Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: Ogfhoyqs1xZ9frwrqSSz/WeYAktFY3xpot1Wcm9t0m8=
Subject key identifier: 10:E7:9D:DA:3B:68:75:63:C4:60:B9:1F:AD:ED:3B:F7:6A:95:95:E0
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 0198D4A8329C428C32250506727BE5353768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0CCD
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: 6LUTZWS5w8HGKjGQC/DFNX8ML0cy6spLnV2SVpSF4Jw=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:32:9c:42:8c:32:25:05:06:72:7b:e5:35:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=10e79dda3b687563c460b91faded3bf76a9595e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:a1:b4:43:a6:3a:7c:bb:c4:ba:91:c9:85:
1e:f2:99:2a:50:c1:72:e4:c5:15:cf:0b:0d:e2:fa:
d1:bd:19:41:91:9e:9d:fb:3d:ba:67:0f:52:d6:d6:
6b:18:e0:5e:82:42:84:6e:b6:02:8c:ee:39:8f:14:
a8:79:0b:be:87:96:5c:13:51:f8:42:09:46:df:3f:
cf:85:65:04:49:8f:d9:46:53:dc:ad:86:f3:42:d8:
e3:01:a4:25:e4:6a:47:e3:33:cf:a0:12:79:4c:7b:
4f:b2:07:61:27:05:02:60:1b:a8:55:0d:80:c9:34:
16:37:9c:7b:b6:9d:44:34:ff:be:62:0c:77:e6:ef:
c9:ce:54:4c:0d:1f:0b:53:7b:5c:7e:53:53:23:31:
05:50:e5:4b:5b:f3:eb:46:44:ea:74:17:c8:8a:72:
be:93:4f:63:74:06:ac:47:49:a4:e5:d5:65:5f:54:
9a:93:35:58:f0:63:f8:ef:af:95:49:95:84:41:16:
92:63:51:72:48:be:72:5f:60:db:db:69:ef:0d:52:
b9:c9:73:43:68:21:ab:d5:a3:16:7d:85:85:a1:2c:
04:82:07:47:af:e2:d4:e5:92:a3:ba:12:92:44:3c:
10:8e:c9:45:bd:8d:7e:16:2d:22:5c:5b:9a:e5:e7:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:9D:DA:3B:68:75:63:C4:60:B9:1F:AD:ED:3B:F7:6A:95:95:E0
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:ea:39:c9:bf:63:17:db:73:d8:ba:34:10:5b:76:98:3e:
b8:6c:a1:4d:7b:71:7b:34:48:74:df:58:d3:2e:c3:df:09:aa:
ea:d0:1a:15:31:ec:ed:5d:30:3e:75:7e:9d:0b:04:ab:1f:da:
7e:fa:c0:b0:3a:66:7c:34:13:d0:2a:c3:58:85:04:ec:80:cc:
b1:39:92:6f:69:0a:53:5a:57:ea:da:3a:f0:8a:72:45:b2:c9:
f7:02:b2:74:3b:15:0c:71:1e:6a:64:b6:a9:70:5b:01:fe:73:
58:1b:a4:9c:42:32:f6:83:5f:41:07:77:03:66:d5:eb:44:3e:
cf:71:6c:33:99:7d:75:bf:1c:6d:76:9b:2d:91:aa:e3:bb:06:
d7:30:a3:b3:cf:35:9a:9f:e4:f2:c0:9d:04:1d:86:68:c6:07:
57:06:7a:ea:29:b9:58:d0:46:59:62:d8:4e:13:79:97:5b:a3:
fc:d1:c0:27:b9:56:8d:3e:96:fe:25:f7:01:95:37:f0:9f:d2:
9e:10:ed:c6:33:6c:30:d3:94:4f:25:92:61:0c:15:bb:1d:38:
a9:62:e0:b2:b3:9d:a3:b8:fe:8c:3d:25:1e:fc:9e:4d:a1:c3:
43:2a:b8:84:31:ea:43:61:3c:10:a5:c9:33:ef:49:d9:c6:d4:
12:68:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:58 2025 by rpki-client