Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: ltbFDmnJbH9YgfH8ZSpHbQ1zLevTLS14GH+bbLE2PDY=
Subject key identifier: 7F:1E:1C:C5:A6:B6:71:F8:D0:29:D1:02:C8:39:30:47:EE:60:AE:8F
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0199FBEC2E7CC9D07434F8DCEA44F87189D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0D89
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: aspkTwCOdFVDy7cMUUrI9AjYge3qr/crSesqGT2nzFg=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2e:7c:c9:d0:74:34:f8:dc:ea:44:f8:71:89:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=7f1e1cc5a6b671f8d029d102c8393047ee60ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:c8:71:a1:c8:14:c5:f2:1e:fb:fc:15:0c:
d5:ea:f8:1b:31:48:cd:ac:ce:8c:e0:6b:6c:93:88:
f9:8a:8a:fa:74:b3:8a:cc:12:93:b6:a9:70:e9:73:
e4:9c:e6:56:fc:5a:5f:ca:ba:2c:c2:89:c1:2b:99:
1c:58:b7:93:02:6f:92:b5:c7:2c:16:29:8a:7b:6c:
58:09:d2:2b:f0:5b:a6:37:d6:86:36:33:80:64:fa:
d6:b2:a8:bc:ee:d1:4c:d1:f9:a1:62:57:06:a2:2b:
11:a6:af:4a:b0:76:9a:9c:f2:cd:09:62:67:0e:49:
b6:30:3b:7f:f2:fa:50:fe:44:3b:98:e1:0a:31:b3:
9a:10:d5:92:ea:b0:67:59:d1:46:fd:f2:78:9f:ad:
8e:ab:23:c4:83:a8:16:e5:e2:22:59:b5:71:24:17:
12:eb:03:55:b9:34:3f:b0:1a:70:b9:63:bb:a7:22:
31:a3:23:b4:a7:f2:ce:77:21:6c:c6:cd:73:33:e2:
ff:f3:f1:2e:01:41:42:4f:65:1c:7d:94:b1:29:0c:
51:e4:87:d0:5d:ee:8f:61:27:3a:41:72:68:22:3e:
fc:52:fd:ee:f1:cc:ca:f9:4c:ab:ad:c6:ae:84:78:
cd:30:72:25:e3:61:41:f7:ca:16:61:70:d3:c0:c7:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:1C:C5:A6:B6:71:F8:D0:29:D1:02:C8:39:30:47:EE:60:AE:8F
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:e8:1d:e3:74:fd:e0:17:f7:0b:3e:e6:02:81:9b:22:06:
21:3e:d2:a4:c8:09:92:0d:64:bd:54:bc:87:cc:23:92:72:9e:
ae:43:11:91:4e:40:6d:65:60:7e:4e:68:5d:86:d0:fe:b6:6b:
2a:31:c5:af:af:3d:63:ec:91:af:c3:bd:6c:4e:ab:74:a8:b4:
be:70:a3:b7:f6:ab:43:6f:c2:4f:97:2d:80:5d:e8:fa:53:50:
37:6c:9c:c7:94:28:8e:3e:dd:de:a7:84:e8:dc:43:81:7f:d8:
71:92:7b:a2:91:7e:91:ce:37:27:7e:1e:65:65:8e:da:d1:fb:
88:0c:c2:aa:7a:77:5b:68:a1:1e:a3:1b:99:21:9d:d2:cc:47:
18:6e:9d:b8:b3:94:88:df:bb:ca:4e:a2:4f:2a:8f:99:0e:44:
57:37:95:3a:8b:3c:41:3e:8b:af:03:20:88:6a:62:60:3f:98:
a8:7b:ec:02:93:0a:29:f7:ec:5e:19:1b:08:e5:e0:6c:f8:d9:
29:18:ab:33:3b:8a:9d:4c:3f:4d:12:4d:b8:f5:f0:ad:9b:31:
64:5d:df:1a:c5:f1:f0:c9:af:c8:91:d1:b3:f2:ae:2d:cb:7e:
a9:91:a3:6c:84:76:62:2e:88:61:42:7e:52:be:3d:34:63:8f:
e6:8c:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:42 2025 by rpki-client