Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: +cUfUg6KevRJ7ITxyV5uBAG3zrTV8o1mG49o4vh+OT0=
Subject key identifier: 32:C9:9A:BA:A4:9B:4B:AA:3D:1A:2E:B7:97:28:C3:32:AD:52:AD:05
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0198665D1A74FF433D0ECC081986E3778898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0CB7
Signing time: Fri 01 Aug 2025 16:00:34 +0000
Manifest this update: Fri 01 Aug 2025 16:00:34 +0000
Manifest next update: Sat 02 Aug 2025 16:00:34 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: UAJo3Iw1kDsSBlVoTt9gKZfy5aQDF7AvknXNJl/viaU=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5d:1a:74:ff:43:3d:0e:cc:08:19:86:e3:77:88:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Aug 1 16:00:34 2025 GMT
Not After : Aug 2 16:00:34 2025 GMT
Subject: CN=32c99abaa49b4baa3d1a2eb79728c332ad52ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:bd:76:b3:dd:96:28:f8:2c:d8:33:6a:27:
9e:6f:37:0e:e0:81:17:39:27:28:44:53:79:59:b0:
09:e0:09:b2:fc:9f:7d:6a:b1:c4:02:98:2c:74:0a:
93:4a:40:51:9e:52:03:34:2c:ae:60:b3:4f:2f:ed:
74:17:ef:f3:58:a5:bc:41:3f:30:2f:32:3b:8f:e4:
37:87:59:02:92:47:33:12:6c:a9:55:d9:59:f7:d3:
01:c0:45:c8:aa:0c:f0:af:0d:7d:30:f6:47:18:da:
33:02:e1:12:12:ff:df:46:38:cb:70:79:b7:00:27:
0a:e3:77:dc:95:df:64:96:fc:c2:e8:c5:6d:bf:88:
f0:21:ba:86:69:8b:13:7f:80:72:c9:fc:b3:d8:5d:
2d:f6:13:1e:62:ff:46:81:93:b4:ea:6d:15:f5:7e:
cb:7d:ee:db:65:5f:e9:7b:47:9c:4d:25:e8:e3:dc:
5a:a9:6e:ba:a9:f2:79:98:1b:6c:34:4a:92:16:d3:
20:87:0c:36:f8:a3:ad:e1:13:9a:ed:71:01:ad:13:
1e:29:2f:6f:e0:31:67:76:55:fe:40:96:43:9d:7b:
35:3c:42:12:4a:3d:c2:75:75:05:a7:b3:f1:d1:8b:
c7:fa:3f:f0:ba:9c:9e:64:6c:8e:ff:74:c2:d7:2e:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:9A:BA:A4:9B:4B:AA:3D:1A:2E:B7:97:28:C3:32:AD:52:AD:05
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1e:c0:97:d2:51:80:84:75:21:b0:66:9d:42:d0:12:5b:0b:
ea:f0:c3:cd:36:f5:0c:cf:03:3c:c9:94:5f:3a:9a:95:73:9a:
7c:69:c6:8b:f6:f5:dd:27:98:f6:75:17:24:81:68:62:b7:2f:
8b:f1:c5:f7:8b:6c:20:d5:2a:24:c5:55:93:e7:58:30:a4:63:
89:ad:2b:2d:48:58:b3:1e:b3:9f:a9:88:70:9f:7c:8e:2b:ac:
26:d1:04:a4:fc:d7:80:f1:51:8b:e7:92:57:53:b3:38:c8:e9:
19:c8:e0:ef:f0:2b:db:5c:90:95:15:a9:dc:7a:b0:3a:53:e9:
16:0b:45:c1:21:b4:f5:7c:fc:40:94:52:7d:df:d4:69:f5:85:
41:e4:91:9f:b9:c7:50:23:9d:28:ab:77:c5:5d:db:72:79:e7:
b3:47:dc:0d:7d:93:a7:74:77:b5:56:fe:10:2c:86:4f:69:7e:
1e:b7:ba:4b:d4:62:93:b6:d6:75:56:17:d4:20:b0:06:91:1e:
25:fa:1b:64:ff:9b:46:2c:4f:0f:06:7f:38:69:66:d6:37:b3:
df:6d:af:31:14:97:02:84:75:6a:67:6e:de:bd:66:b6:64:29:
d3:d3:8e:7c:f4:72:08:9a:04:ba:97:ab:d7:07:28:77:ff:e1:
98:43:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:49 2025 by rpki-client