Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: 10J9vqHMC+319HClPFvM7BD3OW7G5IIAzZe85n38T7w=
Subject key identifier: B9:D7:7A:74:23:E8:12:A6:34:67:05:D7:20:88:4F:76:6D:37:B9:74
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 01993802D0BEDCB084C173CB6BAF0FC60B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 07D7
Signing time: Thu 11 Sep 2025 09:02:12 +0000
Manifest this update: Thu 11 Sep 2025 09:02:12 +0000
Manifest next update: Fri 12 Sep 2025 09:02:12 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: gXUy/v1aR5s8L8TAZqZS53EkGARbpNjd7zhEXT8U8bs=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 09:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:d0:be:dc:b0:84:c1:73:cb:6b:af:0f:c6:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Sep 11 09:02:12 2025 GMT
Not After : Sep 12 09:02:12 2025 GMT
Subject: CN=b9d77a7423e812a6346705d720884f766d37b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:68:d5:28:2b:0e:25:92:94:33:38:a5:f7:
6c:90:bf:45:d0:a0:c8:7f:d8:ce:bf:e6:9d:85:ed:
ba:e6:36:de:be:85:be:0f:bc:c2:7f:e2:61:66:80:
c1:97:b6:72:d2:c0:b4:f9:83:80:47:d5:ec:16:28:
b7:75:5a:96:38:06:81:89:1a:d9:40:1a:2a:67:d5:
99:25:fd:a1:d0:44:00:1a:c4:9e:48:40:09:c4:23:
42:bc:17:dd:a7:f0:36:5c:32:9c:44:9d:d7:2f:99:
c6:69:6c:93:8f:1e:74:f8:a6:59:23:18:2e:79:c4:
9b:53:3a:6f:79:7a:47:ae:16:b3:a2:d4:e6:7d:65:
66:ce:64:a4:2d:7b:4e:e1:70:64:12:df:50:5d:ce:
be:2a:cc:5f:91:1d:40:17:05:35:48:ff:80:92:18:
a1:86:a3:b7:df:d5:8a:e1:9c:c2:65:bb:e8:d7:3a:
73:c6:81:88:45:d6:82:90:f1:82:f1:13:9c:4a:d5:
34:dd:f0:4b:1f:1a:4c:e5:8a:d4:ad:4c:15:91:02:
9f:55:13:67:fd:be:3d:51:32:4e:65:e7:3c:4d:1b:
fa:fc:7c:42:7d:9a:bc:de:9f:92:6b:4c:95:18:58:
72:be:65:e5:54:00:9d:10:8e:83:77:7b:78:e2:52:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:7A:74:23:E8:12:A6:34:67:05:D7:20:88:4F:76:6D:37:B9:74
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:86:db:ba:9b:ee:ba:3a:4d:45:d4:db:e0:1c:72:f1:8a:d7:
a6:af:30:91:9a:e2:75:3b:7f:a9:02:3c:5c:46:a1:ee:91:24:
a5:df:c0:87:38:be:4f:2b:f4:32:4f:d3:f5:e1:51:9c:75:ef:
25:89:11:93:97:fd:f0:f4:53:f2:46:f1:3a:b5:d3:7b:fe:5e:
e3:67:08:76:9b:86:b2:c0:a3:20:86:26:24:59:f6:0c:3b:57:
a1:45:f6:09:d0:23:99:24:32:58:e0:83:df:90:d3:cf:00:a2:
79:8a:77:34:d9:17:5b:bc:6d:ab:12:91:18:90:8a:68:af:15:
96:47:d0:85:8f:9c:9e:78:89:3d:0d:36:61:02:bb:d4:c1:e4:
4f:97:ee:7f:49:e1:73:96:cd:20:1a:ad:f6:04:ab:32:bf:fb:
74:85:2e:5a:ff:cd:13:9c:a0:df:a1:cc:45:00:cc:67:97:72:
40:b4:d3:43:b9:64:23:f8:5e:3a:55:f6:aa:35:47:99:c9:a2:
61:d1:9f:7f:c4:77:3f:f7:86:24:4c:70:da:f4:b8:59:68:6c:
4f:ca:da:75:f2:60:00:49:f0:f2:24:ff:6d:ba:b3:59:9e:21:
30:f8:11:c9:fc:1e:95:11:f3:09:71:92:bf:7f:ba:6f:87:45:
2d:8f:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:00:11 2025 by rpki-client