Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: GLetHFngeFScT11sI7YRWKVIm65Bl+jQbi0LpWhVcC8=
Subject key identifier: 7B:16:31:29:A9:F2:BF:01:C9:D0:B8:A6:A2:B3:C4:47:22:6A:CD:5F
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 01987C09B2F637A74B4ECDA2E7BCDCBF462B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0EC7
Signing time: Tue 05 Aug 2025 21:01:07 +0000
Manifest this update: Tue 05 Aug 2025 21:01:07 +0000
Manifest next update: Wed 06 Aug 2025 21:01:07 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: ZrTVL+EWbqahcmcRUlVG0x89lB2E9PVH5hqE+bT4nug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:b2:f6:37:a7:4b:4e:cd:a2:e7:bc:dc:bf:46:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Aug 5 21:01:07 2025 GMT
Not After : Aug 6 21:01:07 2025 GMT
Subject: CN=7b163129a9f2bf01c9d0b8a6a2b3c447226acd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:6f:69:bd:db:14:f6:42:d9:c3:b6:d6:e3:
72:68:86:26:91:7a:08:8e:6e:f0:19:0c:16:9c:8c:
50:f1:e1:63:32:c6:cf:61:b3:df:c6:65:cf:a6:30:
a4:0b:18:f6:ac:2b:49:f7:b6:cb:86:15:ae:d3:e7:
ae:47:e5:1b:5e:cc:ea:07:55:ce:dc:9d:0f:e4:95:
c8:2e:ba:10:ce:14:47:7a:66:01:c5:ab:78:37:18:
07:b4:b9:88:a3:55:30:84:ab:40:22:72:04:c2:3f:
39:fe:c6:23:62:8d:99:6a:28:e0:10:5b:07:b6:38:
34:77:63:19:85:23:2d:f7:0f:ae:2f:7e:65:e2:08:
dc:23:b1:f2:6a:cb:e0:53:40:f7:9d:fc:99:94:a0:
c5:1b:f8:65:cb:0a:30:23:ee:f6:1e:77:16:77:88:
f9:7f:24:9d:a2:32:84:95:ea:cf:51:9d:e2:b0:75:
a1:60:80:cd:4d:89:b5:8e:81:3a:65:b2:de:63:a5:
10:e9:0d:f1:4f:7a:3f:5c:77:9a:fa:e9:1e:c8:8d:
71:a9:84:af:c9:eb:cd:e9:e1:0b:96:6b:1e:0b:d0:
f4:c4:93:9f:6e:43:50:af:e5:a5:df:a4:ef:d7:86:
97:44:b8:a4:e5:56:2f:b6:7c:55:aa:57:b5:8e:3a:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:31:29:A9:F2:BF:01:C9:D0:B8:A6:A2:B3:C4:47:22:6A:CD:5F
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:27:54:9e:44:76:2c:f7:82:29:53:f0:2e:7f:b2:d9:ad:44:
b2:56:10:f7:62:9f:c9:09:ad:53:cb:c6:5f:e4:a1:7c:4d:ff:
2d:8f:0c:f2:56:c2:50:9f:9f:49:d5:c7:ab:86:1b:df:02:a5:
51:9b:fb:8d:ca:17:c5:f4:f7:f7:28:a9:09:6b:e5:e8:ec:99:
f8:ed:e9:01:f8:38:d7:d2:91:21:52:72:ef:aa:f8:88:4d:d1:
dd:f3:95:69:2a:12:bb:69:a7:46:40:8d:81:5b:7c:f6:b3:e4:
33:9c:46:bf:b1:ea:45:9a:6b:a9:d6:81:91:82:a5:6e:42:3c:
e3:b9:49:6e:ee:80:2a:3b:3a:ba:20:8d:aa:da:8c:44:29:84:
8d:ac:d6:a5:3d:4e:3d:c8:a2:03:dc:eb:90:9a:0d:3d:6b:c6:
55:a5:2e:e7:29:94:5e:e7:78:b2:b4:a5:f7:31:d8:7d:e8:21:
97:d8:ad:c1:df:2f:35:73:8b:50:e8:75:54:9e:31:08:90:8a:
a4:23:b4:43:ab:ea:fa:56:0b:d1:18:5f:3a:17:a4:36:88:fc:
93:d1:5b:81:c1:13:ed:ec:cb:21:df:c8:1a:fe:8e:43:f7:fb:
39:12:d0:dc:3d:4c:8e:8c:13:f4:33:69:ae:47:d5:3a:d7:b8:
f2:41:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:25 2025 by rpki-client