Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: IdLHgCazRoM6JArzUoBaCwWR1tYHGgXkhzFLxpKd3j0=
Subject key identifier: 08:C6:60:98:8B:FC:13:9A:6C:8A:0A:C0:46:58:B9:B9:F5:01:EE:50
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0198D8F296A54A0F58E5E7452054AE319E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 06D4
Signing time: Sat 23 Aug 2025 22:00:33 +0000
Manifest this update: Sat 23 Aug 2025 22:00:33 +0000
Manifest next update: Sun 24 Aug 2025 22:00:33 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: RbAm2PwkMIg2V72SRhIMv7RR8B2fS/BwsqNo82Y0oys=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:96:a5:4a:0f:58:e5:e7:45:20:54:ae:31:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Aug 23 22:00:33 2025 GMT
Not After : Aug 24 22:00:33 2025 GMT
Subject: CN=08c660988bfc139a6c8a0ac04658b9b9f501ee50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:15:5c:37:47:bb:f5:a2:13:88:87:2d:35:
e3:46:14:dd:e2:f8:bd:44:13:3a:ac:6e:d5:9d:21:
a9:00:d4:75:86:c6:77:7b:53:93:d1:f5:af:5a:cd:
8a:1f:74:f5:ae:f4:da:85:2d:45:85:8e:f9:20:e7:
44:2e:5e:0b:6a:ee:d6:20:60:55:8f:d6:cc:31:d9:
a1:9f:58:1b:10:47:50:b9:3a:ed:11:f5:1a:ff:e1:
4e:65:7f:6e:cd:03:74:cd:a2:72:14:f3:1f:7d:85:
7e:4c:25:b3:91:16:69:f0:7f:38:a5:b6:f7:64:6e:
a1:4c:27:a1:c6:aa:c4:4c:ee:28:d9:e2:42:8c:6d:
8b:5c:4c:64:24:fd:fb:25:89:06:6a:39:26:e2:f0:
bc:65:33:13:6b:48:59:2c:7d:e7:65:5a:52:ac:62:
23:d7:c0:21:15:04:42:d4:38:b1:66:ba:1e:00:da:
4b:b1:af:e5:dd:69:6c:71:34:78:e9:13:59:7b:f9:
9c:cf:fb:17:17:98:22:2f:1a:3f:f6:28:7f:a9:63:
1e:47:03:fa:f9:d3:90:8c:2d:6c:9f:4b:e8:c5:5f:
56:00:a5:1b:88:fa:2a:d5:0e:23:9b:37:bf:e5:0f:
49:19:62:35:b2:89:d5:16:f5:a5:91:1f:c5:bf:64:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:60:98:8B:FC:13:9A:6C:8A:0A:C0:46:58:B9:B9:F5:01:EE:50
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:21:f1:d0:de:ca:01:ca:ac:64:d2:49:00:c3:19:3d:7f:
5c:1f:6f:3e:e0:78:64:36:2e:90:b6:f0:08:31:3f:74:43:b3:
f4:c4:12:52:7a:19:2c:3e:3e:40:13:ec:00:e0:7d:6c:5e:44:
ba:32:bd:42:e3:17:ab:62:1d:b8:50:03:47:23:66:b9:eb:ed:
2e:6b:dd:2c:1b:0d:6b:3e:9e:d0:c8:be:b9:44:e9:e2:23:84:
c5:55:fe:cf:c5:74:f2:b0:f5:e2:d1:ba:27:9e:6e:e4:53:69:
cb:ae:4e:87:25:75:09:45:3f:20:c3:34:81:d4:79:00:bf:02:
02:ab:c0:9f:26:16:56:62:82:62:50:6d:81:78:01:c3:a3:8d:
98:c3:bb:2d:44:00:68:99:f7:c3:f7:5c:20:9e:b2:6f:d4:ad:
cd:fc:62:b7:8f:2d:b1:12:27:27:d3:fe:9e:24:bc:a9:d4:9f:
49:58:50:85:1e:8d:91:a0:30:49:24:03:fd:56:25:48:a0:e6:
5d:9d:61:d0:66:d4:2d:e1:3f:e3:27:2f:8a:9c:30:cc:0f:4b:
f5:79:2b:0c:ee:c1:92:5a:87:72:9a:56:a3:6c:6a:ff:7a:0b:
c1:78:e7:24:cd:5a:e6:7c:5f:3e:cf:04:e6:a3:df:83:87:6c:
e6:d3:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:09 2025 by rpki-client