Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 6TBMYGEYZ4mV+V4hRxiGAkRlxe3SPRL2QRvEaxHNROk=
Subject key identifier: 88:B2:51:65:F8:45:AB:77:C3:9D:ED:57:27:25:37:F0:44:97:F1:A8
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 01983B72A03EE185D4F2C4E7C22E9A2C29AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 15FA
Signing time: Thu 24 Jul 2025 08:00:24 +0000
Manifest this update: Thu 24 Jul 2025 08:00:24 +0000
Manifest next update: Fri 25 Jul 2025 08:00:24 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: Q839OePrubQQPv/p9p4GU2C0tyg/Obw68S5F4kVYcjU=)
2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:72:a0:3e:e1:85:d4:f2:c4:e7:c2:2e:9a:2c:29:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jul 24 08:00:24 2025 GMT
Not After : Jul 25 08:00:24 2025 GMT
Subject: CN=88b25165f845ab77c39ded57272537f04497f1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:7e:9b:db:12:44:c9:b0:0d:27:8e:a4:4c:
93:03:24:9c:e3:02:62:e9:30:3b:8b:6d:7e:eb:a2:
ce:94:5d:ba:e3:6e:18:aa:99:0b:5c:dd:06:9f:1d:
cf:8f:1f:91:10:a6:94:2b:54:c0:b2:78:20:ef:e6:
f5:c9:75:7d:51:74:78:39:88:ac:80:fa:49:b7:73:
68:f4:8a:a5:4f:bd:0d:dc:cc:64:62:fb:56:50:c4:
79:cd:7f:7c:3e:6c:7d:3b:3f:82:75:38:3c:0f:6e:
2f:05:3b:ba:5f:4e:38:45:d7:5d:33:7a:0f:b4:3f:
82:5b:e1:7e:1d:a3:ea:94:87:b4:6c:8d:1d:58:8d:
7a:f5:29:0d:fc:cf:70:f1:3c:6c:26:79:d9:79:05:
3f:d5:f0:85:27:a6:3b:27:f3:00:e3:41:fd:94:5d:
94:c6:0a:69:c3:d4:71:ba:10:83:9d:50:68:7f:eb:
61:1e:c7:d0:bb:4d:ea:60:cd:8e:1f:4a:4f:5a:78:
e6:cc:1b:ac:ae:5d:27:f0:cb:83:d6:31:a4:a9:0c:
33:37:28:07:20:fe:b8:73:c8:b4:2c:43:b1:00:09:
28:90:04:c2:77:e3:d9:0b:55:1b:13:ff:a3:77:f4:
d4:f5:9c:f4:20:95:41:a6:2f:29:76:60:f9:23:42:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:51:65:F8:45:AB:77:C3:9D:ED:57:27:25:37:F0:44:97:F1:A8
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:02:96:11:28:97:0b:f6:9f:8d:12:fd:14:30:3f:68:bb:
a5:cc:61:25:42:95:91:ff:b9:e2:02:30:3d:54:d9:d6:c0:a5:
87:da:41:24:71:39:58:e1:95:55:a3:14:c7:c5:43:55:8a:75:
f7:d5:2b:41:69:6d:7f:53:8c:b6:d6:83:37:fe:85:4e:c1:17:
93:16:47:b9:6a:c3:5e:93:f9:5c:6e:dc:51:f6:5d:3b:e7:d7:
f7:3c:b9:3b:12:72:31:3b:12:c9:47:30:5f:0d:60:b0:f8:73:
6a:af:3a:82:06:28:e9:a0:a3:3d:de:ae:17:85:1b:b4:d2:41:
02:c7:25:6a:3e:b3:ac:7a:7a:57:b9:ca:cc:dd:91:e3:ab:6d:
4b:94:77:26:ee:db:d5:31:9c:60:8b:e4:15:74:b8:44:58:9e:
64:ef:9b:fa:57:8d:99:61:91:93:b3:e7:8f:09:5b:67:c0:35:
67:94:90:20:fa:df:db:28:ea:d3:de:eb:da:c9:eb:0d:4c:23:
12:52:11:91:45:d2:31:be:4c:70:2d:dd:c1:85:d1:0f:d6:d5:
5f:0c:63:33:84:a7:22:e6:c7:67:bb:58:b2:f9:45:c4:a3:a1:
29:52:f0:ab:39:6f:a1:fd:7d:b7:52:b0:0a:06:9c:8d:8a:42:
f4:29:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:55:48 2025 by rpki-client