Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: IuC/fOswGDSFONup2Jto++zjkMdsmuNu6MkRPWmKOmk=
Subject key identifier: 60:05:52:83:8D:47:41:DD:37:74:83:19:6F:27:7E:29:8D:EA:F7:9A
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 019923A0B409F6BB296E00F9DA04018CBF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:38 +0000
Manifest this update: Sun 07 Sep 2025 10:02:38 +0000
Manifest next update: Mon 08 Sep 2025 10:02:38 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: zwnngXH4DnGtBkpNwRifPnJbB/t6TBs6bh0Yyt+kolE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b4:09:f6:bb:29:6e:00:f9:da:04:01:8c:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Sep 7 10:02:38 2025 GMT
Not After : Sep 8 10:02:38 2025 GMT
Subject: CN=600552838d4741dd377483196f277e298deaf79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:8d:5c:f8:82:14:b0:f4:06:bd:f2:99:ee:
e4:21:b2:fd:ef:07:27:25:b3:89:f1:ae:50:74:dc:
96:4d:61:0c:60:94:44:f5:76:72:3d:74:91:36:2f:
5e:34:76:ec:a9:17:6f:aa:6b:6f:d4:9e:27:a6:de:
9f:b8:8e:ac:d3:e6:ed:2b:75:8a:3a:b7:61:0b:7e:
7c:a5:1c:aa:83:71:85:e0:4b:4e:4e:ed:da:d1:e0:
74:c7:fe:df:c5:f6:37:9d:55:53:6d:6a:b8:9c:4c:
d9:4a:1a:aa:b6:d5:d7:9a:52:5a:76:72:f7:39:94:
2e:f4:18:be:73:e6:82:aa:2f:b3:3c:dd:be:ec:22:
b6:19:e3:7d:ed:57:ea:18:58:06:d0:b6:9c:aa:d1:
b0:26:ba:74:b0:c7:82:30:0a:1f:b4:20:a8:6b:b0:
3b:57:e5:58:15:5b:e0:ce:65:44:3b:ef:4f:20:fa:
d1:be:ed:ce:76:44:ce:2e:e1:1f:83:6f:13:2f:91:
74:87:ee:b3:ef:6a:5e:02:08:19:b7:a0:04:04:cf:
80:cd:f1:1b:bb:21:ef:c7:6f:78:64:d5:ab:aa:16:
23:00:f4:9d:47:da:c8:79:84:59:71:4b:64:bc:81:
13:e4:f5:42:bf:f9:dc:f2:97:9c:9f:db:b3:50:e1:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:52:83:8D:47:41:DD:37:74:83:19:6F:27:7E:29:8D:EA:F7:9A
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ce:f3:ef:49:e7:bd:3d:67:fb:ab:a0:16:2e:61:64:0d:94:
12:3b:68:a1:fa:41:64:83:da:12:87:32:89:b4:34:d3:bf:a9:
d9:59:44:c6:94:c0:35:80:0e:d4:10:38:45:eb:e2:b8:f7:9b:
57:04:97:3b:2a:ed:33:d8:1c:74:dc:9a:0d:26:24:0c:99:ae:
01:ad:29:e8:f2:06:9e:5d:3c:5e:87:13:da:a1:9f:62:99:a0:
a1:0c:07:be:cd:e4:60:9e:30:bc:a2:f0:0d:a3:b3:2b:12:2d:
fb:80:c5:84:c6:5f:db:90:a0:b1:59:b9:92:83:86:66:90:73:
96:d9:f7:b7:f7:2c:e4:8e:98:73:73:0e:0b:19:94:e5:54:c1:
76:da:13:7c:09:ec:f4:b5:5a:20:15:d5:e9:8d:e1:4f:9a:76:
7c:e9:a5:79:2a:d9:40:b8:8f:ac:49:84:f2:89:b5:64:86:d0:
1f:1d:d7:af:c9:f7:e3:43:ec:81:fa:1e:bb:2b:8f:e4:25:a8:
6a:45:59:30:0b:96:2a:49:e4:6f:af:09:00:8e:96:3c:2a:81:
99:00:b7:71:27:64:84:66:c5:fd:37:15:81:a0:97:12:bc:02:
f7:f3:de:7a:94:e4:10:34:81:37:49:7b:c1:56:db:3e:d0:14:
35:9d:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:37 2025 by rpki-client