Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: B+Ky4Pf6T7zJzEMCdnEvm76rECSvn8DN/Hli6ss6Xk8=
Subject key identifier: 98:7B:9F:20:6A:C5:F1:43:7B:F5:61:C2:16:92:A2:6B:C1:44:31:E9
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019A50E3A1E539589C2DE95A30EEC1515114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0AFB
Signing time: Tue 04 Nov 2025 22:01:26 +0000
Manifest this update: Tue 04 Nov 2025 22:01:26 +0000
Manifest next update: Wed 05 Nov 2025 22:01:26 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: nhJclK0uUREsC9ZqeSTj4Ra1seAQhgbvH/tkiYfHbhM=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a1:e5:39:58:9c:2d:e9:5a:30:ee:c1:51:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Nov 4 22:01:26 2025 GMT
Not After : Nov 5 22:01:26 2025 GMT
Subject: CN=987b9f206ac5f1437bf561c21692a26bc14431e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:bc:80:d9:5a:56:53:5b:d3:89:68:4a:db:
6a:12:e0:88:6f:d1:d2:1e:e5:45:4a:6e:84:4e:11:
bd:5a:24:a4:6a:33:60:7d:0c:36:08:59:b1:93:a2:
dd:92:35:9c:77:ad:e2:13:91:56:e5:ff:03:44:9d:
99:0e:02:e9:08:87:98:ce:52:66:c5:93:a3:be:bf:
d1:51:2e:e3:88:05:db:85:2e:f3:61:0e:b8:f2:a5:
90:37:22:45:3c:d2:b5:87:4d:99:9a:e0:7d:36:aa:
2d:29:b4:d5:d9:50:fc:c2:af:3e:f6:48:72:ca:8b:
5f:9d:4a:b7:01:a5:13:9a:f1:29:7a:0c:01:2e:13:
fd:4a:10:45:e3:3c:d3:a9:a5:49:66:7a:77:54:d0:
20:91:8c:df:7b:54:9c:c0:7c:ae:df:85:96:99:88:
98:38:4d:81:10:19:29:8e:18:b2:bc:e7:0d:49:39:
ee:e2:8f:49:49:c6:7e:7f:eb:9e:18:a4:ec:cb:a7:
59:2a:33:74:65:ad:ec:7f:c5:0f:83:76:94:f9:cc:
00:1e:52:74:e8:bd:ea:22:20:e2:18:5f:c0:2f:84:
b3:da:c5:7b:54:61:b4:57:78:68:04:ad:b2:bf:b3:
5d:6f:58:46:b6:c5:6a:b2:56:1c:87:39:4f:4a:56:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7B:9F:20:6A:C5:F1:43:7B:F5:61:C2:16:92:A2:6B:C1:44:31:E9
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bd:ab:27:e7:f6:6c:51:db:8e:1c:c5:5a:0c:ca:78:63:08:
71:87:c5:3e:bd:45:68:6a:c5:ef:b4:1d:31:1b:28:54:6c:1f:
dd:b7:4b:66:22:50:56:5c:85:d4:6c:fb:61:9f:8c:06:7e:0b:
38:7d:19:93:7c:2a:af:f7:a6:51:bd:a6:5d:2a:90:d0:68:e3:
65:f3:ec:40:c2:21:45:91:d7:0e:07:26:27:93:f2:90:03:0c:
e5:47:fd:6f:e4:3b:12:79:3d:a9:dd:b9:02:82:2d:bc:2f:38:
77:c8:18:82:b6:7a:d8:e7:91:44:e6:60:e7:bb:d4:61:07:09:
1d:d6:fe:c8:f2:08:6e:93:6f:d8:83:a9:ce:ee:c4:bf:ca:d9:
8e:40:af:17:58:e0:cd:86:7a:47:b1:f0:4e:4c:ea:53:c6:b1:
fa:42:45:eb:33:23:0f:32:50:df:19:c7:25:12:b1:cd:6b:9e:
64:6c:9f:10:ea:48:d9:e0:75:67:04:b1:8e:9a:49:58:c8:3e:
7e:8c:83:a3:73:b4:4d:75:9b:9f:0d:2b:60:5c:0f:81:e2:f8:
1b:9e:1a:f6:7a:c7:70:d1:17:b6:b5:cb:a9:56:a6:ee:c7:60:
93:21:f0:57:ae:f7:83:4f:c5:c3:25:bf:5a:43:fa:9f:cc:16:
61:ea:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:09 2025 by rpki-client