
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: C6dVazOGF4qgOYZOL3q7a9hY1PFuSbxk9tXygCmUGBc=
Subject key identifier: 48:0C:9D:B7:77:04:1E:FB:A6:D2:93:54:C5:5C:07:8C:9F:2E:9E:A1
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 019898931DC45E66460BE82EF8AB870ED63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: FC
Signing time: Mon 11 Aug 2025 10:00:34 +0000
Manifest this update: Mon 11 Aug 2025 10:00:34 +0000
Manifest next update: Tue 12 Aug 2025 10:00:34 +0000
Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: eSL8LuGCIloLOwyMBznIrO9jxwJXdgG3slKTUL9qWYg=)
2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:93:1d:c4:5e:66:46:0b:e8:2e:f8:ab:87:0e:d6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Aug 11 10:00:34 2025 GMT
Not After : Aug 12 10:00:34 2025 GMT
Subject: CN=480c9db777041efba6d29354c55c078c9f2e9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:74:5b:27:3a:b1:69:f1:c8:04:bd:c7:ac:
25:9b:3e:3a:5f:b6:84:e9:da:71:c2:37:a3:ad:80:
3e:e6:8f:52:16:45:1e:76:cf:0b:7b:ae:6e:ae:ed:
8f:ee:0d:93:eb:5e:59:44:13:f5:09:86:89:36:44:
85:cf:f7:d6:15:ee:a7:90:ba:a1:29:81:67:c4:58:
05:df:44:42:dd:97:bd:ee:2b:36:20:d8:2c:e3:cd:
3a:cf:1d:fb:8c:f7:82:c8:76:8d:85:af:c6:82:0b:
9b:e3:6e:98:3a:2d:e0:4b:92:d7:d0:28:5b:f0:98:
6d:12:f5:86:a1:07:ee:47:9b:4c:e5:4e:35:28:c0:
02:bf:ca:1d:fe:5c:71:25:9c:bf:c7:27:36:f5:2d:
24:92:0c:66:73:35:0f:1e:3a:9b:b8:fb:3f:83:d8:
06:d8:9f:58:cf:fa:a7:d7:d1:c5:61:c2:ba:b7:3f:
7f:7b:a4:6d:ad:9c:c5:84:c5:6c:49:2c:fd:b5:6d:
34:15:7b:fa:6a:eb:d5:5c:a4:67:25:13:6a:dd:e7:
8d:3a:c8:ac:db:e6:bb:31:83:f7:ea:ad:76:e1:ba:
b3:2e:b7:b4:2f:c6:a4:7e:b4:78:d9:22:d4:d4:9d:
f5:d1:00:33:59:66:4a:4e:aa:a5:7e:bb:f2:e4:9f:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:9D:B7:77:04:1E:FB:A6:D2:93:54:C5:5C:07:8C:9F:2E:9E:A1
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:7d:c0:ce:5c:52:07:71:20:7a:d2:e3:8c:3f:19:36:94:
65:5c:60:95:8c:0b:6b:a5:e4:7c:be:10:83:f5:ee:e1:1b:92:
92:c6:e5:c3:2f:6a:4b:04:0e:48:54:19:c8:e8:7f:1c:6d:11:
de:be:c6:25:3e:35:5c:2e:cb:18:fd:54:e7:8c:36:05:72:8d:
02:aa:50:7e:7f:22:c2:81:42:b2:3e:19:db:47:8b:3d:74:0f:
02:04:ae:2b:b1:49:c5:fc:3b:f8:ca:fa:4d:94:4d:89:2e:87:
ae:8d:ea:b3:c8:13:94:83:74:65:a6:19:1a:0f:e9:d1:8c:82:
91:88:98:69:10:fe:ef:2a:ff:8c:c7:d5:ca:5b:2a:62:de:28:
61:3b:67:52:64:12:bb:d6:aa:70:3d:3a:4f:92:de:47:4c:d1:
e4:a1:c2:67:90:dc:53:7b:3c:9f:a5:6c:3d:29:f5:5f:0d:88:
02:b5:04:54:11:2d:84:c8:d5:7b:d0:40:47:8d:9e:cf:1b:35:
5e:90:dc:fd:80:fc:10:cd:c4:c8:c1:c4:54:f8:a9:ae:93:17:
fd:85:73:59:0d:b4:1d:9f:71:b4:9d:9d:da:53:49:2d:a2:ec:
65:29:e3:db:c7:ba:7a:7f:96:fc:34:18:38:7b:14:3f:fc:f9:
28:6e:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:49:51 2025 by rpki-client