Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: EdEWs5RmjF46zFPD4UyvBrU65ifDj4TaXuT2d09Yc00=
Subject key identifier: C1:A0:37:CB:D3:2E:5D:E0:B3:7C:71:50:67:3D:10:75:BB:9B:8A:FA
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019A4DAA7D235AB0A64251A884AE0986EC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Wed 05 Nov 2025 07:00:09 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: SLbRS+dUWazO9FkSFjT3ObvcE++e3yXfACTw0JC8oCc=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7d:23:5a:b0:a6:42:51:a8:84:ae:09:86:ec:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 5 07:00:09 2025 GMT
Subject: CN=c1a037cbd32e5de0b37c7150673d1075bb9b8afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:11:9c:57:e9:82:75:ce:2e:40:d1:2a:23:
51:f7:f9:39:44:21:d9:2f:13:46:8a:4a:58:57:1e:
63:8b:df:29:b5:b4:0e:3d:15:e5:4b:42:07:ab:3f:
6b:57:09:7c:67:ec:09:7c:8c:0e:98:72:40:d1:5b:
8a:2c:e4:aa:7b:0e:ae:92:4a:58:e6:32:a4:00:79:
a7:93:cc:d8:e5:0e:f1:d8:40:b9:aa:43:c2:c4:de:
5b:17:a4:d8:14:f8:2c:20:b1:a5:82:f3:5c:e3:87:
ca:7d:7a:20:f5:93:41:44:b6:60:76:47:ed:11:7f:
98:ea:1a:d9:79:2b:f3:79:54:19:5b:6d:e4:ce:8e:
03:64:e2:16:13:8e:dc:77:83:fb:c2:e6:7d:8a:0d:
ed:f2:1b:93:fd:7a:81:4c:23:15:8d:9e:58:07:dc:
41:70:62:f0:92:de:ea:92:c7:46:ba:cb:da:ab:3a:
49:89:07:72:47:3a:e8:1c:0d:4a:99:5d:d7:05:84:
6b:57:3d:d8:7d:74:1a:57:cf:a6:b0:c1:37:10:03:
13:27:58:c7:13:3a:e2:48:ad:a8:d8:33:ea:ce:11:
d7:6f:29:69:81:c8:7a:ed:ae:22:e5:93:f5:06:cd:
1d:02:e9:22:1b:0d:22:3b:be:8d:cd:c8:8a:f1:ee:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:37:CB:D3:2E:5D:E0:B3:7C:71:50:67:3D:10:75:BB:9B:8A:FA
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ec:a6:1c:45:3b:03:ff:e0:03:31:05:96:96:74:1b:2f:70:
f8:f3:1b:82:87:ec:7b:26:15:e2:46:a9:e0:8d:c9:ac:02:f4:
10:f1:04:bb:b2:67:29:be:e7:1c:7e:17:4f:7f:69:74:c1:1b:
f6:45:b3:5c:ab:11:3f:03:9b:4b:e5:9a:d6:60:1f:28:a6:e5:
93:38:f3:e4:53:67:37:08:2b:a2:3a:13:33:fc:a0:d8:10:b5:
0d:95:38:57:b0:9c:44:77:59:39:94:46:1d:a2:4d:6a:52:d9:
94:dd:65:f2:ca:57:09:36:1c:76:2e:cf:3f:b4:15:a0:2d:ec:
f7:fe:e0:e1:b1:d0:3a:18:80:b4:fc:79:ab:f8:9e:69:30:98:
55:b3:f0:b3:8a:a3:65:52:80:e4:c1:8a:56:71:37:c1:a3:d3:
2a:e1:e9:82:d8:b7:95:22:ef:93:b0:7f:52:82:a6:8c:6a:9e:
b5:2e:5f:da:96:44:5d:a3:8f:81:24:1e:ef:a5:a1:a8:34:5e:
e3:21:f2:22:a6:41:ae:88:a4:02:cd:d3:43:05:c8:d8:8a:34:
6a:27:5a:89:2f:c6:91:1c:69:5b:c0:1c:9c:d5:f3:71:06:8f:
f8:ba:ab:b2:04:87:cf:0e:a0:23:b2:f0:81:8e:9c:b0:91:50:
26:7f:c6:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqn0jWrCmQlGohK4JhuxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy
NjEzMTEwHhcNMjUxMTA0MDcwMDA5WhcNMjUxMTA1MDcwMDA5WjAzMTEwLwYDVQQD
EyhjMWEwMzdjYmQzMmU1ZGUwYjM3YzcxNTA2NzNkMTA3NWJiOWI4YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc0RnFfpgnXOLkDRKiNR9/k5RCHZ
LxNGikpYVx5ji98ptbQOPRXlS0IHqz9rVwl8Z+wJfIwOmHJA0VuKLOSqew6ukkpY
5jKkAHmnk8zY5Q7x2EC5qkPCxN5bF6TYFPgsILGlgvNc44fKfXog9ZNBRLZgdkft
EX+Y6hrZeSvzeVQZW23kzo4DZOIWE47cd4P7wuZ9ig3t8huT/XqBTCMVjZ5YB9xB
cGLwkt7qksdGusvaqzpJiQdyRzroHA1KmV3XBYRrVz3YfXQaV8+msME3EAMTJ1jH
EzriSK2o2DPqzhHXbylpgch67a4i5ZP1Bs0dAukiGw0iO76NzciK8e5ALQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGgN8vTLl3gs3xxUGc9EHW7m4r6MB8GA1UdIwQY
MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt
YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix
LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOymHEU7
A//gAzEFlpZ0Gy9w+PMbgofseyYV4kap4I3JrAL0EPEEu7JnKb7nHH4XT39pdMEb
9kWzXKsRPwObS+Wa1mAfKKblkzjz5FNnNwgrojoTM/yg2BC1DZU4V7CcRHdZOZRG
HaJNalLZlN1l8spXCTYcdi7PP7QVoC3s9/7g4bHQOhiAtPx5q/ieaTCYVbPws4qj
ZVKA5MGKVnE3waPTKuHpgti3lSLvk7B/UoKmjGqetS5f2pZEXaOPgSQe76WhqDRe
4yHyIqZBroikAs3TQwXI2Io0aidaiS/GkRxpW8AcnNXzcQaP+LqrsgSHzw6gI7Lw
gY6csJFQJn/GYw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:47 2025 by rpki-client