Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: ekkJQK6G3GXmKL6ZInBFqg9Sy1wSytM1UPhCxnbdTDk=
Subject key identifier: E9:02:5B:2E:9F:16:65:08:85:F1:74:A1:14:C0:24:5F:DB:34:6B:F9
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 01976F9A43C7A0CA77C4DADA7D3AB4EFAAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0E3C
Signing time: Sat 14 Jun 2025 18:01:10 +0000
Manifest this update: Sat 14 Jun 2025 18:01:10 +0000
Manifest next update: Sun 15 Jun 2025 18:01:10 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: nFofv36pm3CtxMtuqHBsuLjdsUIJgUhuBb+bFVBK0vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:43:c7:a0:ca:77:c4:da:da:7d:3a:b4:ef:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Jun 14 18:01:10 2025 GMT
Not After : Jun 15 18:01:10 2025 GMT
Subject: CN=e9025b2e9f16650885f174a114c0245fdb346bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:11:1f:8d:9d:5b:d5:70:c6:88:d1:49:2b:
60:08:30:c8:84:84:b5:c0:c2:43:f1:b6:0a:1f:2f:
d7:9e:77:be:f1:9d:96:e6:ef:a2:a1:3c:74:b5:2c:
6c:ea:cc:93:ff:30:d0:c7:f7:4c:9b:c4:32:47:7b:
22:3a:4b:38:42:b5:69:e6:98:16:6b:8a:fc:2b:2f:
68:fa:f1:21:e3:38:2d:6d:ff:14:82:99:5e:63:9f:
2b:a3:0f:f6:f6:5f:dc:89:81:f7:0f:31:f6:a5:b3:
5b:ae:27:02:3a:92:16:25:d5:a9:a8:ca:33:d4:02:
86:2e:54:38:c9:ab:51:a6:20:7a:5b:d0:79:c2:da:
fa:e7:14:16:79:36:ad:6f:89:73:8e:01:fb:82:4c:
d7:2c:03:13:46:94:e4:1c:6f:99:0c:09:a2:d5:2f:
c7:96:66:77:a5:87:e7:77:99:bd:a3:08:ce:17:e3:
5c:b5:9d:87:fc:59:c4:2d:9a:c6:cd:ad:68:27:45:
3a:bd:8b:b8:65:fe:cf:51:e4:37:ab:06:9e:40:c7:
28:94:f1:f2:42:22:38:5f:9f:ff:22:14:dd:44:3b:
1a:08:8d:cd:fc:36:f2:2d:f5:cb:3a:cd:b7:18:3b:
4a:ab:db:69:cf:e4:b7:06:fd:95:3b:ae:e5:7a:26:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:5B:2E:9F:16:65:08:85:F1:74:A1:14:C0:24:5F:DB:34:6B:F9
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:37:4d:50:2f:a6:87:9c:ef:66:e9:25:5e:19:72:1d:46:
0e:8c:db:ef:5f:17:8d:a5:c4:5c:86:30:30:6c:a7:09:de:1c:
04:f5:7a:8d:a7:dd:94:48:6b:28:7b:a2:2f:2e:f2:8b:45:4e:
a3:cb:53:90:19:ad:ac:c1:0b:f6:8f:a8:0c:59:66:ac:7c:0c:
80:9d:4f:d1:5e:b1:2e:cb:e1:b0:66:e2:dc:bc:45:39:cb:28:
a5:ae:ef:82:15:45:1b:4c:ae:61:9f:f9:0f:ad:44:66:67:0d:
a1:c1:4c:3b:78:7d:e0:a2:39:0b:92:eb:67:e8:5f:8a:04:cf:
3f:d1:53:81:7c:70:41:89:3d:2e:56:c1:6c:21:87:f5:84:8a:
0a:c8:0c:bd:4b:f4:6f:c3:03:84:94:81:e7:47:10:6b:87:f4:
54:0e:c7:af:22:16:82:9f:df:73:5b:8a:60:a7:b0:7d:d3:18:
ea:c8:ca:15:d6:ad:20:49:50:41:ed:87:d6:f9:42:f4:ff:91:
1a:60:6d:54:51:ef:d9:72:c0:78:c5:8b:52:db:83:38:0c:cb:
bb:d8:37:7d:31:87:d2:7f:55:9e:4a:3e:2f:27:b1:d1:97:32:
93:ae:af:a8:16:7d:e6:00:e4:af:d1:9c:6b:92:12:45:36:b7:
a4:92:26:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmkPHoMp3xNrafTq076rUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzFjNjRjM2U1YTdkZTEwNDBmNDBkYThmZWRjNDdjMzhm
ZTU5ZmEwHhcNMjUwNjE0MTgwMTEwWhcNMjUwNjE1MTgwMTEwWjAzMTEwLwYDVQQD
EyhlOTAyNWIyZTlmMTY2NTA4ODVmMTc0YTExNGMwMjQ1ZmRiMzQ2YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMIRH42dW9VwxojRSStgCDDIhIS1
wMJD8bYKHy/Xnne+8Z2W5u+ioTx0tSxs6syT/zDQx/dMm8QyR3siOks4QrVp5pgW
a4r8Ky9o+vEh4zgtbf8UgpleY58row/29l/ciYH3DzH2pbNbricCOpIWJdWpqMoz
1AKGLlQ4yatRpiB6W9B5wtr65xQWeTatb4lzjgH7gkzXLAMTRpTkHG+ZDAmi1S/H
lmZ3pYfnd5m9owjOF+NctZ2H/FnELZrGza1oJ0U6vYu4Zf7PUeQ3qwaeQMcolPHy
QiI4X5//IhTdRDsaCI3N/DbyLfXLOs23GDtKq9tpz+S3Bv2VO67leiYM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkCWy6fFmUIhfF0oRTAJF/bNGv5MB8GA1UdIwQY
MBaAFG8xxkw+Wn3hBA9A2o/txHw4/ln6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTIt
YjA4MGEzNDUxYzdmLzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTItYjA4MGEzNDUxYzdm
LzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0o3TVAv
poec72bpJV4Zch1GDozb718XjaXEXIYwMGynCd4cBPV6jafdlEhrKHuiLy7yi0VO
o8tTkBmtrMEL9o+oDFlmrHwMgJ1P0V6xLsvhsGbi3LxFOcsopa7vghVFG0yuYZ/5
D61EZmcNocFMO3h94KI5C5LrZ+hfigTPP9FTgXxwQYk9LlbBbCGH9YSKCsgMvUv0
b8MDhJSB50cQa4f0VA7HryIWgp/fc1uKYKewfdMY6sjKFdatIElQQe2H1vlC9P+R
GmBtVFHv2XLAeMWLUtuDOAzLu9g3fTGH0n9Vnko+Lyex0Zcyk66vqBZ95gDkr9Gc
a5ISRTa3pJImVw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:50 2025 by rpki-client