Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: oE/85IUnX6iGi75W6Ke3poUqPiYIcZaxEb90BJMgBMU=
Subject key identifier: AD:F3:B4:39:CD:48:D7:7D:91:7F:D1:3C:9A:5D:8F:9C:D8:6E:3A:8B
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 0197B6D77C4313AFC81D28F6093DA8221D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0C39
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: mZ/99x0rfR/S3Hq442ZQR/uUDKAh46R9XX/REwRNVm8=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7c:43:13:af:c8:1d:28:f6:09:3d:a8:22:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=adf3b439cd48d77d917fd13c9a5d8f9cd86e3a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:7b:b2:c0:fc:5a:93:0d:37:7e:f3:16:f3:
64:06:8a:e9:62:57:a3:90:74:82:dd:7d:36:79:27:
9f:16:87:6e:8d:ff:8a:b6:ac:a4:ce:40:cf:c4:0d:
85:87:78:db:3b:a1:ac:ff:ae:d1:6c:fc:44:59:e8:
f1:1e:2e:e4:10:40:07:1f:ef:40:d5:0a:db:c4:3f:
a0:32:f7:62:86:fe:7a:8d:25:15:36:9f:7a:c3:e0:
91:a3:9b:58:c0:6e:17:91:ae:7c:e7:a6:33:79:8b:
27:2d:82:6b:a7:36:93:61:6f:92:73:af:07:64:14:
94:0a:b1:42:1b:4a:82:76:7e:6e:08:3f:ab:a5:8f:
8d:ad:f0:23:eb:d2:60:8e:23:9e:8f:3c:3e:68:4e:
e4:43:45:b7:d0:30:29:a5:3d:69:28:48:86:78:2b:
71:af:7b:a5:6a:87:88:38:3a:92:0c:ec:77:fd:8d:
67:89:d0:bd:b2:3a:48:83:b2:bb:0e:19:dd:fe:bd:
16:c2:1a:eb:a9:ca:22:5d:e5:db:0b:e6:97:42:9b:
a3:9c:11:94:55:69:73:1c:34:da:35:ee:93:3b:96:
2c:07:3c:fd:51:68:ed:f3:b4:33:88:61:9f:0c:0b:
ba:19:41:8f:6a:64:a5:5d:28:b0:99:69:4a:0e:4a:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F3:B4:39:CD:48:D7:7D:91:7F:D1:3C:9A:5D:8F:9C:D8:6E:3A:8B
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:b0:bc:50:3f:14:13:d8:72:c1:4f:42:03:db:0c:a3:c6:
a1:57:0d:47:31:02:d6:f9:c8:56:dc:e5:14:35:dd:c9:3e:74:
a5:09:34:98:40:3d:09:28:db:30:c2:a2:23:25:2f:51:02:64:
46:17:25:bb:dd:0f:2f:57:e6:5c:58:e9:5b:b6:f2:67:eb:6c:
c5:88:ac:7d:e2:f0:0b:5e:5d:a3:13:0b:5a:54:e3:c6:4d:73:
7d:7a:20:42:b0:e7:b3:e9:e2:91:61:da:c5:22:75:90:f9:d5:
58:fe:b2:09:94:56:e8:ea:ed:e9:ed:4f:d3:12:e0:c1:b9:e4:
ce:7b:f0:a3:c6:3e:92:07:d2:9f:b7:28:56:3c:3f:93:77:57:
5b:1b:b1:38:8f:d4:e0:24:16:21:0c:d9:2c:9a:b2:c4:9b:d1:
fa:cc:c9:ca:15:57:1c:5b:f0:41:52:cd:78:f2:8e:ef:9d:54:
28:f2:46:63:3e:3c:79:8d:4c:83:1b:d2:4e:39:9f:dc:f3:a5:
35:35:51:54:9e:d5:ea:d7:7e:4f:2a:f3:1b:50:54:ec:78:a5:
65:75:73:ba:60:21:14:7e:a8:9d:c7:21:21:bb:e3:a3:b8:dc:
4e:e7:80:2d:fa:5c:de:35:aa:40:73:ab:ee:69:32:ce:ac:3d:
22:d8:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:45 2025 by rpki-client