Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File: B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier: 3fzjzF+kUsIu+Qghd62Kuzm+VdfB67CtnHr9vNIREEY=
Subject key identifier: 2B:04:50:AA:CA:CD:03:86:E8:39:42:25:4D:6A:30:63:27:6E:B4:6E
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 01992367C2CE0B8E5424758C57C172FA1C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number: 0463
Signing time: Sun 07 Sep 2025 09:00:26 +0000
Manifest this update: Sun 07 Sep 2025 09:00:26 +0000
Manifest next update: Mon 08 Sep 2025 09:00:26 +0000
Files and hashes: 1: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: 9+9lLv6Yr0DnRvco0HcLpFSJ+ArXy/ESQ5F0aBBdv/Q=)
2: BEs4jr5ihG6iRqRU5cUSDL5kRog.roa (hash: cWYPPJkN2Kgx8P4ZXPtPBFDG5DzBZcOtlwsZBu+Q2cQ=)
3: aLDoJgH4Nlxid6F2i52QQmHATOU.roa (hash: Upqlw/+QOVJ6e0/cJB4hrSuWN2UHeQkpcuVHfS+Mr/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c2:ce:0b:8e:54:24:75:8c:57:c1:72:fa:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Sep 7 09:00:26 2025 GMT
Not After : Sep 8 09:00:26 2025 GMT
Subject: CN=2b0450aacacd0386e83942254d6a3063276eb46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:ba:0f:28:a9:4d:11:f9:57:c4:ef:07:42:
8f:71:bc:7b:7e:ef:8b:70:f9:2c:71:ba:fe:43:85:
5d:0e:0e:42:35:36:a5:8a:aa:04:e5:26:c4:f7:78:
bb:fc:ec:3b:a5:da:cd:19:77:88:70:ee:a3:4d:73:
16:51:23:b2:cc:6b:f1:13:2d:40:38:e9:41:55:09:
3f:58:b7:2f:03:ea:fe:94:13:79:d7:33:1b:a2:7e:
41:44:67:b8:d7:07:f6:3d:ee:2a:82:fc:2a:6a:dd:
fa:3a:9c:83:3b:a2:ec:cc:fb:a5:dc:4a:15:c1:2a:
6d:c7:e1:65:3c:a3:3e:bb:04:84:a3:93:d8:9f:cf:
d2:09:02:2f:54:ad:0a:eb:20:b3:07:5e:4e:2a:09:
6c:da:83:36:ae:f5:7a:5a:d5:d5:47:66:36:32:65:
f1:43:e1:2f:8c:39:b3:5d:75:da:f6:a2:75:ea:c9:
55:97:1e:1d:9a:fb:28:4c:c8:b1:21:c1:4e:30:66:
56:c8:c4:09:ba:54:5e:47:ba:07:9c:35:39:70:30:
da:39:e2:37:9f:d7:c4:f3:b0:5c:28:12:89:bc:fc:
3a:9a:27:58:be:6a:d0:88:46:a7:96:3a:08:bf:91:
d5:06:52:76:27:ed:09:0f:19:16:fe:5a:85:5e:16:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:50:AA:CA:CD:03:86:E8:39:42:25:4D:6A:30:63:27:6E:B4:6E
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f3:7d:c2:8d:26:c4:b4:0c:00:c8:dd:7a:d7:a6:f2:9d:00:
0e:b4:1f:4e:89:d9:78:68:e6:9e:95:bf:42:b2:95:ae:88:ee:
33:eb:ed:c6:d2:8d:06:79:00:9b:c5:b9:1e:77:43:25:fc:12:
fa:75:17:38:0f:bd:4a:9d:d0:35:80:6b:28:94:c5:f4:ce:25:
69:f1:b3:1c:7e:4c:c6:06:af:f8:49:dc:da:b0:c6:54:a2:d3:
c2:f6:5a:e4:cc:6c:ff:cf:9d:f5:45:f0:aa:73:a7:e5:51:41:
1d:24:88:81:2a:7b:5c:3a:be:88:b9:0b:e6:b3:e0:ac:0c:9e:
fb:97:8c:0b:e7:30:f7:a3:e3:ab:57:e6:c9:64:36:1c:1c:79:
8c:8a:66:ea:e3:d0:0c:1c:cb:f6:9c:03:94:77:b8:33:5b:c7:
d3:f7:59:25:f5:73:85:41:c6:e8:f2:ab:f6:3e:a8:83:2f:f7:
a6:33:4c:28:37:bf:79:b0:91:83:d9:ef:f7:6f:7c:76:55:b6:
39:94:bc:7d:ea:a8:45:b1:6b:fa:4c:6c:f3:4f:b9:3a:b3:19:
ea:dd:6a:f6:3d:78:52:29:c0:07:96:8a:b6:ea:31:6d:ce:fd:
61:41:34:6d:56:82:69:72:f9:ec:3a:2a:ce:90:b2:ee:f6:ca:
44:3e:a4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ8LOC45UJHWMV8Fy+hx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YmNhMDQ4MmQ2MDU1ODdlYjBlMGM4NTFjMzhlODA3NzU1
ZjkwMTcwHhcNMjUwOTA3MDkwMDI2WhcNMjUwOTA4MDkwMDI2WjAzMTEwLwYDVQQD
EygyYjA0NTBhYWNhY2QwMzg2ZTgzOTQyMjU0ZDZhMzA2MzI3NmViNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh26DyipTRH5V8TvB0KPcbx7fu+L
cPkscbr+Q4VdDg5CNTaliqoE5SbE93i7/Ow7pdrNGXeIcO6jTXMWUSOyzGvxEy1A
OOlBVQk/WLcvA+r+lBN51zMbon5BRGe41wf2Pe4qgvwqat36OpyDO6LszPul3EoV
wSptx+FlPKM+uwSEo5PYn8/SCQIvVK0K6yCzB15OKgls2oM2rvV6WtXVR2Y2MmXx
Q+EvjDmzXXXa9qJ16slVlx4dmvsoTMixIcFOMGZWyMQJulReR7oHnDU5cDDaOeI3
n9fE87BcKBKJvPw6midYvmrQiEanljoIv5HVBlJ2J+0JDxkW/lqFXhYK3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsEUKrKzQOG6DlCJU1qMGMnbrRuMB8GA1UdIwQY
MBaAFAe8oEgtYFWH6w4MhRw46Ad1X5AXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUt
ZmM3OWFmMWY2ZmIzLzEvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUtZmM3OWFmMWY2ZmIz
LzEvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPN9wo0m
xLQMAMjdetem8p0ADrQfTonZeGjmnpW/QrKVrojuM+vtxtKNBnkAm8W5HndDJfwS
+nUXOA+9Sp3QNYBrKJTF9M4lafGzHH5Mxgav+Enc2rDGVKLTwvZa5Mxs/8+d9UXw
qnOn5VFBHSSIgSp7XDq+iLkL5rPgrAye+5eMC+cw96Pjq1fmyWQ2HBx5jIpm6uPQ
DBzL9pwDlHe4M1vH0/dZJfVzhUHG6PKr9j6ogy/3pjNMKDe/ebCRg9nv9298dlW2
OZS8feqoRbFr+kxs80+5OrMZ6t1q9j14UinAB5aKtuoxbc79YUE0bVaCaXL57Doq
zpCy7vbKRD6kVw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:35 2025 by rpki-client