Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 79fQTeRGY1LWOytq4k/gEfbNkGOwlqXwPgeSpJiA1VU=
Subject key identifier: 67:6A:5A:14:BD:C1:D2:96:CE:E6:2B:6D:4F:60:E7:08:BF:97:6E:C6
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0197B6A0FFE1E4688F5C1F3A6AA0A5FDB4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0C5C
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: p5XIgvww6sYgdsh2WCiAAC1h1iVsfRAFGPGQEueKQRE=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ff:e1:e4:68:8f:5c:1f:3a:6a:a0:a5:fd:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=676a5a14bdc1d296cee62b6d4f60e708bf976ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:fe:25:d7:1a:aa:2b:94:92:18:90:d7:b7:
92:b1:27:e1:6b:7d:d2:0d:8b:4b:b3:48:c7:35:6a:
4f:64:a2:7c:7f:ca:8f:e9:72:b2:ae:6d:90:44:06:
a1:76:2c:f2:1a:1c:2f:3f:de:71:df:42:6f:e1:fb:
16:57:c1:6a:4d:ec:4b:b3:16:80:f3:0b:fd:25:db:
1e:a4:1f:44:33:7a:37:2f:ac:c3:fc:2f:2e:32:80:
6d:af:1d:7c:2c:6c:b7:28:b5:42:ce:e9:5f:89:f4:
6d:ec:01:6c:d0:e4:e7:0c:15:e2:3e:5e:85:a5:18:
2f:3b:9d:0e:dd:c6:b9:c0:45:cc:66:48:0f:3c:33:
18:44:a9:6a:08:2c:87:62:0a:10:58:06:5e:79:37:
74:c7:2c:5a:5d:cb:a8:a7:0f:ab:b8:52:67:c6:02:
f2:ad:9a:a1:94:3d:4c:10:0e:36:33:8a:4b:b1:37:
63:7a:b8:e2:7f:27:c0:ef:4d:39:88:c9:ec:c8:20:
5c:29:e5:68:1e:74:dd:cb:42:f4:3e:74:e0:8a:04:
c9:8e:aa:92:36:62:3f:dd:29:70:5c:ba:20:06:ec:
a2:8b:cf:d5:05:b6:7f:3f:78:b5:01:99:ee:b4:ac:
79:d6:7f:83:fd:b3:79:e3:e8:8a:99:a0:00:3d:80:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:5A:14:BD:C1:D2:96:CE:E6:2B:6D:4F:60:E7:08:BF:97:6E:C6
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:d7:6b:ef:39:fa:e4:5f:bd:91:e5:bd:42:5b:66:a0:47:
f5:88:e7:e6:59:d4:d6:1a:e5:fe:8a:f9:a5:ba:de:0d:0d:ca:
8e:d7:17:b7:50:e6:7f:56:5b:1b:b0:74:64:5e:fc:ac:83:6b:
db:89:97:87:cd:e2:1e:e6:d1:3f:08:26:92:ec:2a:d2:23:af:
dd:92:3b:66:aa:6c:9b:51:fb:2d:f4:6a:90:9f:5e:9c:64:5b:
ed:53:09:71:06:42:dc:d0:2e:84:29:f2:90:1f:06:73:9f:b3:
82:67:35:07:71:41:e3:9f:91:25:b7:3d:89:9f:82:05:70:5d:
29:0c:fc:a1:ff:d9:06:72:eb:a5:79:3b:e2:6f:c7:25:53:e9:
59:ab:c5:73:a4:76:38:ec:cd:92:fa:a4:12:46:f5:5b:a8:ac:
f8:d4:8d:6a:08:e2:d1:be:71:de:55:28:e4:45:0f:e2:6c:ca:
2e:07:14:11:ff:68:5e:b2:2f:14:d1:c9:3a:50:62:43:74:92:
02:38:78:c6:6e:9f:b3:95:b7:c2:68:3d:66:8c:2a:30:52:a8:
9f:8f:95:e4:2a:93:1a:97:c7:3e:63:f1:f4:98:68:e8:0a:e3:
a4:ad:ec:f4:23:54:04:6f:42:1b:de:b2:01:43:6a:86:b0:da:
46:e8:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:25 2025 by rpki-client