Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File: B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier: sgPxI18RlD4w04r0KWw0l4wsc1S6shbfL9jYXEbQRcQ=
Subject key identifier: E4:74:55:2B:3E:66:F4:2C:09:76:7D:66:A3:CA:04:48:8F:86:AE:07
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 0199326D57E5AF41E4DD89F341B7035CA978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number: 1062
Signing time: Wed 10 Sep 2025 07:00:50 +0000
Manifest this update: Wed 10 Sep 2025 07:00:50 +0000
Manifest next update: Thu 11 Sep 2025 07:00:50 +0000
Files and hashes: 1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: OB/UHPmB42LS725VJJGC7fu21j87otur2Yb1iPRqpa0=)
2: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:57:e5:af:41:e4:dd:89:f3:41:b7:03:5c:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Sep 10 07:00:50 2025 GMT
Not After : Sep 11 07:00:50 2025 GMT
Subject: CN=e474552b3e66f42c09767d66a3ca04488f86ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:1e:26:6a:2f:8a:b3:e1:c7:28:74:2f:b3:
c9:75:a5:1d:f6:1a:20:fc:66:57:9c:3d:5f:cb:74:
aa:15:20:c5:dd:78:3d:74:22:6b:3f:40:4c:70:de:
28:c0:2f:9b:74:94:87:1c:89:c7:b3:dc:5f:f9:92:
0e:5f:bf:48:eb:00:ad:72:7b:9c:bd:5f:87:17:03:
54:84:9e:dc:7f:a2:c9:3d:e4:35:b3:96:a0:3e:e1:
1a:11:db:ad:38:70:f7:81:48:fa:69:8e:13:f3:32:
a6:8b:33:40:1a:b0:f4:e7:8a:3f:31:7e:24:b8:d7:
62:ec:65:d4:a7:07:e7:d4:30:6a:0f:b4:bf:6b:f1:
61:63:ba:92:6b:b2:27:05:05:ae:74:be:d0:66:d9:
c9:ff:bd:0d:1a:e4:4d:2d:4d:6d:cc:ce:d4:28:75:
80:c0:30:f0:83:5e:90:8b:05:0f:54:fb:66:ea:5c:
32:11:df:d6:74:79:f6:8a:ed:1e:af:75:e3:81:af:
60:94:26:ca:c6:f7:28:f0:4d:ee:d4:ba:76:77:7c:
26:12:b2:e8:ba:e0:b9:fa:14:1c:39:f5:8d:dd:4c:
35:93:f0:9e:87:f5:60:68:2c:9c:8b:31:a1:28:d4:
f8:70:d6:5f:6e:26:03:b1:20:6a:e0:7a:44:33:6c:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:55:2B:3E:66:F4:2C:09:76:7D:66:A3:CA:04:48:8F:86:AE:07
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cb:58:6d:2e:1a:29:29:15:3d:3e:f5:87:88:ca:a5:e7:13:
f1:89:dd:10:36:bc:64:4e:26:c8:58:52:0b:1b:de:eb:09:48:
42:31:fc:77:cb:56:ad:7d:0c:e1:3d:4a:27:9f:3b:71:b5:6c:
dd:d5:c2:8e:4d:d6:35:ad:1d:ab:3c:bd:b0:bd:33:c3:8f:19:
1b:71:99:a2:76:da:72:e0:d8:d3:f8:bb:9b:cd:3c:0a:00:be:
68:7c:79:89:0d:8a:0b:95:15:ea:d2:ab:12:fb:7f:40:42:c0:
94:9a:02:c6:3f:c1:af:5a:17:7c:99:f3:61:d3:da:53:23:75:
56:a8:90:b0:e7:36:92:6f:1c:fc:62:15:95:ae:c6:1e:5f:21:
51:c5:67:65:71:73:d0:a0:d0:e2:5a:76:9b:b4:0a:ff:2f:9e:
2a:04:8e:05:d0:2e:fe:8b:e9:73:c5:a7:38:c2:8c:a9:c4:3f:
38:ac:cc:29:77:37:88:e9:77:23:fe:36:7e:8e:ed:74:7e:28:
be:98:5a:db:12:20:e3:0c:7c:e2:4a:3a:e4:33:aa:ed:13:8c:
40:21:22:05:28:b9:a8:2b:c3:1d:40:82:ae:7d:a1:3b:ac:e9:
47:54:35:bd:25:6c:1c:10:3d:59:12:47:21:b0:ec:b6:b5:46:
ce:95:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:44 2025 by rpki-client