Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: rKRJSPaQxcWwB7KsPyvNKp6gzNuCraeY8DnABaD/gCY=
Subject key identifier: CF:1D:C9:D3:87:78:41:91:B0:D3:CD:30:1E:64:D2:24:ED:E5:FD:CF
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0198D5F17357F3485949C506F04F3356501D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: BBE2PTbb8kRyKjV9Ywtpq+ivEhWoaOBgNtwiwoKksL4=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:73:57:f3:48:59:49:c5:06:f0:4f:33:56:50:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=cf1dc9d387784191b0d3cd301e64d224ede5fdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:79:54:43:fc:df:cd:c5:52:97:30:89:8f:
8f:04:b9:a4:3c:2f:84:51:03:e8:5b:11:ef:d2:f6:
f3:ab:da:17:87:b3:4d:57:7e:b5:4e:35:1c:1d:f6:
a0:fa:89:96:b2:32:1d:01:bf:5c:6f:8a:7a:4f:8c:
bd:bb:10:8f:92:39:77:f7:fe:53:5e:68:ed:cc:a6:
b8:6e:08:dc:99:90:bc:23:40:05:40:01:9a:da:d1:
e4:1d:e0:83:21:c3:97:02:02:03:ae:bd:b2:01:d1:
d1:97:83:51:bc:b1:e9:fd:c2:36:a3:4a:d9:79:a4:
f3:22:4a:b5:0e:24:d4:20:0f:7c:25:7e:57:50:3d:
28:29:7d:ef:0c:48:cc:ec:0b:76:bd:40:7b:2f:fa:
c2:1d:ba:b9:f3:e3:29:fb:7e:9d:4a:cb:30:2b:7e:
43:de:1a:71:43:d5:3d:1a:56:17:c6:13:fc:c8:22:
39:c0:97:ac:48:1b:ca:f1:1b:4f:31:40:f9:92:8d:
29:0f:57:0d:0f:92:6f:89:12:45:32:9e:73:07:e4:
bc:b0:9a:81:37:4d:cd:16:9a:67:6a:30:c4:4b:5a:
74:83:43:b2:2b:95:7d:e9:46:2a:41:76:e4:7d:5f:
08:95:0c:d8:e6:4a:62:27:81:91:c6:b5:31:7b:db:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:C9:D3:87:78:41:91:B0:D3:CD:30:1E:64:D2:24:ED:E5:FD:CF
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f5:62:85:30:e2:84:1c:97:fd:95:f9:f7:ce:a4:df:d5:ea:
6f:9f:c1:ab:16:06:c4:2c:c4:39:3b:e5:8b:0a:33:22:6e:38:
28:26:4e:f4:0f:69:94:4d:7a:c5:8a:7e:2d:3b:fc:19:0e:6a:
b1:45:b9:30:b4:00:fa:e2:b4:ad:bd:4b:c0:51:99:9a:a3:ab:
96:fd:13:71:ff:5e:ac:d5:6d:89:71:bb:b7:c1:e7:44:e0:b1:
b5:fc:00:1a:67:50:76:0d:b2:32:f4:85:a4:67:ab:bc:28:19:
a7:82:cd:28:31:9d:1c:ae:57:78:60:25:74:c5:51:17:13:49:
82:32:59:a4:4e:20:7e:86:99:8e:58:38:69:69:b5:3e:33:ca:
6c:2d:be:7e:79:70:fd:38:c5:74:49:4e:56:62:e9:84:26:31:
ac:15:e6:02:cf:66:03:22:92:86:af:30:7d:10:4f:77:c9:12:
68:62:c7:15:16:1f:32:7c:fd:84:93:cf:50:67:57:25:59:1a:
f7:2b:75:dc:60:d3:51:fa:12:74:17:ba:33:d3:3c:25:95:ca:
68:34:a8:a9:ed:6d:fe:1c:a8:da:63:5a:ca:a4:7b:31:fd:55:
39:9b:e2:36:6e:82:ac:8b:b6:5c:c1:e0:5c:16:59:a7:6a:e6:
f1:06:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:17 2025 by rpki-client