Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: KHNNCC98Dxxg/+yRljVwrPjdBbQMVa9njoGsgpULA/Y=
Subject key identifier: 1C:20:C3:AE:AA:95:37:2A:97:DA:35:71:6A:D0:A4:E9:69:CF:C4:6D
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 0198499C34B26D52269B53A33119566590B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 02:00:30 +0000
Manifest this update: Sun 27 Jul 2025 02:00:30 +0000
Manifest next update: Mon 28 Jul 2025 02:00:30 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: 0D4NByc/bYkL5WN9QK83U33wl5npCfk97K1wamsaGIU=)
2: _KFhe_BTtpV1lrF9X5QVnQTsJqE.roa (hash: IF46Z4ZmdTyMS4tPxALnyzFW/TQdLU6fExwxVvpvcXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:34:b2:6d:52:26:9b:53:a3:31:19:56:65:90:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jul 27 02:00:30 2025 GMT
Not After : Jul 28 02:00:30 2025 GMT
Subject: CN=1c20c3aeaa95372a97da35716ad0a4e969cfc46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:05:c1:bb:ae:ff:14:e5:3c:70:32:35:ac:
75:d0:75:da:13:90:d7:54:2b:25:c1:7a:d3:79:c9:
3e:66:f4:5a:63:1f:b2:c0:12:9d:0e:b0:0e:c6:6e:
2f:32:f6:00:26:08:c3:60:87:73:95:d4:1e:6b:7a:
26:6b:bc:76:74:23:0f:f7:ff:04:f0:ad:05:ca:d1:
e2:20:bc:26:be:b1:86:dd:74:b0:18:05:ac:07:41:
cf:f6:9b:2a:54:42:d0:fc:ae:60:df:70:73:68:59:
2b:c6:5f:70:47:bb:e6:e9:c3:d8:94:7e:97:74:71:
c3:7a:db:c0:3e:f8:3a:c7:b4:85:5a:c0:fb:45:5d:
c6:e6:0d:a1:3f:2c:3e:1b:86:23:43:8b:72:d1:f2:
24:26:55:08:98:bf:15:b6:eb:91:15:1f:cc:eb:ea:
b8:e4:d0:5b:bb:aa:f7:1d:bb:73:a9:f8:b7:70:52:
ed:99:ae:e8:e5:fa:96:e2:02:e2:ec:ee:92:dd:e3:
d1:56:18:0a:12:e2:69:b1:97:51:96:09:71:56:a8:
0f:85:f3:3b:2e:73:66:3c:74:f3:9f:44:ae:2f:0f:
3d:65:d1:86:2f:6c:f9:e8:34:af:4d:81:29:9f:96:
47:55:58:09:b3:67:a7:51:2a:94:d1:6b:ec:7e:64:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:C3:AE:AA:95:37:2A:97:DA:35:71:6A:D0:A4:E9:69:CF:C4:6D
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2a:24:37:1e:91:95:fd:a1:08:96:5d:3c:7f:89:af:3d:fb:
29:2a:66:ca:38:5c:8d:ea:22:ab:fe:75:d1:fa:35:26:02:d8:
f2:97:61:f6:2b:6a:d0:0f:04:8e:79:10:4a:0a:3b:01:8d:b6:
0f:ef:ea:68:45:ec:47:34:ed:3a:1c:72:ac:46:76:34:dd:39:
2a:28:1b:fb:c2:35:8f:53:70:aa:84:8c:c9:42:51:b8:6f:02:
79:29:b1:98:5c:82:4f:1d:bf:1a:b8:10:fc:95:df:a5:a8:bf:
b6:e9:83:c5:b6:66:28:13:62:e5:79:fd:b0:43:7e:aa:e4:4e:
f9:52:cb:90:8e:b2:26:41:aa:79:13:d3:72:3c:7b:26:2b:94:
2b:61:9f:f3:07:2a:05:7c:f1:5b:83:6d:8e:7a:0c:5f:24:bb:
36:2a:a1:1a:39:b9:30:73:6e:b6:23:88:28:b0:05:c1:87:0b:
a2:06:60:1f:b0:4a:80:e6:40:ae:5c:8f:64:f5:49:b1:65:96:
33:b8:ac:46:b0:af:3d:fb:43:92:fc:07:e6:9e:29:ab:55:28:
65:65:f3:50:d5:4a:c8:f6:a3:6d:11:18:6f:be:de:ff:7e:18:
4d:f7:c9:77:dd:79:05:9e:88:ca:5d:f5:12:9a:c1:2e:81:7f:
09:ef:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:34 2025 by rpki-client