Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: EbiUw3IPV7XlzQ8ypTJGPeTFbW8s+wru6d4DorNE3G4=
Subject key identifier: 0F:F8:DA:5F:D6:0A:CB:3E:8C:62:20:C4:6D:17:14:D6:36:9D:00:81
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 0199FC218212BE0CC0A579511793A5AF3800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0D66
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: akEriiPsaQICtIk6TkUK3IbnND+VYfX6IK16zR96XqE=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:82:12:be:0c:c0:a5:79:51:17:93:a5:af:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=0ff8da5fd60acb3e8c6220c46d1714d6369d0081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:33:23:27:d0:e4:80:b3:b4:f5:fa:74:3a:
68:a9:5f:b4:3b:2a:b9:b4:4f:7d:0b:f7:66:66:6d:
5e:b1:e8:10:86:13:97:25:a8:93:d2:ae:b5:1d:ec:
73:cd:11:96:9a:2e:37:bf:c6:71:7b:1d:28:c4:39:
2f:78:f7:4c:bf:47:06:50:6e:59:9d:75:5a:5d:dc:
92:5b:1f:ce:5f:fb:bf:25:13:ab:96:30:9c:cb:97:
16:4f:30:b6:86:57:7c:7d:b4:ec:fe:59:4b:02:85:
ba:c8:3e:6b:b7:1b:a8:91:d1:19:37:86:88:5f:f9:
5e:37:55:e1:bf:ab:9e:57:86:25:24:29:31:83:3e:
db:93:fd:8d:85:56:ed:9d:82:51:9c:d4:e3:4e:1e:
71:2f:13:73:0e:45:6a:1f:cc:83:37:a2:21:42:64:
b2:42:31:0d:67:b8:8d:ac:d7:9a:c1:e8:f3:22:48:
ae:bd:fd:a9:95:97:04:e3:2a:10:0b:dd:b4:8b:39:
3e:88:ae:12:41:ca:84:e7:34:87:f5:9a:65:dd:07:
01:5c:fa:6d:bc:f6:6f:a3:88:ad:73:23:f6:e5:e4:
7c:54:04:c3:cc:55:fc:09:03:3e:2c:d9:9b:82:e7:
25:7e:c9:db:cc:c1:1f:1f:82:0c:96:83:82:b1:a1:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:DA:5F:D6:0A:CB:3E:8C:62:20:C4:6D:17:14:D6:36:9D:00:81
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:6c:68:e6:b6:f8:c5:f3:45:81:83:67:c8:c8:ad:bb:b3:
d5:10:fc:f6:ce:c5:d9:c2:91:a4:d7:46:1e:c9:87:71:c8:bd:
cc:74:c4:2a:ff:aa:7f:02:f9:07:06:26:38:9d:c0:38:24:d5:
9f:13:eb:66:7c:b4:33:fe:68:61:a0:b7:06:02:f4:17:a9:12:
c7:00:bf:97:00:34:02:6f:16:80:8b:6b:a2:63:5e:a0:b1:1c:
18:d3:b3:ac:b1:bc:a3:d2:70:8c:fe:af:a7:e2:42:fc:3a:8b:
37:53:6b:1d:c8:0c:ee:f5:f6:87:a6:26:01:d9:46:55:a8:e4:
96:59:29:6f:1f:ac:c2:00:c7:68:a5:ff:d8:51:a5:5d:52:b5:
67:78:e0:4d:76:dd:81:c3:12:a7:31:3f:79:24:42:95:9e:a8:
3f:92:a0:be:76:19:49:9c:9c:80:40:ab:ce:a0:f2:55:63:7b:
d3:e2:5d:14:a2:43:c3:12:84:df:45:76:ba:be:9e:b3:29:17:
25:6b:c6:7e:6a:9e:61:eb:15:de:43:8b:84:fe:b9:7e:5b:7b:
4f:2e:72:65:a1:45:81:62:c3:9e:94:5f:11:e8:1c:6f:0f:31:
54:fb:7c:4f:8f:e1:30:1a:0b:86:bf:9f:1b:3c:73:22:05:67:
54:58:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:26 2025 by rpki-client