74:e4:fa:c6:a6:85:86:d4:55:98:99:98:db:d8:a8:
4b:d6:b4:9c:65:b1:47:4c:cc:01:2a:88:50:75:02:
46:f9:a2:2f:f4:9a:bf:1b:7f:72:d7:59:03:f0:0f:
fe:3d:4c:fc:d5:f9:b6:8a:76:da:b6:d3:ad:b7:71:
f1:0a:ac:10:48:ab:b2:9e:1e:bf:cf:1e:73:25:f3:
e9:61:eb:dd:df:67:03:72:fa:09:4c:3f:92:7d:ed:
9d:0a:d2:40:62:44:cb:fc:63:70:84:e4:cc:9b:f7:
55:00:c1:86:47:0d:86:9b:2c:f2:4b:ea:30:1a:4c:
a9:05:21:c6:ef:9a:dc:6c:f8:57:57:62:9b:cd:d6:
14:58:bf:77:ce:f1:94:eb:ea:01:82:28:e7:2a:1c:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:DE:4A:7C:B0:07:EF:3A:FC:04:72:28:28:A2:F5:3E:BD:8A:AB
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:39:44:0e:ec:50:60:b7:31:76:ae:8b:cd:29:9c:b7:70:
b5:c6:5a:f3:5b:21:89:73:d0:33:e3:c8:78:d1:ef:d7:5f:ee:
0c:27:7f:32:af:b2:b7:72:f3:91:b8:e0:69:a5:78:50:38:96:
2e:7e:35:52:99:be:27:a6:bb:69:aa:75:3a:26:9c:ca:1e:51:
f5:b6:e4:e6:07:4e:fb:56:27:ca:f7:25:18:bc:5d:65:b9:8f:
0a:47:95:3a:f8:ed:26:b0:16:64:c3:41:ae:9f:64:e5:95:7a:
d8:d3:cd:27:2b:d3:1c:5a:ce:9d:40:64:b9:85:68:6d:fd:cb:
6d:37:49:e8:fe:98:0b:11:06:da:4d:cd:b2:79:a1:19:42:68:
b1:ee:db:00:ae:94:c9:1a:98:a8:85:a3:88:75:31:2f:2a:87:
47:a9:82:b1:b6:e2:7e:4e:3c:6c:5a:e5:e2:4e:5f:da:06:b9:
be:7b:43:a3:b5:e7:35:9d:04:92:02:e1:9d:a5:8e:61:87:29:
d0:f7:fc:44:bb:38:3d:c1:b1:71:50:59:c7:41:18:10:43:e1:
b5:2f:ea:12:a2:ca:1d:d2:89:45:dc:cf:7a:fa:f1:fc:ce:5a:
87:8e:55:d7:0b:89:8f:ed:de:10:64:1c:b9:a2:82:7f:77:71:
03:c2:0f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nN3trm4lQDxp+iJg1nBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3
OTgyNWEwHhcNMjUwODA1MTkwMjE0WhcNMjUwODA2MTkwMjE0WjAzMTEwLwYDVQQD
Eyg3ZjI0ZGU0YTdjYjAwN2VmM2FmYzA0NzIyODI4YTJmNTNlYmQ4YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthC8w5CTXGwrbEF/dA4AFSj2A9FT
w+TqcSXiBuUzrq99cNtfWQslakBL0SJjuYFHTg0lun18wLFnfU7qL6rq4UpUUGQh
O3zL5uYutXB6g4b3Rz8fi3WLj26s2jCOgXxtMxJ+da0erad05PrGpoWG1FWYmZjb
2KhL1rScZbFHTMwBKohQdQJG+aIv9Jq/G39y11kD8A/+PUz81fm2inbattOtt3Hx
CqwQSKuynh6/zx5zJfPpYevd32cDcvoJTD+Sfe2dCtJAYkTL/GNwhOTMm/dVAMGG
Rw2GmyzyS+owGkypBSHG75rcbPhXV2KbzdYUWL93zvGU6+oBgijnKhxSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8k3kp8sAfvOvwEcigoovU+vYqrMB8GA1UdIwQY
MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt
NTIzNjJiNmIzMzM0LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0
LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq85RA7s
UGC3MXaui80pnLdwtcZa81shiXPQM+PIeNHv11/uDCd/Mq+yt3LzkbjgaaV4UDiW
Ln41Upm+J6a7aap1Oiacyh5R9bbk5gdO+1YnyvclGLxdZbmPCkeVOvjtJrAWZMNB
rp9k5ZV62NPNJyvTHFrOnUBkuYVobf3LbTdJ6P6YCxEG2k3NsnmhGUJose7bAK6U
yRqYqIWjiHUxLyqHR6mCsbbifk48bFrl4k5f2ga5vntDo7XnNZ0EkgLhnaWOYYcp
0Pf8RLs4PcGxcVBZx0EYEEPhtS/qEqLKHdKJRdzPevrx/M5ah45V1wuJj+3eEGQc
uaKCf3dxA8IP/w==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:13 2025 by rpki-client