Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: /R3Hn7vM7F7TR4tv/B+ELt4QTrXXiSvi71rUtNvyGsU=
Subject key identifier: 31:C7:26:33:38:FD:1C:09:02:FF:95:9C:DB:81:AB:33:5F:A6:BE:FC
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0199FC8F5944E4EAFD881AD0C7DD879F3BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 076B
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: PjPpG7JZ5bXNoLnq6/OrB1DdFIWyYEQaSTjNvETNALE=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:44:e4:ea:fd:88:1a:d0:c7:dd:87:9f:3b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=31c7263338fd1c0902ff959cdb81ab335fa6befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:f2:f7:18:4c:40:4f:74:49:be:81:d7:0c:
e5:f0:24:d0:b3:f2:f6:5a:18:fa:1c:93:8a:ae:9d:
8c:92:83:a0:e8:ec:46:91:58:ab:8e:8d:02:50:79:
af:00:1d:7f:bd:4b:15:67:6f:b6:70:04:a0:73:5f:
e2:cd:2f:e6:7c:c2:08:22:56:88:35:08:8d:f3:7f:
27:0f:fc:f8:0c:57:af:cf:bf:ea:4b:e5:2d:60:54:
27:ce:29:5e:27:9e:be:ba:e0:c6:07:ca:cc:ba:69:
c0:f4:f2:f1:86:3c:36:2b:71:7f:e8:ec:b2:bb:e8:
5e:21:f4:21:2d:a1:69:06:ee:09:e1:9a:32:16:5f:
3f:0e:53:f6:07:03:e3:49:55:51:46:60:52:d2:88:
86:35:11:d1:44:e2:b4:6e:69:41:51:2a:5f:9b:ce:
80:1b:4f:4e:4b:66:3e:01:81:32:7b:be:f4:cb:38:
35:bf:2d:67:df:d9:b1:da:0a:f6:4f:b3:ec:ad:3b:
f9:13:36:1a:05:d3:1d:31:cf:68:65:4b:94:f6:2a:
05:fc:75:14:b7:af:b2:88:d9:19:9e:44:1e:2a:fe:
97:7a:8d:98:57:46:56:eb:a2:92:4f:8d:69:2f:a3:
6a:f1:d6:8d:3c:f8:9b:63:e9:2f:ef:7a:cc:94:a6:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:26:33:38:FD:1C:09:02:FF:95:9C:DB:81:AB:33:5F:A6:BE:FC
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a3:7e:fa:8c:0d:f9:91:b3:7a:3b:3f:9d:08:26:b7:e0:51:
67:75:8f:8a:c1:47:cc:d8:e9:0d:d9:4a:eb:59:b7:df:0b:f8:
b5:ed:4e:77:bd:2f:5b:96:f2:30:a4:bf:d0:e4:0a:83:30:93:
54:e9:7b:3a:f9:e2:f6:50:c5:52:8d:7b:72:56:26:89:9a:28:
d7:e8:c1:a9:97:56:76:83:86:67:f6:af:ec:8c:86:85:c6:25:
61:c9:72:d1:80:d9:77:5a:03:ad:80:c2:60:b5:72:31:aa:d8:
71:1f:39:72:56:57:5b:4b:f0:a3:23:c7:6e:3d:77:fb:a6:07:
f0:d6:02:ff:9c:6b:9b:57:64:52:22:6e:9d:76:6d:1d:89:99:
33:95:09:10:b8:2b:08:96:29:c6:1e:a2:a3:84:58:3c:ab:d8:
e0:49:62:53:e2:36:c2:0d:55:00:bc:12:93:0b:81:13:0a:c2:
e7:d3:24:b7:59:43:59:b5:a9:fb:b0:a4:bd:2a:75:ff:ac:4f:
b5:7b:9a:04:5e:d3:4c:dd:46:7a:4d:4c:83:ee:89:5d:6b:76:
cc:8d:e9:c7:0c:2f:a7:06:51:50:60:47:d6:31:4b:77:50:98:
e3:95:49:8c:42:81:66:e8:0b:6b:48:46:7a:dc:4c:41:55:8d:
44:6c:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:49 2025 by rpki-client