Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File: B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier: M7lj90c21fCGlqaCahFipUbH7TVwIuTYG5n+pcQQCWo=
Subject key identifier: 32:17:54:F4:9E:AE:1B:62:0A:FC:07:BA:87:AC:8C:C9:C3:D5:DB:64
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer: /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial: 01994F2E0DF8DBDB8913AD68A612C48E123C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number: 0CEE
Signing time: Mon 15 Sep 2025 21:00:42 +0000
Manifest this update: Mon 15 Sep 2025 21:00:42 +0000
Manifest next update: Tue 16 Sep 2025 21:00:42 +0000
Files and hashes: 1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: 4lCZUdLiwzRTTpM56o69hHAee4mypRA0eVZ7cppTWfs=)
2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2e:0d:f8:db:db:89:13:ad:68:a6:12:c4:8e:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
Validity
Not Before: Sep 15 21:00:42 2025 GMT
Not After : Sep 16 21:00:42 2025 GMT
Subject: CN=321754f49eae1b620afc07ba87ac8cc9c3d5db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:8d:5a:70:a3:9f:39:83:8d:fd:e6:4f:32:
51:e2:5b:a0:08:1a:ea:50:ae:52:4b:24:3b:d7:7b:
a0:10:ff:2f:a1:24:1b:8f:78:ad:06:b4:9b:24:46:
56:ff:db:52:ff:42:59:f2:a6:81:d5:1b:fc:57:c7:
ba:9e:11:2d:6f:47:ac:a9:34:c3:71:31:8b:3e:27:
62:cf:51:e1:92:64:ad:ce:ad:85:53:c6:6b:60:1d:
c3:f6:e7:81:7a:53:9b:ac:00:20:04:6d:aa:99:57:
5d:8f:6e:4e:b5:d0:d5:a4:72:02:ca:cc:1e:32:c4:
ac:28:c7:bb:e8:88:fc:d6:0b:da:b5:fd:58:30:fc:
86:2c:4e:a3:1b:99:cb:e3:10:c9:3e:dd:e7:30:1d:
8d:67:53:6b:2a:5f:c9:9f:8a:03:ad:fd:6a:76:52:
b8:96:78:95:5c:4d:07:6f:73:3c:46:d5:57:32:ab:
38:72:a3:63:55:23:eb:d3:b8:6d:1d:85:34:ed:8e:
1c:9a:d4:ee:f3:c1:9d:aa:a5:29:31:b7:5b:58:e9:
30:a1:28:d3:dd:a1:db:88:66:c4:54:e8:44:bd:da:
df:30:cc:96:31:7b:2b:e9:26:a5:43:86:27:c5:70:
3b:1a:df:7e:ec:e8:48:2a:d9:06:bd:6e:c9:fe:f3:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:54:F4:9E:AE:1B:62:0A:FC:07:BA:87:AC:8C:C9:C3:D5:DB:64
X509v3 Authority Key Identifier:
keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:75:01:e3:99:3e:95:65:66:25:ef:b9:67:d1:a4:5a:29:
a7:f8:26:9b:4c:ea:c2:0e:44:4e:05:68:a3:56:4b:61:8a:c8:
91:fb:46:3a:ae:d0:53:3c:e7:21:c5:ef:c8:ee:27:9e:92:20:
cd:2c:1b:79:b2:05:70:5f:37:22:70:54:c0:11:68:a0:78:ba:
44:d5:7d:ea:80:ba:49:07:0f:27:1d:f5:75:30:97:70:77:e4:
0d:12:39:8e:3f:77:e7:69:74:cc:03:f5:a9:9b:4d:d7:c9:0d:
dd:ef:1e:4a:65:b6:23:bf:f6:1b:e7:95:9e:67:3c:1c:2d:ad:
3f:90:87:f3:35:cd:51:ab:23:d4:f9:d1:8a:18:5e:c5:55:a3:
e3:0a:45:3a:6c:b2:d3:53:9f:10:04:75:e1:95:90:12:23:72:
fa:5b:45:84:aa:de:2c:bb:db:3d:d6:d6:88:f5:3e:c1:26:ec:
19:9e:86:1f:b0:b2:a7:66:62:39:76:f9:cc:f0:50:75:ac:19:
67:e0:43:a8:81:9e:c0:13:36:a7:ec:3d:3a:38:57:60:85:37:
8a:c8:e7:9a:33:7b:8f:1f:08:df:07:1e:bc:73:e6:74:51:91:
2b:df:80:33:71:c6:5f:95:59:33:6f:f9:3e:ec:66:50:c2:15:
31:9b:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:49:20 2025 by rpki-client