Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: +erCccYRkZenI6TXxdbyLQG9lOezMyC6wt5eV10FfmI=
Subject key identifier: A8:E4:DE:A3:DC:18:36:BA:02:AB:6C:FB:48:BB:43:BF:F0:8B:37:83
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019778D4A86971EF8D98FD79D70A0C5A203F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0982
Signing time: Mon 16 Jun 2025 13:01:31 +0000
Manifest this update: Mon 16 Jun 2025 13:01:31 +0000
Manifest next update: Tue 17 Jun 2025 13:01:31 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: hlFpBRpSZ9xv6mJHjIwMImEFSlgWJxWmhPiYMhTHrqo=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:a8:69:71:ef:8d:98:fd:79:d7:0a:0c:5a:20:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jun 16 13:01:31 2025 GMT
Not After : Jun 17 13:01:31 2025 GMT
Subject: CN=a8e4dea3dc1836ba02ab6cfb48bb43bff08b3783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:da:60:75:d7:82:bc:05:ef:ca:85:b1:c5:
b6:4b:99:77:7e:99:1f:1f:42:0a:a9:ea:da:c6:98:
4b:4c:9a:13:c8:c3:4d:75:f3:52:ae:86:99:a6:2b:
e2:23:c7:fe:50:79:6f:8a:c5:c5:8e:e2:c6:dd:9b:
40:bf:9b:00:4a:aa:d9:0a:68:7f:5f:d7:72:98:f1:
2e:1d:78:d3:c6:44:7a:5d:d9:2a:24:6d:0b:85:43:
40:28:f9:0d:f5:d2:cf:29:d6:ca:53:16:7d:3c:0e:
18:62:15:0e:02:1f:64:62:4b:e0:d2:f7:d2:36:81:
b0:db:28:d8:db:2e:d3:8b:9f:1f:9b:35:39:68:e1:
1c:3a:84:9c:56:ec:08:64:96:d1:9a:47:f7:ea:8f:
25:ef:24:e9:49:2d:a1:29:9c:80:3a:21:41:b7:31:
c9:b3:d1:74:47:47:39:e0:ee:26:a7:78:aa:4e:b0:
0d:1f:12:20:ac:2e:8e:b3:be:07:01:20:95:e2:6a:
70:db:17:51:91:dd:e7:6c:6a:c0:c7:b8:9f:30:4d:
75:f5:d7:00:7a:32:b5:64:b5:af:32:a2:81:61:1e:
c6:39:05:42:77:3b:e9:79:6b:93:3d:6d:91:eb:67:
e6:b7:3e:c2:5d:52:b6:a7:3a:27:94:3e:f4:95:c3:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:DE:A3:DC:18:36:BA:02:AB:6C:FB:48:BB:43:BF:F0:8B:37:83
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:1e:aa:e4:01:9b:59:4b:a9:48:7d:c0:36:38:08:ba:ae:
ac:a0:3c:17:8c:4a:88:c2:1e:46:dc:f7:a8:e0:a4:5a:cb:69:
22:27:34:f1:4c:d5:47:29:16:68:69:41:ca:e8:e1:a7:23:59:
13:f3:94:8a:dd:a5:98:cd:54:60:24:e7:42:94:88:4d:40:60:
e7:51:59:3f:ce:65:e5:09:aa:10:e8:44:6a:64:54:be:48:3a:
e0:bf:52:45:83:b4:50:49:29:97:28:91:09:a3:8c:47:ae:bd:
0f:90:d7:60:41:e0:14:c1:8d:99:11:40:e7:14:90:8e:8b:b8:
39:32:fa:2c:e3:b8:13:74:6e:4d:21:04:3b:92:5f:98:67:30:
fa:95:d2:9a:6d:f5:67:43:73:cb:7d:1f:88:a3:44:b5:0f:59:
7e:3b:4c:d8:5a:e3:b9:05:d6:b9:82:20:46:a9:f7:a3:fe:18:
e7:d3:c0:cd:9a:ee:77:d2:fb:ce:d0:59:ff:8f:24:59:45:22:
0e:75:e3:67:e3:a1:89:82:42:2e:a9:7c:7a:83:f5:ee:47:57:
0b:3f:ad:86:6e:a7:b5:4f:70:76:f1:b0:fd:77:6f:1e:98:30:
26:fb:89:1c:c5:a4:f5:fd:14:41:17:28:c6:31:78:8b:12:19:
22:c9:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:13:30 2025 by rpki-client