Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: UvX6nU31xlqEumrPrfFsLA7AJjSJzh8aYg5UFFfNAjw=
Subject key identifier: 00:8F:F5:DE:AF:80:50:7B:24:96:4D:2D:95:9F:D2:67:37:E2:28:87
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 0198D47448F60BD15E13FB75B58DC7B0E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 098D
Signing time: Sat 23 Aug 2025 01:04:06 +0000
Manifest this update: Sat 23 Aug 2025 01:04:06 +0000
Manifest next update: Sun 24 Aug 2025 01:04:06 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: nquevMbAAVQ4QYv8mMP8VxzU9O6Z+sQC5sec/YhzAA8=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:48:f6:0b:d1:5e:13:fb:75:b5:8d:c7:b0:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Aug 23 01:04:06 2025 GMT
Not After : Aug 24 01:04:06 2025 GMT
Subject: CN=008ff5deaf80507b24964d2d959fd26737e22887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:e3:10:1e:4d:8b:5d:5d:e1:74:2b:54:f0:
c8:b4:7d:77:dc:ec:63:65:b3:48:02:a4:03:6a:bf:
96:b3:a1:37:05:95:1c:05:96:f9:be:45:b7:cf:63:
2c:62:08:d3:dc:fd:e6:8c:d2:74:e1:98:53:18:99:
d1:a1:c4:32:67:36:2b:99:71:68:1f:d7:00:dc:7d:
94:45:5f:cb:17:6e:57:86:d5:00:ba:e0:df:8c:80:
1b:28:ef:0d:51:6f:d1:76:5a:40:1e:d5:67:b5:de:
b5:89:3d:3c:db:de:73:ce:5c:b7:36:77:54:ba:71:
11:2c:50:2c:e3:b7:28:59:76:87:8d:1d:09:23:25:
a0:d8:19:7f:38:45:ee:b9:b5:4f:52:de:00:37:17:
08:23:02:e3:e2:25:75:cf:cb:2a:23:97:30:1f:43:
64:03:8c:49:07:f9:91:a3:af:49:8b:20:ea:91:b2:
2a:9b:1f:10:46:ec:ed:32:47:07:a7:60:35:ff:e7:
88:6e:f9:54:26:db:a6:4e:8b:6a:cd:2d:f3:67:88:
a8:de:e0:1a:6d:5b:8f:f4:b6:d3:fb:25:13:81:95:
64:88:d1:eb:ee:0d:77:ca:4e:58:a9:40:98:ba:a3:
78:6a:8f:d1:51:02:0f:91:e3:26:ad:78:ba:10:6d:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:F5:DE:AF:80:50:7B:24:96:4D:2D:95:9F:D2:67:37:E2:28:87
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c0:a9:63:d9:a4:cb:be:a7:43:bd:4a:e9:15:a3:6f:5e:41:
3d:03:ac:e9:5b:8c:6a:8e:da:d1:b2:5e:c5:97:d3:ed:71:9f:
d0:be:34:e0:89:a1:9d:74:e6:23:eb:58:ed:78:d2:04:bc:85:
30:9d:6d:c1:a9:3f:62:a3:6f:14:84:22:74:c0:f6:51:2c:a5:
e1:55:60:ea:af:c1:e3:ab:93:ce:64:0b:b6:a9:c8:48:37:17:
55:45:ca:4f:59:24:3c:17:44:8d:97:f0:e8:03:9f:48:5a:0c:
34:fb:39:2a:94:ae:fb:f8:31:ac:6f:07:5e:5a:ec:b1:8d:7d:
e2:4f:58:b1:9f:cd:87:0e:9d:9a:d9:67:61:9d:8b:5f:e5:42:
0f:09:0c:d0:ea:0f:d0:98:3b:f1:b6:d7:15:96:fd:39:73:6c:
96:17:0f:46:17:9c:91:b6:b1:5f:eb:dd:fa:56:ba:f8:4a:d3:
f7:e8:86:cb:40:40:61:22:6f:55:40:aa:fa:6a:86:7a:5b:09:
c5:0f:d3:31:e0:68:5a:b5:a7:78:ba:79:e5:76:44:d4:72:6f:
cb:50:03:40:fd:ff:49:7f:7d:83:f0:67:a2:a0:dc:08:1f:f2:
b7:a1:60:23:68:e0:e3:29:8c:33:b5:8a:34:b5:5b:5f:f2:b5:
57:13:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:10 2025 by rpki-client