Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: bIL8dqJQkwfb0kTujGngGUQN2UmtSY0DFNBmjN/XSkI=
Subject key identifier: B7:DC:21:8C:1D:A1:68:B8:88:31:DE:5B:08:58:DB:07:AC:F6:A0:C6
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0196C3F0558C0EDB57EE226E0EB29368C4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 05C0
Signing time: Mon 12 May 2025 10:00:29 +0000
Manifest this update: Mon 12 May 2025 10:00:29 +0000
Manifest next update: Tue 13 May 2025 10:00:29 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 1E/J63oPVMQICxtmJxTjfFzDw+HoupNlBHrPhr00JNw=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:55:8c:0e:db:57:ee:22:6e:0e:b2:93:68:c4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: May 12 10:00:29 2025 GMT
Not After : May 13 10:00:29 2025 GMT
Subject: CN=b7dc218c1da168b88831de5b0858db07acf6a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:3f:ad:5a:63:d8:b6:cf:b9:ac:ee:c3:a2:
72:60:bc:08:25:da:81:db:fa:98:55:48:87:90:c6:
05:bf:a4:c7:d6:e8:af:b1:8f:2d:e5:38:c1:de:8c:
8e:e3:13:98:89:b9:e3:84:f4:8d:71:dc:64:da:d1:
15:e2:c8:5b:0c:47:40:f5:b0:00:95:8b:32:0b:af:
d4:65:a1:02:fa:af:77:86:68:f0:a1:d7:d3:f3:92:
fe:0b:51:66:d5:c4:ab:ef:e0:1b:ee:f5:6f:13:f2:
8a:18:af:da:f3:41:b5:ab:25:c0:ca:cc:e2:19:40:
54:f5:4d:0c:45:4b:3c:94:25:ac:18:34:70:97:c0:
e4:01:fa:4f:28:2b:7b:f8:6f:c2:c8:f1:a6:20:0b:
bf:fb:41:1d:f3:fe:df:cb:db:ce:e8:19:e4:c8:cd:
7e:58:5b:b5:fc:3e:2b:c4:a0:63:51:06:15:1d:df:
90:89:cd:b3:a0:aa:ee:27:c1:4c:41:97:84:2f:c7:
57:eb:d0:36:9f:c0:5e:9f:df:f4:23:b3:ac:5d:69:
dc:fd:96:c8:f0:53:56:4d:2f:1b:d2:42:6b:36:c5:
fe:65:54:7e:9d:33:ae:fe:1c:dd:35:f4:db:e2:54:
42:9b:bf:16:ef:8c:55:ae:76:66:8d:9b:8d:c5:3b:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:21:8C:1D:A1:68:B8:88:31:DE:5B:08:58:DB:07:AC:F6:A0:C6
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9e:8d:c8:ee:c7:1c:b8:1f:c3:9c:8d:ea:7f:47:94:26:76:
49:f8:59:14:ac:a3:07:f8:fd:b0:35:1a:03:1f:e8:25:9d:66:
36:f0:7a:a2:98:4b:c3:9f:08:0a:3d:95:a0:4f:08:f2:93:7e:
a7:d1:13:f0:32:64:96:ff:0b:21:4b:70:76:2f:af:4a:8f:6c:
d9:ee:2f:c7:c7:81:2c:b6:7d:a2:62:a4:ce:7d:c4:6d:00:48:
63:6b:53:3c:06:e2:b1:d6:3e:11:02:a5:59:0f:70:c6:f5:08:
c5:6c:47:56:45:3a:e3:cb:04:60:88:58:92:2f:8a:d0:ae:be:
5d:80:67:cf:8d:29:e1:d0:d5:7a:df:c0:15:0b:06:a1:a7:12:
96:03:66:14:aa:2f:0d:22:3c:08:0e:e1:01:48:0c:0b:0c:02:
5d:93:12:18:a2:e2:39:de:ba:c4:4d:d4:65:cd:fa:2a:2e:de:
86:7b:6b:98:15:b1:21:b7:9f:6e:aa:47:0c:d6:39:63:5b:96:
a6:94:47:a1:c4:59:cf:52:23:76:42:5d:f0:c0:1c:e8:89:09:
60:d6:63:7d:63:a2:f5:8d:ec:8b:2c:4d:c8:0c:73:11:27:65:
e2:d7:26:e2:32:c3:19:54:f2:5d:a3:6a:83:9b:7e:c9:a4:ef:
b3:e0:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:27:20 2025 by rpki-client