Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: Ry0oz8g8NXxtpDlHAhWIbPJ4xkRVvrgOi7hZ75cruIY=
Subject key identifier: 66:FE:CF:1E:4D:D6:F3:C9:6A:19:78:86:CB:15:47:6B:0C:CD:E3:55
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019A153BE14B2FC30AFBFCD798603872B4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0D73
Signing time: Fri 24 Oct 2025 08:00:37 +0000
Manifest this update: Fri 24 Oct 2025 08:00:37 +0000
Manifest next update: Sat 25 Oct 2025 08:00:37 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: TtCNs3S9RN2AB60MP1VbiqFN0VjGGrXcqx4vrRmRu2k=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3b:e1:4b:2f:c3:0a:fb:fc:d7:98:60:38:72:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Oct 24 08:00:37 2025 GMT
Not After : Oct 25 08:00:37 2025 GMT
Subject: CN=66fecf1e4dd6f3c96a197886cb15476b0ccde355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:bc:95:4d:c2:50:0a:c7:24:83:79:ba:27:
7d:16:ba:eb:a5:64:a4:de:18:94:e0:ca:2f:03:95:
80:55:7a:b2:a1:cf:42:9f:bd:94:4a:21:b2:11:16:
2c:f4:34:a2:13:21:ac:b8:a9:08:18:d5:ca:ea:a9:
fa:a3:fb:71:59:aa:4e:93:b3:f4:3e:c6:21:c3:ea:
e9:cc:6b:65:08:84:e1:79:50:56:37:63:70:8d:37:
ef:1b:aa:f3:c3:6b:74:28:a1:8b:38:df:f2:b9:1d:
f2:d5:91:de:cf:41:46:2e:ac:f3:48:12:f4:71:ad:
74:a5:8e:4e:3e:6d:69:c5:dd:69:3f:67:4e:e6:71:
c2:ca:00:68:d4:2b:2b:2f:dd:02:48:09:8f:52:a8:
c5:ba:a2:a6:2c:02:eb:84:e3:66:de:0d:74:26:db:
41:cf:65:e6:c7:de:0d:28:a6:33:fe:9f:99:1c:69:
4a:d1:40:e3:8a:fd:f2:ed:a2:48:74:69:97:c7:1b:
03:49:20:50:63:dd:4b:ae:ef:d0:cc:33:f3:06:ee:
c3:51:74:76:7c:96:dc:99:c2:ac:36:f0:83:b1:1d:
6c:a8:4e:0a:d5:ae:15:88:a2:1d:00:b4:b6:81:4d:
49:22:67:c0:8a:cd:6a:ce:78:a1:c3:78:7b:01:e7:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:CF:1E:4D:D6:F3:C9:6A:19:78:86:CB:15:47:6B:0C:CD:E3:55
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:a7:71:c6:7e:bf:12:eb:13:1b:78:04:26:63:55:e8:bb:
d8:48:c5:42:d7:2c:4c:9b:f6:c5:1f:67:42:7c:7c:87:60:bf:
51:43:80:41:90:c2:db:f0:da:6e:04:af:9e:d7:e0:18:fb:14:
1c:78:3c:e4:a8:b4:80:f7:ce:51:04:92:f9:c2:63:6b:97:24:
c0:02:3c:05:34:6d:78:86:b8:85:bf:b4:dc:2a:c2:ab:54:2b:
8b:eb:d0:05:d4:3e:dd:35:a9:16:51:f9:0b:ed:e9:42:e5:e2:
98:36:de:a7:c0:da:88:5e:3e:58:49:4f:f0:75:7a:0e:6e:54:
70:47:aa:ad:3a:d2:41:3a:ea:6f:08:de:3f:41:3e:7b:3e:7c:
10:c8:11:10:67:8b:6c:3f:31:81:c3:e1:1a:c1:e5:c7:74:75:
da:fa:d4:f1:72:05:38:4c:10:6f:af:85:a3:5e:98:c6:33:ff:
5e:45:2d:5e:c2:b7:3e:2d:c7:c9:0c:d3:07:36:01:86:07:47:
f7:df:f2:c6:ac:6c:d1:42:b4:30:04:a9:3c:ce:f9:b0:63:5d:
11:eb:a8:fd:c4:33:43:62:fe:d4:7c:8f:aa:9b:f8:7d:e8:1f:
82:05:37:f5:2d:fe:c4:16:58:4b:ab:2a:c4:4f:48:ff:80:e0:
00:b2:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:11:35 2025 by rpki-client