Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: R36EY96PEyI9CRxQhG1fkA2Y+SfBqCQm8fIxGtHv428=
Subject key identifier: 6A:D0:55:9D:C8:1A:DD:B1:B6:AB:F5:36:8D:45:6D:8E:7E:88:46:B0
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019938DF3300F51ACEE73061E187E93FC247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 13:02:55 +0000
Manifest this update: Thu 11 Sep 2025 13:02:55 +0000
Manifest next update: Fri 12 Sep 2025 13:02:55 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: BoptFNQN1rfNVJ0ojr/yq2v/4R9Fs5dDjgy9mFB+66Y=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:33:00:f5:1a:ce:e7:30:61:e1:87:e9:3f:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Sep 11 13:02:55 2025 GMT
Not After : Sep 12 13:02:55 2025 GMT
Subject: CN=6ad0559dc81addb1b6abf5368d456d8e7e8846b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:64:a4:ab:d9:7d:ec:91:60:50:9c:45:30:
e0:40:dd:42:93:43:1c:3b:bd:05:26:11:e2:64:f9:
b2:7e:90:e8:bf:59:0d:fb:8d:c2:0f:c1:77:e8:e2:
7a:84:31:a0:15:c9:81:b0:87:60:29:a8:7f:cc:33:
bc:23:be:07:d6:c1:00:a6:d0:22:78:c9:81:d3:25:
d2:ea:3f:6e:34:8b:a2:ad:b9:2d:76:dc:1f:85:76:
8e:1d:94:7b:5c:2a:cf:79:53:b4:86:53:85:0d:96:
73:52:c3:51:f7:66:79:05:ee:62:3f:6a:3d:aa:9e:
69:d9:6e:97:82:a1:c9:41:e4:d2:e6:59:5b:12:c6:
5b:59:af:fe:13:4c:76:fa:1f:7c:c7:81:e4:ee:86:
04:fd:e7:70:1b:10:60:2f:71:d9:0a:c9:25:a6:e1:
98:4c:bb:55:86:72:48:84:8f:f3:2f:52:23:70:13:
57:a4:3d:95:b8:a4:4d:1e:ef:80:e3:78:35:5d:c3:
e8:e7:21:df:72:65:92:57:8b:d7:d7:ad:b9:8e:fa:
f7:4c:52:ac:f0:e8:ee:8f:95:c5:86:3d:99:ce:96:
9b:c2:e5:fb:70:ad:96:e6:2a:0a:96:c5:d8:88:3c:
c6:ae:c4:bc:20:a0:33:a3:ba:b0:82:d6:58:de:a3:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:55:9D:C8:1A:DD:B1:B6:AB:F5:36:8D:45:6D:8E:7E:88:46:B0
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:20:d5:63:da:bd:6a:e3:82:7a:cc:e2:ea:93:26:2b:7f:
ce:61:61:9a:89:a7:bf:39:e1:d7:57:eb:3d:e9:62:ae:02:15:
e4:2c:8b:0f:0c:14:13:2e:5c:cd:c4:3e:12:5e:ac:9e:30:bc:
47:d6:6d:82:f1:42:22:a1:cc:57:6e:78:f4:f3:c3:fe:09:d3:
04:2d:c8:65:2e:43:bb:24:7d:f8:ce:36:02:14:ce:6d:48:92:
a2:df:22:e3:c6:6a:06:ad:21:93:a5:47:18:70:75:3d:b2:e1:
cf:22:91:32:23:e9:7c:94:04:a9:f6:39:cd:c7:a1:eb:53:7a:
75:b9:37:d0:42:87:1a:a3:d1:8f:4a:c2:a3:de:8b:a8:32:e0:
a0:28:cd:f2:b8:df:7a:54:f8:84:85:58:f3:36:3e:97:32:4b:
05:e3:f2:4f:06:1c:1b:f9:c7:5e:6d:cf:9e:07:02:79:9b:49:
1c:d9:a8:47:51:89:f3:36:80:5d:fc:0e:ac:56:e3:11:3d:7c:
de:85:c1:4b:5f:b8:fa:68:dc:24:af:e8:17:84:38:32:14:af:
c3:c5:08:5c:19:0c:b7:53:90:1b:b3:87:07:b3:3d:77:96:0d:
54:7d:f4:f3:61:c6:7d:9f:72:19:4a:38:2b:f1:39:bf:26:12:
3f:94:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:03:57 2025 by rpki-client