Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: 3jY5BXAJW+87XazOrTu8eeT9ESHFiqhYoY0aRJRgLi4=
Subject key identifier: 01:0F:3B:CC:D8:3A:B4:AA:44:58:1E:9E:34:5B:C1:3F:A8:12:E8:5B
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019846641C521C3D9D133051A2B1BA2C71BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 158E
Signing time: Sat 26 Jul 2025 11:00:22 +0000
Manifest this update: Sat 26 Jul 2025 11:00:22 +0000
Manifest next update: Sun 27 Jul 2025 11:00:22 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: f5Hajgy2zE0kO7ipkc/WuiyBM4cAF8Byn4d4T6mvO2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:1c:52:1c:3d:9d:13:30:51:a2:b1:ba:2c:71:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jul 26 11:00:22 2025 GMT
Not After : Jul 27 11:00:22 2025 GMT
Subject: CN=010f3bccd83ab4aa44581e9e345bc13fa812e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:38:30:e2:1f:d9:8f:39:61:94:ce:25:35:
c4:6c:9a:4e:4a:cb:c3:30:fc:18:37:f3:54:4a:40:
17:8e:c6:7d:68:92:c3:e6:3a:1f:34:31:bd:17:fd:
d9:c3:22:a9:f5:d8:27:ac:55:f1:5e:eb:a9:82:29:
02:bf:ce:59:5a:b0:b5:df:c6:54:07:65:c0:68:0a:
e4:b0:ad:12:fb:b8:a3:1a:d4:ff:df:a0:3f:eb:33:
a8:c5:c4:dc:a7:f1:cc:ac:60:c4:53:87:f5:ef:b7:
b3:10:05:6e:f3:f4:f7:92:6c:2c:7b:c2:13:46:af:
5f:cd:e4:84:01:bd:f2:8e:9f:24:44:a9:ef:64:68:
dc:06:b8:a2:63:ab:61:5b:1b:e5:cd:d9:e3:64:75:
61:08:b5:f0:14:2f:09:bd:ee:1c:b8:6a:28:d4:8d:
43:a3:82:d5:b0:cf:19:af:44:0a:60:cf:0a:2c:45:
15:54:06:93:95:93:ec:c2:93:4a:78:b1:fa:5b:29:
6a:b4:40:b3:ae:15:68:9f:59:57:cc:9e:b3:0c:b4:
14:54:9d:3c:e4:31:af:57:82:34:fd:19:0a:25:6c:
c7:b7:f3:db:c8:65:d0:eb:df:98:05:d7:50:81:a4:
1c:84:ca:b0:7f:0e:cf:dc:24:01:94:25:02:88:a1:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:3B:CC:D8:3A:B4:AA:44:58:1E:9E:34:5B:C1:3F:A8:12:E8:5B
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:5d:11:bd:8a:5f:80:49:42:8a:5d:cc:1a:c8:a2:33:d5:
bb:1c:3d:d7:ab:ad:83:7c:39:16:77:47:47:27:c2:12:4e:fe:
66:a9:48:8b:a4:33:66:40:ab:02:0a:e7:2e:b1:5b:24:38:91:
cb:81:3e:dc:10:3b:fc:9e:3d:9d:72:d6:b0:4c:17:8f:28:25:
ec:9a:6a:20:d9:e7:a5:ec:0c:62:7f:40:6e:f1:83:49:6d:25:
b9:0f:e0:e4:db:c3:29:b6:11:fe:8a:34:ac:81:f9:98:8d:19:
12:ef:4b:2a:05:a1:04:1a:1e:9f:f6:ed:dd:e6:a6:9f:3c:fd:
1f:b8:5d:a1:e2:c9:2c:ff:ea:e5:25:db:a1:69:ad:dc:a9:02:
18:0c:d3:db:66:59:1f:36:13:5a:e7:c7:45:5c:5c:01:21:bd:
de:6f:69:67:0c:82:ff:a5:58:a1:27:ee:7c:6b:8c:b2:b5:21:
32:64:92:8f:d9:29:88:71:6a:9f:09:8b:79:3c:62:ef:a1:a2:
e2:06:2c:91:f5:45:63:b0:7b:1a:d6:fe:53:e3:24:e9:e7:e5:
f1:12:0d:71:ef:79:c9:a2:bc:9d:80:17:b4:6e:82:ef:9c:a4:
86:ee:32:85:dd:c5:b3:4b:66:1c:eb:12:9a:2a:e9:ca:5a:c4:
8a:d2:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:46 2025 by rpki-client