Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: RosB1BxGVOnT99WkF/0MMto7U2HPozefzjt5aH4Uzjg=
Subject key identifier: B0:C6:C3:E1:6D:CD:90:AD:AA:9E:74:CC:D6:B4:3A:1C:B6:B7:96:D0
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 019A4D7411F1FB4AF0B95570F18C9546EF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0FB8
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: WKWL4OQeCRZv/8qLjxvtM9sWeUQEkwyOCBi0+2rr5uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:11:f1:fb:4a:f0:b9:55:70:f1:8c:95:46:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=b0c6c3e16dcd90adaa9e74ccd6b43a1cb6b796d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:1f:29:75:f8:91:b6:98:15:fe:ee:04:e8:
03:51:89:b3:26:f0:62:ed:89:2e:a1:81:37:81:76:
4b:58:4b:eb:70:94:5b:5e:a5:f7:df:a2:b5:7b:05:
c9:43:12:58:15:96:d9:e5:2f:0c:95:ed:3e:63:1a:
d7:c3:ab:9f:01:81:c7:16:f6:9b:60:e2:53:b5:ee:
03:9d:d0:c1:38:eb:b7:0e:43:9f:7e:7c:af:7c:60:
19:62:4e:79:b6:e8:93:59:8d:7a:a0:38:85:76:81:
03:cd:1b:91:6a:74:a1:d8:5a:62:58:59:31:4d:65:
12:26:45:2a:90:db:82:dc:6b:d3:dc:d7:65:84:50:
8e:1d:bd:83:c1:24:8c:d3:36:07:e1:20:f8:56:76:
8b:ff:c9:6e:08:52:fa:df:8b:87:6d:d2:15:10:34:
07:64:64:2e:94:e8:4b:d6:f5:a1:85:86:ad:f8:91:
65:8f:40:4f:f8:46:d5:a0:cb:db:f3:42:7a:b5:5c:
ed:92:eb:3d:db:34:36:e5:04:bd:4b:29:b3:be:8f:
af:0d:d6:4c:91:1c:ff:ef:24:6f:b1:e0:a8:18:fc:
ef:68:25:a6:33:13:5d:90:bb:dd:eb:7a:48:f9:2f:
7e:98:29:b7:79:99:9c:ba:64:18:e0:2b:dd:f6:f7:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:C3:E1:6D:CD:90:AD:AA:9E:74:CC:D6:B4:3A:1C:B6:B7:96:D0
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:71:b2:f6:05:46:e7:f8:16:f8:07:b8:b3:0f:03:6f:ff:32:
b9:81:b8:8f:87:96:74:5d:77:ec:87:4d:cc:5d:e0:70:75:42:
5a:a3:c6:60:aa:d7:22:71:e6:e6:aa:fe:e1:59:fe:e1:1d:ed:
bf:8a:64:69:5e:92:71:dd:f4:ef:98:da:7e:f5:5c:8b:af:f7:
61:39:62:3c:4f:01:c2:0f:a2:66:7f:e2:34:36:9f:ec:7c:9d:
8d:24:b4:36:36:be:5b:11:20:87:d5:bf:62:fe:8e:98:0a:4d:
40:37:60:f8:8a:51:c6:c7:3a:cf:06:b0:6a:0a:4c:de:17:fb:
0c:00:57:c7:ea:03:47:6c:59:f5:1e:71:2e:0c:ae:32:14:12:
8e:3d:d8:c4:d7:09:e0:f7:30:1d:e1:2a:08:98:cc:8c:88:59:
86:c3:bf:e4:24:d2:38:49:de:19:8b:42:be:c9:a0:98:e8:20:
b8:6f:03:33:3d:73:2c:d7:00:08:88:8a:0f:75:ea:47:8a:f0:
48:89:e6:d6:8e:1e:73:76:7c:19:f7:d9:6c:f0:41:9d:c6:50:
7e:55:03:f9:2d:e4:3b:57:a9:e5:3c:da:5e:f7:fb:07:56:30:
1e:b9:2b:44:fa:0f:64:9b:03:4b:2e:09:50:ff:41:ba:6a:fa:
5d:be:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:22 2025 by rpki-client