Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: 4Vmrf35dmozDbnncOwlN8+80osFujuRNcO+Z/zLgGT0=
Subject key identifier: 69:CA:50:7C:BF:A1:52:02:5B:B3:D6:3A:88:26:01:52:3C:E0:51:53
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0197B74521BD785799E7504819F5B94512F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 063E
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 1g6IcfNhRHM8BqAZozHKEJsarv6hoRkDyXxm1b21lYs=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:21:bd:78:57:99:e7:50:48:19:f5:b9:45:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=69ca507cbfa152025bb3d63a882601523ce05153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:f3:24:70:0e:fe:ec:db:75:9c:76:2e:35:
b3:f8:48:a7:56:35:4d:d6:f7:fe:4f:5f:3e:dd:cf:
f2:0b:b2:02:3d:df:f2:f2:29:77:15:b7:49:79:80:
e0:ce:99:c7:20:1d:89:7e:6f:f5:2a:63:a3:e0:d1:
7a:29:4c:3b:00:0e:05:82:74:e6:7d:10:3a:df:6e:
67:ff:63:bf:23:31:ab:ab:9b:1d:f7:52:81:f4:41:
a6:f8:20:7f:2d:56:4c:fe:96:4c:68:f5:2a:1d:3a:
5d:04:7c:cb:a0:9d:fb:ba:e4:91:df:a6:01:51:6b:
61:ff:e0:ba:08:9e:05:42:61:9e:96:8c:80:ab:7d:
5e:19:48:60:45:7d:48:06:0c:6f:8b:1a:e2:a4:6f:
c4:9a:ab:c4:e9:33:4b:ed:a3:7a:99:03:cd:48:1e:
c1:f1:83:b8:a2:a5:22:3a:e3:39:97:64:4d:8c:4d:
c0:71:7f:48:e7:b6:5e:a4:da:95:8d:a7:c6:74:2b:
7a:ed:c4:5d:8d:ad:90:e3:a1:87:cb:66:27:03:03:
99:a4:32:ff:66:d0:4a:f3:4a:ed:a3:04:49:39:0b:
dd:f3:60:06:04:1a:96:00:83:75:50:fc:11:81:d5:
28:42:89:c8:dc:31:c3:b5:e6:98:49:e2:c4:e3:ec:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:50:7C:BF:A1:52:02:5B:B3:D6:3A:88:26:01:52:3C:E0:51:53
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b1:5d:3a:64:3a:5c:23:f4:10:d0:db:5c:95:b6:58:4e:02:
49:df:8e:4c:c1:73:e9:06:3d:49:d3:e0:4c:fe:00:f7:eb:ce:
d5:c4:11:e2:90:29:27:69:7b:7d:87:b4:4a:e2:77:09:9f:2a:
6c:31:30:f6:2e:e8:fb:5d:0f:85:cb:e9:50:d1:a3:27:b9:f5:
a2:d2:b9:bc:d0:38:ee:b6:86:ef:19:e5:99:f5:b1:34:27:af:
48:83:73:97:ca:9c:b4:44:be:9c:f5:f6:9b:e5:84:5e:80:f1:
ff:56:f3:70:3a:5e:d3:ce:20:51:8c:5d:67:c1:20:d4:e3:3a:
e6:e5:e8:e6:f7:d7:95:e0:56:61:87:76:b7:51:cc:3c:c2:b4:
ac:6e:9e:d8:b1:bb:9d:1b:1d:e9:fd:7c:43:d6:e4:8d:d8:58:
96:60:e8:e5:b8:8b:00:5f:0e:a0:75:6c:fd:8c:fc:f2:3b:af:
ac:30:e4:f3:57:0c:6d:b2:f7:c6:bc:9e:53:7b:c2:84:e2:0d:
e9:50:0a:1c:a8:62:b1:02:41:55:21:e7:0c:2f:c1:31:fc:9d:
2c:ad:82:fe:e9:66:a3:37:9d:23:4b:77:66:10:51:4f:e1:56:
25:1a:63:73:78:f4:fb:61:44:f0:f0:d9:9c:61:3f:6a:4a:09:
5c:da:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:04 2025 by rpki-client