Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: Gt5fou13ex4hyjtY3D+FrJPgsOyA4iRQ6ALaR1LCLjw=
Subject key identifier: FB:AE:65:CB:AB:95:15:21:8C:A4:FF:D4:7A:5C:0D:9A:DB:93:0F:55
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 01984A0A5BC80C0B4FB83CB11DF524863366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 068A
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: MDoeqRqa43mFhQ/Xjddf1VZlEEGBtEH2ZDezvme4Wuw=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5b:c8:0c:0b:4f:b8:3c:b1:1d:f5:24:86:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=fbae65cbab9515218ca4ffd47a5c0d9adb930f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:f6:4f:59:e2:d8:85:5d:0e:93:14:8f:ef:
8c:45:6a:6a:4e:21:47:2c:c4:62:82:08:ff:58:13:
71:bf:9c:c6:bc:ed:12:78:82:ae:dd:54:6b:b3:b4:
e8:bd:31:e6:70:5d:98:d1:3e:d2:6b:82:52:e5:fc:
c9:fc:1a:5d:03:9f:e9:6f:0d:0d:9f:21:ed:ce:f9:
2d:c6:0c:fa:90:da:b4:38:52:7b:5f:74:8b:ff:15:
2a:99:c3:61:d8:03:06:b6:37:58:2a:2f:d3:b0:4c:
54:cb:bb:be:fd:9c:22:b4:17:75:2d:6d:f6:b8:86:
f2:04:77:4f:b2:1e:fe:94:be:e3:a5:dd:5b:ee:12:
ae:45:50:de:8f:d3:8d:48:61:f5:1f:d3:74:88:26:
b3:6a:4d:53:86:d1:b1:96:e6:00:26:8f:1c:13:09:
a2:e8:2d:df:03:37:a7:48:0c:72:c6:a9:ae:6f:f3:
4a:42:91:5e:2c:4c:a6:1f:c5:be:87:6e:59:2e:2a:
b6:c7:da:a4:84:e1:44:0a:b1:e9:1f:ab:ef:2f:de:
78:01:8a:f0:7d:8a:19:1f:e8:25:22:71:f9:26:f1:
80:41:9e:16:bc:ee:94:84:17:a3:01:c4:3a:20:68:
30:14:10:eb:10:10:0d:a2:dc:f5:19:6d:ee:59:2c:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:65:CB:AB:95:15:21:8C:A4:FF:D4:7A:5C:0D:9A:DB:93:0F:55
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:47:fb:4c:ec:0b:e3:4a:62:13:a6:27:b0:ad:39:69:33:
bd:f1:ed:58:55:78:f4:5b:b6:00:b6:d7:f0:07:66:47:26:f7:
c1:d7:04:02:87:bf:2b:25:0a:d0:26:3b:ff:21:ce:75:57:59:
07:59:bc:d9:e7:6d:09:f3:6f:c7:c3:aa:f3:01:e9:30:68:28:
c3:b2:7f:ef:0c:f7:4a:4d:16:c3:b0:46:fa:ce:6f:7c:99:f8:
1c:2a:93:8f:60:da:23:ec:dd:22:3f:ce:26:b0:a4:d0:5c:d1:
22:19:b9:0e:8c:ba:2e:77:01:c5:be:85:4f:ea:e3:14:01:aa:
7d:7d:2c:a8:d3:8d:53:01:1a:17:08:5b:d7:9c:f8:45:de:b0:
2b:e0:e2:6a:ee:16:6b:e1:94:a4:c5:e1:88:cc:67:cd:41:8b:
90:bb:00:df:3a:2d:00:58:57:dc:0f:a3:9e:14:dc:bc:6e:24:
77:a8:fe:7a:d9:3c:24:72:ef:b5:c2:f4:d6:2b:1e:85:f6:79:
5e:2d:8d:04:83:65:6c:9d:70:ec:9d:11:8b:0d:32:c8:6b:81:
13:67:34:bf:fc:4e:9b:a5:be:eb:87:74:f1:44:83:72:f9:fa:
5d:d0:ce:11:2d:db:87:fb:cf:45:2a:68:a6:64:92:39:0f:39:
0d:15:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:18:21 2025 by rpki-client