Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: DL4JPj8kzVHZ78GYiTO1pkkJuGXylQWdHET+ZBnJb8M=
Subject key identifier: C7:FA:2D:40:3C:32:4C:20:7D:7E:24:2F:0B:1A:0F:87:5E:0D:F6:4A
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019A54C0B4240B515EAF9EF977A1D9C13B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0DB7
Signing time: Wed 05 Nov 2025 16:01:46 +0000
Manifest this update: Wed 05 Nov 2025 16:01:46 +0000
Manifest next update: Thu 06 Nov 2025 16:01:46 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: 0uUxppA6MUqKL/i9VcGD8KStFgyjKQXW53EDy/MS+bM=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:b4:24:0b:51:5e:af:9e:f9:77:a1:d9:c1:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Nov 5 16:01:46 2025 GMT
Not After : Nov 6 16:01:46 2025 GMT
Subject: CN=c7fa2d403c324c207d7e242f0b1a0f875e0df64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:f9:c8:2e:ce:37:01:66:5a:82:70:24:5f:
ac:a0:8e:4c:d5:e7:55:2f:d2:60:6d:88:5c:52:d2:
90:12:7a:53:5b:67:07:61:b9:72:cf:f4:34:a5:e8:
e0:de:06:23:44:e6:b6:2a:90:75:cf:f9:5e:c7:de:
18:a2:08:db:e4:5c:fa:5a:6f:2c:6f:11:27:ed:77:
99:b5:61:55:4d:8b:db:e6:81:80:38:88:b3:17:0c:
ab:e5:e2:24:f4:3e:d2:00:63:b2:cb:92:9a:d4:62:
28:8c:39:cf:9d:c3:a5:45:b5:b5:12:11:c0:23:94:
58:91:4d:70:dd:cb:5d:f5:8d:46:c4:81:3e:39:46:
9e:7a:1c:f3:03:da:79:c3:ce:71:f2:28:01:98:ef:
fb:b0:d5:3d:37:44:03:e1:97:02:1f:9e:8a:29:de:
1b:95:08:bd:36:00:78:c5:89:b2:52:89:26:9e:69:
53:fa:4f:97:07:d0:06:52:00:2b:10:dd:54:ad:3b:
0b:ba:39:1c:a1:b6:6d:e2:fa:9f:ee:a0:6c:32:94:
1d:8a:52:ad:ab:0f:e3:01:ef:a0:ed:1a:24:b4:47:
bd:88:50:8a:82:01:1f:77:a1:96:2b:35:35:ed:13:
df:56:eb:e1:72:01:30:ba:87:b3:f6:ca:f7:15:b3:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:2D:40:3C:32:4C:20:7D:7E:24:2F:0B:1A:0F:87:5E:0D:F6:4A
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:73:7a:78:84:a4:9c:5b:da:d7:51:e8:65:3c:45:72:57:
15:b9:09:0f:94:e7:e7:2e:5f:e4:4f:d7:35:2b:d5:94:cb:51:
c9:a4:60:94:d0:4c:23:4f:fd:74:5d:9d:40:aa:7e:74:ac:ad:
45:95:e2:f4:7b:91:7d:8a:b3:06:6c:cc:7b:cb:fd:a0:06:60:
11:55:94:d9:79:1d:b1:f7:0c:29:b4:8a:1a:e5:ea:75:5f:a2:
86:d3:bc:06:67:b1:44:b0:ce:40:bb:7d:d7:51:f7:aa:ad:6d:
d8:5a:c6:b5:d0:59:e2:f2:50:d9:ec:d0:a2:67:9c:43:4c:bd:
7d:76:4e:df:9e:4e:1b:83:6d:34:ce:f9:93:fd:0a:d9:4f:39:
de:20:58:55:28:7d:86:02:9b:78:2f:65:15:ab:f9:ee:f6:4c:
68:07:2b:d1:3d:6a:d0:00:91:35:c9:c1:1a:0f:08:bc:03:f4:
47:90:1d:23:f9:c1:37:3a:ca:ea:27:85:e8:6f:e6:e9:cc:8b:
df:41:44:a0:5d:3a:7c:b8:2c:25:90:e7:9c:a3:71:91:c4:cf:
94:95:4d:9f:4c:6c:a3:4c:c2:41:63:05:a3:0f:9b:5f:a0:68:
3d:2c:ca:8d:2b:22:36:60:e1:ba:29:1f:07:aa:95:8c:97:bd:
b7:8a:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:29 2025 by rpki-client