Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: vjbPQUZIg3VX1qWu99dwldhGkMTmXxW98VFZHFHrYio=
Subject key identifier: DF:2E:25:39:34:37:BD:6F:20:01:E8:37:63:09:AD:4D:AB:30:86:68
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0199500A6946EB25FA06C88CD9D2BC4A5BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0D30
Signing time: Tue 16 Sep 2025 01:01:23 +0000
Manifest this update: Tue 16 Sep 2025 01:01:23 +0000
Manifest next update: Wed 17 Sep 2025 01:01:23 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: WB38BsqDFZKtZXX5nZaiv2b/UB1WRxTl7qxc5dP4xx4=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0a:69:46:eb:25:fa:06:c8:8c:d9:d2:bc:4a:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Sep 16 01:01:23 2025 GMT
Not After : Sep 17 01:01:23 2025 GMT
Subject: CN=df2e25393437bd6f2001e8376309ad4dab308668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:93:33:21:f6:e6:35:d1:23:c7:80:9e:6a:
75:d2:46:90:cd:0e:3a:9a:d7:3b:ec:71:17:4f:7e:
e8:79:64:f6:a8:0c:26:ce:9b:c2:16:dc:51:64:be:
54:77:c4:66:41:1b:48:4e:4c:ea:96:4f:45:07:ec:
ec:99:f9:d1:65:a3:36:11:92:2e:83:9a:ad:c1:15:
2a:3e:d9:dc:55:0c:a8:2a:2a:6c:23:00:f3:5f:d6:
c0:ff:89:69:f8:b0:ac:e9:05:d0:db:f3:2c:82:a6:
d8:45:c7:bc:72:37:63:93:a7:ac:f7:74:02:eb:49:
f8:23:13:dc:79:f8:fe:42:8a:22:d6:29:a8:3b:a6:
89:6c:16:f8:69:d0:90:73:ff:a4:c0:0c:42:47:c8:
1c:3c:18:14:1b:bc:c0:f7:62:84:10:51:77:18:6a:
f1:14:8c:24:bf:6a:1b:a7:c2:0c:03:f7:e3:12:4a:
ac:a6:b9:98:9d:fb:67:9e:14:a6:41:d4:df:1b:bf:
f7:da:56:07:27:0a:21:d1:8b:c3:6e:2d:f9:3a:ec:
28:ac:6b:a7:2a:8a:1b:2b:41:0c:70:ea:9c:ba:db:
63:7e:33:9f:ed:dc:95:4a:0a:4b:10:1b:43:10:ff:
f6:de:33:ac:b5:5b:e0:a5:b8:50:3b:b6:29:b7:ac:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:25:39:34:37:BD:6F:20:01:E8:37:63:09:AD:4D:AB:30:86:68
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:84:cf:98:bc:c4:ef:08:63:be:4f:f7:f6:ae:6f:80:f0:
25:17:a0:b1:5f:3a:6c:7c:62:eb:1f:43:13:e1:69:ab:cf:60:
e5:0e:ee:a4:98:4b:c5:07:c9:b9:03:b8:5d:a6:36:b3:75:55:
c5:22:e0:4b:56:9b:c3:0a:5c:9a:23:c6:e6:8e:ac:ff:4f:3d:
29:7f:1f:f4:2c:69:35:53:b0:d9:9c:e2:8d:d0:fe:7b:e9:94:
c9:7f:fc:15:44:85:67:46:80:22:68:44:26:56:0a:ca:ed:31:
5c:1c:ce:a7:e0:67:8e:23:d5:04:72:fa:d8:16:dd:22:e5:35:
2e:0a:5c:89:3a:b4:f6:fe:94:07:7b:fe:c6:8b:6a:28:0a:76:
ab:c1:1e:c7:bf:10:29:71:43:43:bd:58:5c:25:4d:e5:98:cf:
44:7b:30:b4:82:71:ff:81:da:72:b5:32:12:0e:3a:2f:44:79:
01:26:11:fb:2c:d1:9f:7e:8a:26:5d:29:f6:81:d8:40:35:d9:
bc:9f:c6:a4:56:2f:40:5d:bc:42:76:c0:f3:ba:62:43:cf:4b:
dd:0c:52:3d:74:73:d7:b3:e1:3c:f7:06:f7:00:2f:8a:e3:83:
20:ad:d0:d7:9f:c0:6d:36:ed:a2:d9:9e:f6:35:15:29:d0:10:
b9:16:12:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQCmlG6yX6BsiM2dK8SlurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjUwOTE2MDEwMTIzWhcNMjUwOTE3MDEwMTIzWjAzMTEwLwYDVQQD
EyhkZjJlMjUzOTM0MzdiZDZmMjAwMWU4Mzc2MzA5YWQ0ZGFiMzA4NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+TMyH25jXRI8eAnmp10kaQzQ46
mtc77HEXT37oeWT2qAwmzpvCFtxRZL5Ud8RmQRtITkzqlk9FB+zsmfnRZaM2EZIu
g5qtwRUqPtncVQyoKipsIwDzX9bA/4lp+LCs6QXQ2/MsgqbYRce8cjdjk6es93QC
60n4IxPcefj+Qooi1imoO6aJbBb4adCQc/+kwAxCR8gcPBgUG7zA92KEEFF3GGrx
FIwkv2obp8IMA/fjEkqsprmYnftnnhSmQdTfG7/32lYHJwoh0YvDbi35OuworGun
KoobK0EMcOqcuttjfjOf7dyVSgpLEBtDEP/23jOstVvgpbhQO7Ypt6z6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8uJTk0N71vIAHoN2MJrU2rMIZoMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC6Ez5i8
xO8IY75P9/aub4DwJRegsV86bHxi6x9DE+Fpq89g5Q7upJhLxQfJuQO4XaY2s3VV
xSLgS1abwwpcmiPG5o6s/089KX8f9CxpNVOw2ZzijdD+e+mUyX/8FUSFZ0aAImhE
JlYKyu0xXBzOp+BnjiPVBHL62BbdIuU1LgpciTq09v6UB3v+xotqKAp2q8Eex78Q
KXFDQ71YXCVN5ZjPRHswtIJx/4HacrUyEg46L0R5ASYR+yzRn36KJl0p9oHYQDXZ
vJ/GpFYvQF28QnbA87piQ89L3QxSPXRz17PhPPcG9wAviuODIK3Q15/AbTbtotme
9jUVKdAQuRYSvQ==
-----END CERTIFICATE-----
Generated at Tue Sep 16 08:06:20 2025 by rpki-client