Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: vM8s51Zx4anjR9k0zV4HWifs5pQf6WHj1X2OyikIysc=
Subject key identifier: DC:FB:8A:64:5A:33:F9:A1:1E:7F:0A:A3:61:11:66:53:B8:3F:14:B1
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 01991688F60DDD54840B10E01463BE8D6D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0BC4
Signing time: Thu 04 Sep 2025 21:01:38 +0000
Manifest this update: Thu 04 Sep 2025 21:01:38 +0000
Manifest next update: Fri 05 Sep 2025 21:01:38 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: QX5ZRzgnSsqUIjmMOFcKTu5cI0ry6PtWhEltjIAZgeY=)
2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:f6:0d:dd:54:84:0b:10:e0:14:63:be:8d:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Sep 4 21:01:38 2025 GMT
Not After : Sep 5 21:01:38 2025 GMT
Subject: CN=dcfb8a645a33f9a11e7f0aa361116653b83f14b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:ae:62:67:8a:25:79:18:55:8c:3b:0b:a0:
0a:c7:2e:e6:c7:81:7b:4c:3b:29:eb:5d:64:e1:4b:
28:38:b8:a7:d8:8d:ca:de:18:d3:0e:a3:b7:31:ac:
25:dd:cb:e6:a8:1c:09:e7:02:28:c0:a1:63:32:45:
29:1f:d3:d0:a4:77:cb:e3:5e:9c:08:bd:92:f8:ad:
30:fc:0d:96:5f:a9:3f:19:34:f6:fc:02:48:bb:51:
19:ef:3b:6c:60:f5:e2:b7:2f:b7:c0:6d:47:00:18:
17:71:77:6a:94:2e:ed:14:2f:15:d8:54:fa:8b:cc:
70:8e:24:ea:64:fc:0e:ec:f7:e6:c0:bc:b0:23:76:
64:8e:c3:58:8e:e1:2a:b5:03:2e:b6:f7:3c:80:4b:
e2:5d:e6:09:db:c9:11:dc:91:41:d8:7e:5b:81:00:
ed:db:f0:bd:16:2f:e9:2f:ca:8f:95:54:85:97:cc:
50:95:b4:1e:47:70:3f:cc:cb:ec:4d:72:52:9f:b8:
83:7b:20:a8:4c:e8:18:7a:59:6c:69:33:3d:9a:2a:
65:45:ad:23:f3:86:80:76:f7:1a:6e:e1:8e:fc:ac:
0c:25:04:8c:84:f2:ea:6b:2b:75:21:fa:1e:19:4d:
62:ce:08:bb:a4:7b:01:8e:9a:0f:e1:60:ae:51:54:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:8A:64:5A:33:F9:A1:1E:7F:0A:A3:61:11:66:53:B8:3F:14:B1
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:35:da:17:5f:c9:40:2a:1c:ce:c2:23:d4:6a:e4:91:4e:
58:d0:d8:c7:54:81:28:f6:f3:14:58:30:22:b8:9d:e8:0d:45:
98:0e:65:18:c1:24:c0:ec:ca:1e:77:f9:40:bf:35:86:6e:a9:
cc:08:40:cb:cf:21:c9:3c:91:96:8f:34:08:33:24:e5:74:65:
36:80:9b:e3:d1:51:5b:fd:e3:ad:30:a3:2e:66:43:b8:b0:91:
11:40:ea:36:87:80:f5:24:1f:5b:b6:a1:49:57:56:c1:48:93:
5d:00:3e:0f:e7:56:cb:80:47:72:26:45:19:c3:7a:60:fe:9e:
e9:67:d6:ea:b5:ea:9d:ac:99:49:36:7a:77:3d:e9:ec:35:2e:
7b:6e:28:73:80:c1:87:ec:ed:0d:72:5f:ec:dd:16:9c:3b:26:
8a:12:cb:b0:f0:f6:bc:e4:0d:81:46:9d:d4:55:72:48:88:f9:
ef:ce:0a:49:1b:29:71:fd:c5:e1:5e:d7:9d:03:f3:84:ed:75:
bb:78:2a:6e:e6:b8:71:a5:31:9e:37:33:b5:45:5a:43:b0:0a:
36:cb:94:ac:a9:98:a6:01:94:76:04:58:da:f3:57:93:4a:17:
b0:65:7c:84:9d:8d:93:5e:8a:96:d4:6c:69:89:a1:77:f3:d3:
5e:4e:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client