Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: mDyflVLLBHceNZ0GeWx+dPmnQ0eLgd2UUiozA8hTCbk=
Subject key identifier: CC:96:26:DF:60:47:09:36:78:2F:C6:DE:76:31:A0:AE:CC:12:98:85
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 0198481B72B4FCD34CED5685BFEA0844230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 04C7
Signing time: Sat 26 Jul 2025 19:00:15 +0000
Manifest this update: Sat 26 Jul 2025 19:00:15 +0000
Manifest next update: Sun 27 Jul 2025 19:00:15 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: FhjubfGFooF3iChnVkH2qQ2+lTlOKIOxda8z3ppWfvY=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:72:b4:fc:d3:4c:ed:56:85:bf:ea:08:44:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jul 26 19:00:15 2025 GMT
Not After : Jul 27 19:00:15 2025 GMT
Subject: CN=cc9626df60470936782fc6de7631a0aecc129885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:d3:a2:3b:1c:a3:a7:9a:36:26:06:e8:81:
c0:49:23:f6:67:b2:aa:86:13:85:22:04:2c:9a:52:
22:a1:2c:a5:fc:08:dc:68:df:73:5e:49:bf:46:8e:
aa:30:44:a2:61:02:ad:5f:f2:79:cc:2d:30:5b:10:
d2:13:a6:be:26:5d:6c:7d:45:c9:6d:1b:ab:e6:b6:
ca:de:88:3d:4a:6a:e0:f7:75:cb:be:59:9e:21:fd:
26:82:f8:af:2c:3a:0e:44:1d:c4:4c:bf:8f:17:8a:
f4:1d:7e:f6:3f:a0:a8:df:6a:f2:98:b8:f7:27:4c:
85:d4:0e:c2:9b:21:55:22:b8:01:e4:f7:25:a8:56:
a5:7c:1b:15:01:57:1c:73:3d:b9:4b:1e:b3:4a:0c:
e6:9f:9d:03:cc:5c:22:b6:45:6c:03:f3:86:a1:3b:
a2:e0:6e:f4:a2:84:fa:52:e7:40:fe:54:ce:f9:d8:
ac:23:0c:da:ca:f4:5f:02:f4:5b:e0:f1:7b:b7:d1:
02:a3:1e:54:20:66:1b:39:2d:40:4b:e2:8c:97:9d:
38:5a:86:ae:b1:ab:6f:9a:f6:ae:80:8b:b7:d8:85:
19:5f:f4:28:d5:ea:e5:04:61:3b:b8:f3:4d:6c:69:
07:9f:fb:76:4e:9f:f3:78:ff:9d:6d:8b:2a:c4:cf:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:96:26:DF:60:47:09:36:78:2F:C6:DE:76:31:A0:AE:CC:12:98:85
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:7b:2b:4c:c7:3e:c1:53:d1:02:9b:4d:91:1a:ef:f7:1c:
c9:c3:19:5d:12:d6:7b:a1:27:4c:85:e8:b1:a8:7a:58:3b:e1:
78:7d:41:8d:25:77:da:ec:44:df:8c:c5:da:01:c3:d7:7c:20:
57:75:fe:f7:e8:83:9e:44:22:c4:99:44:ee:f6:15:43:59:91:
f3:e0:63:67:ad:08:b1:e5:ed:ae:19:3e:c5:93:ca:de:93:52:
c2:9a:54:10:46:49:4b:8f:23:55:ae:17:62:a5:b6:69:f0:43:
d1:9d:59:ec:5a:f7:da:ae:e8:82:ff:95:c1:72:6c:35:9c:9f:
eb:ed:da:55:7f:c2:de:a1:78:8f:66:53:83:44:21:77:fd:b9:
46:81:6a:1a:63:85:be:a8:c5:fd:0a:e1:24:0f:58:08:a2:01:
8b:e4:f1:f8:04:56:ee:73:3a:d6:24:6f:e9:a3:bd:e2:ed:e1:
d8:87:c8:50:59:da:2d:67:73:3d:ce:e7:1c:7d:89:97:77:3e:
d2:a2:11:2d:39:8a:9d:82:b2:43:8c:26:c1:46:49:4b:4d:09:
ad:12:1e:b2:68:95:62:f2:06:2f:3a:95:af:f3:32:6a:36:39:
06:e7:5f:8c:5e:0c:a3:59:fd:52:1d:b3:00:35:9f:9d:12:56:
9b:7c:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:45 2025 by rpki-client