Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 9F61JrD5mZhTWx3qSX0fnF+iCnUfk+x0Y98XSOuSAHo=
Subject key identifier: 5B:62:49:89:6F:42:BE:AB:59:E3:F0:F2:E8:4D:6B:5A:65:92:42:EE
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0198D65F02A41418E20C730459C45F40CD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0CF1
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: /C+pCtjZLntCqEEU9T77HBWujSOwAUeWDhx4WuQWZU8=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:02:a4:14:18:e2:0c:73:04:59:c4:5f:40:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=5b6249896f42beab59e3f0f2e84d6b5a659242ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:d7:6f:c7:04:2c:2b:d3:20:92:ee:49:96:
ea:8a:af:c4:0f:f2:f7:b8:0e:7f:63:c6:be:f8:44:
51:1f:15:60:9d:1a:06:11:2d:85:c2:27:07:c0:89:
80:47:70:fd:2b:20:0e:e3:65:59:d5:b2:6f:8b:69:
70:d1:3e:31:40:84:cd:f9:9d:af:80:7e:6e:04:37:
10:8f:88:4c:79:9e:71:73:a1:24:05:4b:dd:f2:22:
bc:21:31:8a:c5:9f:b8:a5:2b:26:ec:cb:55:5d:25:
14:c0:eb:44:d5:bc:0b:8e:ae:bb:4c:7b:5a:47:ab:
60:f0:04:85:37:bb:63:24:d4:cd:d8:f8:de:93:f8:
2d:ef:d3:21:39:2f:fb:78:a3:ee:a4:fd:34:e6:7e:
bc:31:b6:ed:f9:6b:30:8a:8d:66:21:40:1e:b6:cb:
52:14:77:00:34:d1:cf:0f:18:54:f4:7b:64:9c:80:
28:a5:13:3c:6c:1f:3b:87:50:37:fc:2d:4f:8c:4c:
30:d7:98:ba:4a:fa:a5:39:a6:9b:d3:3c:fa:c1:ad:
2a:0e:5e:30:cd:fd:e3:d5:41:2c:bf:ad:2c:7d:7a:
ae:f9:92:74:eb:fd:5c:89:7d:6a:51:bb:a5:5b:94:
e1:8a:18:2d:84:91:b0:45:30:11:06:8d:39:13:a9:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:49:89:6F:42:BE:AB:59:E3:F0:F2:E8:4D:6B:5A:65:92:42:EE
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:c5:ce:9a:0a:cf:75:7a:d2:78:3e:6a:e2:65:f7:52:fe:
3f:25:7a:ae:1c:4b:56:c4:93:87:16:cf:a1:0f:20:b8:10:6b:
51:28:11:f3:d6:01:c9:c0:a0:c2:78:88:9c:6e:80:d2:e4:bc:
6a:97:9a:d1:49:19:cd:f4:00:cd:31:9b:01:b8:cb:af:17:db:
13:df:b2:59:f0:05:d8:ff:fb:6b:a5:b9:4f:08:ed:49:79:eb:
19:22:01:3a:f0:fe:49:93:24:ce:1f:c3:b4:8f:45:2f:1b:0c:
e1:89:1e:d2:c9:47:4a:0a:2b:56:74:2c:a9:3d:af:c9:f6:99:
29:b9:8d:ef:86:d3:56:b2:ef:c3:3e:bd:13:9d:d0:0a:f8:62:
0c:fa:11:24:27:bd:5d:5f:ad:f4:6a:e4:12:10:fb:78:da:54:
3a:da:30:b3:1a:1e:70:91:31:e3:ae:d4:fe:5d:e7:f0:ab:4d:
1b:4d:5e:01:24:3f:d4:4d:08:95:4f:cb:44:23:65:cc:03:6e:
fb:93:a1:bb:52:26:ff:1d:d2:0a:e7:c9:b8:12:17:05:23:1e:
e3:24:dd:d1:33:27:59:76:fa:58:88:20:9c:c9:e2:24:c3:97:
a0:c1:8e:79:d1:25:d2:a9:0f:07:75:35:06:2a:fd:fe:47:8d:
c9:da:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:56 2025 by rpki-client