Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: WSVwP8Hpo/acNoEkU4ojVHQtQYXlV8T67cIsR328L+k=
Subject key identifier: B6:F5:E6:43:C1:1D:09:FF:55:48:FB:A8:FE:D1:C2:C2:EB:51:C5:BA
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019847AE02DA26E25366E2EFE983B2104054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0C84
Signing time: Sat 26 Jul 2025 17:00:43 +0000
Manifest this update: Sat 26 Jul 2025 17:00:43 +0000
Manifest next update: Sun 27 Jul 2025 17:00:43 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: ThzHJgC3MoaAu9/vkseoAjb+qqSvVIgvY+F1mVJsYAA=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:02:da:26:e2:53:66:e2:ef:e9:83:b2:10:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jul 26 17:00:43 2025 GMT
Not After : Jul 27 17:00:43 2025 GMT
Subject: CN=b6f5e643c11d09ff5548fba8fed1c2c2eb51c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:f7:30:1c:50:dc:31:f1:55:a8:0c:ef:b8:
df:e4:e4:af:1c:b9:8b:84:46:ee:4d:d2:9c:b6:91:
bd:a7:75:61:dd:76:7d:50:ea:fe:c8:1c:f3:1f:88:
15:f5:14:01:18:3e:ad:d2:26:aa:e7:4f:b2:0f:e6:
9a:8b:9d:d4:c8:1f:be:dd:50:5b:08:51:72:2d:13:
85:c8:70:11:99:34:5b:aa:29:70:39:6a:74:5b:d1:
cf:f4:f9:d4:db:30:b7:a5:de:a8:db:66:8c:1b:67:
75:36:05:12:c0:0a:1f:52:09:a5:12:86:81:65:65:
11:c6:6d:ba:57:13:47:57:d9:d5:2c:0d:68:83:58:
ba:23:0c:bf:ef:e7:07:b9:a3:4e:49:bb:df:2d:b4:
99:31:3a:b4:2a:d5:2d:4e:32:2c:16:85:d9:4e:fa:
11:d3:fb:50:7a:79:a0:19:ab:7e:5c:aa:bc:97:d9:
36:4d:dc:dc:47:e4:5e:63:d8:07:25:5a:33:44:a7:
c0:63:09:06:19:00:0e:38:67:b2:58:cf:41:40:e2:
96:87:42:43:86:6a:2a:13:ee:fa:64:91:8c:e8:e4:
8d:0f:d7:3b:eb:06:bd:99:f1:71:6b:bd:36:1b:63:
87:33:b4:10:42:c4:f2:f6:93:a6:c1:75:6b:ac:ab:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:E6:43:C1:1D:09:FF:55:48:FB:A8:FE:D1:C2:C2:EB:51:C5:BA
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:40:5d:b4:5b:ae:19:4a:19:87:15:67:4c:75:d7:1f:dc:c9:
f3:3c:c2:db:84:58:79:e5:47:a2:12:a0:d5:a3:1d:ef:2a:ab:
a8:77:a8:3a:55:f0:f8:78:dd:11:f3:b5:c7:2f:f6:60:48:a6:
26:3f:8e:f3:98:88:b2:72:00:0a:d0:0d:2b:be:18:ef:cd:7a:
d4:48:07:99:11:c3:4d:96:ca:ca:a6:a3:99:f2:04:45:11:08:
b3:c2:51:9d:5f:c6:d8:1b:cc:fc:33:ab:41:35:ff:e5:cf:70:
71:1e:b4:d2:ed:70:57:e8:d9:9f:41:aa:d1:ba:66:76:74:a1:
4c:2f:57:fc:b9:c9:9a:51:0a:7e:7e:27:90:d2:c6:3f:3a:3d:
f1:1e:e2:c3:f7:9c:c8:43:48:b3:c6:39:5a:37:f9:ca:30:f4:
01:77:d7:24:06:d7:c4:ca:da:ff:2a:5d:9d:51:4f:79:66:b2:
bb:f4:56:19:e0:1a:f5:dd:3a:ed:df:fe:0a:61:8c:55:86:32:
fb:c4:09:3e:ae:98:4d:8d:49:6c:5c:3c:fb:33:57:44:7b:93:
7b:a1:5b:5d:39:d4:64:95:6f:26:5c:7a:5c:d3:80:42:aa:77:
d8:21:24:54:2f:ac:6e:2b:dd:4c:c7:22:2c:44:49:f2:c4:ca:
1c:9a:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:13 2025 by rpki-client