Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: vtOzMs/i6/V5Rb4IEdeU1FyhsRMwD2DnDKLd0//edIY=
Subject key identifier: BA:9B:A3:60:2D:F6:B6:9B:B2:F8:50:62:47:7D:69:39:1E:95:F5:68
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 0198D6CDAA5BE731D08417FAFE99F640F43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0BA3
Signing time: Sat 23 Aug 2025 12:00:59 +0000
Manifest this update: Sat 23 Aug 2025 12:00:59 +0000
Manifest next update: Sun 24 Aug 2025 12:00:59 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: minfh/KRwSVl8EPdwv+He7d3ZwqYJ/zKO3n+ozocnik=)
2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:aa:5b:e7:31:d0:84:17:fa:fe:99:f6:40:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Aug 23 12:00:59 2025 GMT
Not After : Aug 24 12:00:59 2025 GMT
Subject: CN=ba9ba3602df6b69bb2f85062477d69391e95f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:ea:2e:87:df:d3:b3:0b:ff:8b:08:f3:dd:
2a:8a:2e:9c:91:db:94:68:cf:31:0b:4c:50:a7:64:
01:46:39:08:69:82:95:2d:ae:d0:0d:80:03:20:65:
3b:15:c1:ce:1d:73:77:ba:61:1f:41:1a:4e:67:07:
01:d8:7e:79:23:62:dd:89:f3:38:b4:8e:df:41:c5:
d0:4a:ca:0f:e3:f8:a1:16:88:0e:ba:af:59:42:4f:
72:9d:cb:0e:8f:ff:bb:e6:47:fd:79:aa:2b:8e:9a:
59:2a:cf:7f:fe:32:79:7b:70:52:e2:c7:72:83:77:
70:6f:36:ce:95:45:09:a4:bb:fd:b6:ba:a5:03:ff:
52:3a:f6:d1:c5:0a:47:00:c5:44:44:9d:04:f4:cc:
c8:d5:4d:b8:f0:25:fe:65:3f:f4:cd:90:94:40:eb:
48:f3:c2:cd:58:8b:e4:97:3f:41:1c:c4:61:e6:a6:
81:a3:74:9c:23:9f:0e:d8:59:b8:65:a9:09:cb:e0:
77:2e:54:af:39:6c:04:97:64:57:2c:79:b9:57:64:
bb:0c:a7:5b:f5:90:f3:f4:0c:a8:89:70:54:4f:15:
af:fe:d7:cd:c7:da:6a:6a:94:42:75:3d:68:cf:f0:
31:9f:5f:34:9b:4b:1c:99:c2:40:16:a6:af:6b:8a:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:A3:60:2D:F6:B6:9B:B2:F8:50:62:47:7D:69:39:1E:95:F5:68
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:10:85:5c:81:29:be:8e:25:9e:87:86:87:3c:d6:56:48:ae:
3e:2e:e1:51:1e:cd:aa:ee:c8:32:62:31:b7:17:df:9c:fd:62:
51:8a:42:2f:0e:6d:91:e9:23:6f:6d:67:f0:30:57:22:09:94:
62:e7:5f:28:a3:c0:6c:6f:34:ed:8f:bd:4d:f6:1b:fc:15:ec:
e2:f1:31:c9:d5:a4:e4:50:2f:14:e0:33:0c:ce:6b:8f:89:fb:
ae:90:85:4d:b1:7c:bc:3b:68:28:d0:40:61:7c:85:6d:94:73:
4b:e3:4f:47:9b:62:92:e1:fb:e9:46:e5:9a:f6:53:12:af:17:
61:65:71:b1:c9:eb:83:77:2b:9e:23:80:ff:b0:9f:e2:cb:5b:
e5:21:e5:33:a5:49:be:41:ab:e3:35:b5:41:82:e4:27:bf:b0:
67:3e:c1:77:8a:cc:38:21:0d:6a:96:9c:83:56:07:97:4f:64:
fe:73:8c:e9:a1:9b:64:da:f4:15:39:00:a4:cc:d2:57:58:98:
68:5f:d5:88:a9:65:68:be:08:07:08:0e:1c:8d:23:ce:9f:ac:
88:1c:1c:0d:4f:f2:84:8d:22:1d:c6:7e:d0:b8:d0:80:82:17:
38:99:e7:55:6c:aa:c4:97:eb:4f:97:9c:87:c1:75:c7:23:91:
31:66:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:17 2025 by rpki-client