Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: MYSZDJ0BT9xI4jFgSqHiUiyc6gRn+G7LxtW9oic3Dic=
Subject key identifier: 7C:06:B8:A0:DC:3B:A6:3C:CC:E4:83:99:8C:B8:56:53:D1:08:F1:40
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019A232E5965CB4D73886D1C86A111B3B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 05BD
Signing time: Mon 27 Oct 2025 01:00:31 +0000
Manifest this update: Mon 27 Oct 2025 01:00:31 +0000
Manifest next update: Tue 28 Oct 2025 01:00:31 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: PJIBaavMPL0Bbmc0EJ2xZIf2yR6QJC1/WYw3QzhonxA=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:59:65:cb:4d:73:88:6d:1c:86:a1:11:b3:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Oct 28 01:00:31 2025 GMT
Subject: CN=7c06b8a0dc3ba63ccce483998cb85653d108f140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:56:33:7b:1d:81:c0:55:6e:66:34:24:12:
c0:f6:de:ec:3b:9b:3a:18:8c:0a:b0:fe:60:a1:30:
c3:c7:73:b7:74:28:bf:c0:d5:54:02:a5:87:7a:58:
fb:9a:e4:08:02:c0:6c:e5:3a:25:c4:7d:c9:c0:ed:
91:26:ec:d8:c4:eb:54:ae:13:00:45:de:77:b4:ab:
7d:dd:8d:86:35:8b:95:a3:7c:9f:bb:65:11:b0:84:
08:4f:95:7d:b0:57:6e:e5:fd:4a:ac:d5:54:e6:53:
6d:5b:fa:05:e4:20:76:dd:6d:26:15:97:3f:8b:de:
15:b1:c7:92:a0:ac:68:6b:e1:88:f9:b8:40:db:6d:
db:92:f7:56:42:02:67:0a:b3:04:b4:a4:f7:fd:85:
24:82:10:3e:c9:f2:71:6b:f8:eb:44:12:9c:b4:7c:
a6:4f:0b:0f:80:98:ac:54:bf:4a:ea:e7:4d:b2:c2:
6a:05:b2:84:22:e3:d3:05:40:29:be:58:71:40:60:
7e:20:de:38:b7:cb:c1:17:f6:86:3b:80:45:ee:13:
2d:64:33:93:59:41:60:9f:eb:db:5e:68:43:8e:76:
a5:43:ea:97:f8:52:ef:2a:4f:40:48:44:9b:c5:43:
12:a5:64:0a:a5:54:a0:73:d9:d1:2c:d5:0f:01:7b:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:06:B8:A0:DC:3B:A6:3C:CC:E4:83:99:8C:B8:56:53:D1:08:F1:40
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:b3:68:0e:9d:d5:f0:7a:d9:c5:28:ba:0b:30:f2:9f:a7:
c3:5a:72:ec:88:db:c2:9d:ef:a1:33:bc:a7:d8:73:61:04:f5:
42:4d:c0:4e:ea:e8:0f:53:07:70:23:6d:fd:e0:70:35:8b:27:
f2:2e:71:f1:34:ef:eb:95:9e:18:c9:32:00:ce:b5:cb:fc:5f:
94:39:ed:90:31:ee:ed:25:34:42:bf:77:cf:e2:63:56:a1:39:
21:ad:f1:46:f0:c2:b9:e5:6b:5b:80:53:a3:ae:62:28:e2:b8:
75:e7:f0:6d:12:d7:01:e1:aa:0f:8c:c2:a4:68:f1:7d:cf:53:
ce:48:89:6a:91:b7:5f:c3:83:19:0c:8c:c1:4c:5a:93:43:9c:
5f:14:4e:57:44:89:8f:c9:1f:d3:67:a9:c1:eb:35:a8:b3:d2:
23:e8:66:b3:e0:0a:c7:e7:ea:ee:79:1e:34:28:f1:3b:d1:e4:
10:fb:dc:d9:5a:29:2e:5e:7f:24:7d:f2:6e:3b:61:e8:ce:f4:
02:ec:83:7d:6e:e8:16:65:ac:07:38:29:44:19:f0:56:b7:04:
24:73:45:ad:e8:83:eb:75:a5:d5:67:bd:da:7c:c2:bc:9d:3b:
8c:5a:a4:34:ac:4b:dc:2e:2b:03:7d:e0:4f:be:65:95:0f:3c:
f2:e2:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:43 2025 by rpki-client