
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: ZIyZRpdX7o+gapEcttJEhpmHITSCQ5TJmT7MjJnl98I=
Subject key identifier: 0C:89:61:F5:5A:8C:F3:3A:E2:D7:C1:A1:0A:C5:74:4A:49:9D:90:20
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 0198D583E66A1E01BD5EFE712305AC2E8FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 07A4
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: yXfMjH1S+t+HrpnPo0U/XzKawhVwA8wf10VLx1iDNQ4=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e6:6a:1e:01:bd:5e:fe:71:23:05:ac:2e:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=0c8961f55a8cf33ae2d7c1a10ac5744a499d9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:db:e9:4a:59:33:56:7d:4a:ca:22:86:10:
54:c1:28:3a:c9:99:db:61:1c:4b:21:f7:f5:c2:88:
68:69:0b:7a:ae:3e:cc:19:d5:22:94:be:bb:b0:5b:
47:62:73:05:59:1a:15:33:67:3a:45:1f:0f:19:1b:
76:da:dd:d2:d4:8b:cc:82:6a:f8:9b:52:9c:96:35:
bd:65:e4:2d:1c:d7:90:d6:65:c7:99:41:c2:b6:e1:
ef:92:a1:86:a1:48:5e:24:ed:7e:21:07:d6:3f:4f:
4d:c1:56:e2:82:f3:ae:87:89:b9:3a:09:9d:b9:a6:
69:9d:f0:bf:b8:9d:26:57:19:c8:59:c3:f8:3e:7e:
d8:9a:1e:ef:c8:9d:57:60:28:cf:d6:3c:f8:3a:10:
fe:2c:0d:44:b1:98:4f:b8:f7:82:8a:da:fd:af:38:
73:00:19:af:81:aa:91:09:a1:64:c0:35:0f:21:8c:
7d:4d:7d:f0:4b:5e:4c:a2:21:c3:b5:15:f7:98:7e:
25:33:30:f4:ae:87:62:83:60:c2:ba:e8:cd:8b:92:
81:ee:cc:c3:d4:62:e5:0a:8d:50:e3:9a:de:fe:6c:
04:9f:42:91:33:bd:b3:37:02:dd:98:fb:51:5f:28:
3c:79:dc:87:d9:42:31:e0:6d:6f:1b:58:6c:90:f6:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:89:61:F5:5A:8C:F3:3A:E2:D7:C1:A1:0A:C5:74:4A:49:9D:90:20
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a9:68:ff:97:c7:58:75:7d:62:d5:11:3f:04:55:ca:98:ee:
02:1a:d3:19:0d:43:ca:a8:85:2e:6e:d7:8d:2e:ef:63:6f:67:
33:f1:df:c6:01:12:79:3e:fd:36:19:08:e2:a3:5f:96:48:92:
86:ae:9d:ba:ce:e4:2e:c2:e3:fd:ee:ba:2d:67:0a:3b:b1:04:
46:c1:6e:53:50:f3:cd:61:3f:6b:c7:83:bd:3d:74:37:e0:8e:
e3:83:01:61:e2:0b:44:a2:53:5a:6a:03:07:cf:ce:75:56:59:
82:f2:21:42:b0:c3:85:2c:3e:9f:f1:cc:5d:c0:05:bd:49:fd:
59:35:29:7f:80:cc:14:f0:3c:34:7f:91:04:18:57:86:d5:77:
7c:68:d1:f1:7c:8c:ef:f8:48:b0:ee:b0:d8:9c:76:7f:28:28:
78:e6:32:64:aa:33:02:3b:fd:74:8c:51:00:5c:5c:b2:30:d3:
ea:bb:13:70:bc:9b:b0:45:22:82:63:23:3d:1a:ba:3e:48:1e:
04:e6:0e:39:d6:8b:1c:21:91:3a:bb:90:ec:92:a1:f6:ae:76:
24:08:0e:4a:c6:fe:f8:76:30:5b:a8:37:9d:28:28:e3:a6:14:
3e:8f:71:5d:a6:9c:5c:8e:13:26:75:bc:36:d6:cb:ca:a2:03:
f3:e0:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:51 2025 by rpki-client