Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: E022L5Qqi/rMmRBoUQKT7yVB5Vj5B/N7Ff+ALr0LSfs=
Subject key identifier: B9:A9:CB:80:5A:C3:08:43:A5:6A:56:C9:0A:46:D0:32:DA:D9:D5:91
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 01984A09EEF4CB719C9686B3A1504BEC85FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:21 +0000
Manifest this update: Sun 27 Jul 2025 04:00:21 +0000
Manifest next update: Mon 28 Jul 2025 04:00:21 +0000
Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: W7msMMIV09xudv93K7muOuly4bB8C8qhz6XuPFbGzFw=)
3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ee:f4:cb:71:9c:96:86:b3:a1:50:4b:ec:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jul 27 04:00:21 2025 GMT
Not After : Jul 28 04:00:21 2025 GMT
Subject: CN=b9a9cb805ac30843a56a56c90a46d032dad9d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:7f:18:21:c3:0a:e5:2c:55:db:d5:1f:bc:
65:93:d3:9f:44:7a:49:d9:80:c1:e2:20:aa:44:ac:
48:f0:4a:57:97:02:eb:cf:45:be:5d:4a:11:5d:1b:
c5:87:29:93:11:eb:c7:1e:9b:9d:a8:e0:2c:be:68:
e7:cb:4d:e2:30:cc:23:87:cf:12:44:98:54:b8:ca:
d4:dd:79:ae:f8:50:dd:68:e6:49:74:92:8e:a7:9f:
24:8a:7c:de:38:52:24:f4:05:91:6c:d8:10:21:2c:
51:8e:ac:fd:29:2f:8d:a9:f7:2a:e0:84:3f:17:d5:
f8:7a:d3:00:93:4b:fe:ac:7c:0c:4d:06:53:5a:d3:
a6:c7:1b:10:7f:20:41:9e:ab:20:35:fd:f6:8d:90:
d6:18:f2:ee:37:ec:e2:90:97:65:44:fe:33:6c:97:
d9:8d:57:2d:c1:04:96:c8:b3:35:44:03:6c:e1:24:
c6:7c:19:54:46:be:50:c7:d9:ee:42:ab:e4:fb:ca:
ad:57:c3:09:66:73:4b:58:ab:9d:ce:27:7e:c0:d6:
85:95:36:13:67:6d:a8:b9:2d:3d:9f:77:e3:7c:fb:
68:6a:bd:76:ba:6b:6c:80:62:5f:87:5c:11:aa:75:
cd:e9:32:58:60:68:9c:f0:d9:e3:38:68:36:f6:50:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:CB:80:5A:C3:08:43:A5:6A:56:C9:0A:46:D0:32:DA:D9:D5:91
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2f:d0:68:2b:95:ce:ca:e3:a2:ea:80:d5:9b:26:a6:60:14:
bc:00:f5:78:18:61:cd:41:47:89:00:9b:d4:8e:cd:ce:e4:e2:
9c:ad:82:b1:e5:bd:83:24:78:b1:8a:6d:19:5e:0b:f6:24:df:
11:10:d5:4f:c5:2d:a2:e4:71:f9:b6:6c:4e:e3:75:cc:bb:18:
6e:a1:28:6a:23:45:4e:84:be:9e:1c:15:aa:8b:56:0a:94:4e:
b3:00:6f:00:4f:d9:b8:09:cb:af:ff:70:16:e4:7d:22:16:47:
1a:b5:74:0e:05:65:d6:e4:93:59:e9:f2:bb:5b:f6:f6:3d:77:
e2:47:93:bd:20:6f:c0:0d:d0:49:62:e1:74:e2:83:e5:4b:ea:
77:e1:f4:6a:9c:47:8d:b3:17:57:a3:91:3b:d4:bb:35:65:74:
ac:d8:08:dc:9e:8a:10:58:e8:4e:b0:e9:20:66:1d:44:d4:b2:
ce:02:c1:b7:89:67:28:4e:2c:15:19:9a:58:05:e5:ec:39:bf:
e4:64:ee:54:6a:c0:fd:82:d8:6f:0e:70:c7:09:be:7a:d4:40:
33:1f:f2:0f:f7:6b:a4:59:fd:04:0b:69:c7:6f:73:d3:dd:76:
dd:11:e6:80:b0:7f:fa:75:c5:e6:9b:ec:90:94:36:79:dd:32:
49:66:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:51 2025 by rpki-client