Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: 3p7486oLe+q2dn/xHiyj1CHnby6+D85RwD3l8TPmiDQ=
Subject key identifier: FC:BB:9B:15:A8:CC:14:C5:6C:30:ED:40:F1:B6:5A:31:41:23:53:6B
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01992330E6577B444CC7989BAF7ED19D9AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:31 +0000
Manifest this update: Sun 07 Sep 2025 08:00:31 +0000
Manifest next update: Mon 08 Sep 2025 08:00:31 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: K+zCST/RIL1QmaIb6Fp8B0/szx9MSDDxsX6P9uRylaM=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e6:57:7b:44:4c:c7:98:9b:af:7e:d1:9d:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Sep 7 08:00:31 2025 GMT
Not After : Sep 8 08:00:31 2025 GMT
Subject: CN=fcbb9b15a8cc14c56c30ed40f1b65a314123536b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:4a:24:d8:a1:62:dd:7c:f5:c0:78:6e:80:
5e:43:b9:dc:6b:47:5d:00:28:44:c2:2a:fc:40:e0:
28:e5:d8:13:d1:e1:40:c7:fb:91:22:ff:61:01:00:
fe:ad:94:64:c9:17:06:23:65:f9:28:82:75:b8:d7:
32:7a:24:98:17:6d:ba:51:c3:2b:bd:9c:82:62:fe:
62:8a:fe:0c:41:8b:4b:86:f5:01:40:4a:a1:f0:13:
a4:89:19:d7:92:0e:8e:90:74:09:71:51:6e:e5:48:
c6:cf:5d:b6:d0:0b:14:24:f4:a9:ec:00:73:0c:ad:
1f:c4:87:e0:b1:d7:4a:9c:8c:87:2e:53:70:0a:30:
30:72:7a:e3:6f:ed:10:c9:47:c1:25:6e:ff:27:6b:
61:a5:34:45:33:13:d0:19:99:42:f5:1a:f8:cb:44:
cc:d6:28:17:aa:02:de:a0:a2:db:49:8b:cd:ea:cf:
03:16:e5:28:b2:62:79:c9:3d:85:08:21:96:9b:c4:
cf:e9:68:cc:93:86:13:33:bb:04:b2:dc:af:c0:55:
b3:e5:71:ac:0a:95:50:03:53:a7:82:a0:2e:ed:b0:
a1:d1:c4:bc:54:9e:ab:7d:e9:d3:e0:0a:9a:6e:bb:
37:49:23:1c:f8:77:8a:8b:8a:c4:9b:ec:4b:a2:57:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:9B:15:A8:CC:14:C5:6C:30:ED:40:F1:B6:5A:31:41:23:53:6B
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:3f:ac:52:ad:a3:83:e8:72:fd:c4:e7:6f:5f:12:fc:22:
0a:4d:f1:cf:91:e8:e1:b5:be:9f:9a:35:2b:6c:81:d4:39:43:
b1:93:41:0c:53:57:fc:07:52:bb:fb:c7:c1:bb:44:b4:cc:35:
48:e1:a4:a8:e1:f0:ad:26:e3:c4:d5:c2:d0:ec:8b:96:74:a2:
37:f6:14:82:54:6a:06:8b:a1:5e:40:e0:b6:78:05:5b:5a:11:
c4:f7:98:de:75:42:4a:93:b8:c3:c6:a3:24:cf:79:39:a3:7b:
e9:4f:63:cc:7c:b0:41:9d:8f:8c:0d:79:84:5b:7b:5f:4a:59:
c5:f5:9f:87:60:68:6e:b0:fd:14:3b:c5:21:e5:96:3f:a9:8c:
19:93:11:98:63:57:5c:79:42:7c:30:de:de:a6:d9:3b:f8:37:
ca:28:1b:de:57:c7:f5:b9:03:5d:e8:a2:c6:24:f1:80:74:4d:
58:6b:42:e3:11:7a:75:c4:28:af:58:51:80:9b:29:b9:9d:5f:
19:16:ff:d2:f1:e5:dd:d6:04:c2:cd:17:c4:97:7c:6f:93:29:
29:bd:af:2b:c3:c0:42:f9:70:c5:c6:27:cb:0e:cb:c1:c9:68:
87:0e:a0:6c:25:67:1d:6b:63:e4:8b:b9:18:0c:23:75:cb:17:
21:5a:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:44 2025 by rpki-client