Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: OT+4ysxRZVbsMARCCsUCFSdrqKJ+eUuzwqyL/M1z+qw=
Subject key identifier: 9C:70:44:84:7C:79:EE:E6:C7:04:4B:03:B4:32:9B:AE:51:48:1E:15
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0198D472509ADCFE83DAAD24EBD280898678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: DLcdZKy1+Vpy/jLz4506S25rVHjCBeZhZwW8j/WTNkU=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:50:9a:dc:fe:83:da:ad:24:eb:d2:80:89:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=9c7044847c79eee6c7044b03b4329bae51481e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:6d:35:6d:ca:47:9b:b4:7b:48:2f:db:86:
1d:bc:28:7a:81:7c:c4:ee:cc:36:70:df:70:ec:a6:
0a:e1:ee:47:bb:91:66:a2:ba:59:66:c8:fa:01:af:
b3:f9:0b:f1:66:55:d4:9e:74:69:c9:7d:69:63:f6:
7d:db:4d:5d:a5:d0:28:91:51:fd:87:d2:82:da:a4:
5b:df:0a:99:47:63:8c:da:18:63:0e:f7:fc:f4:04:
1b:d3:27:25:5c:62:38:3e:0e:35:05:59:67:d7:cd:
fa:be:91:7c:20:aa:0d:e7:fe:38:4d:89:6e:a9:cf:
1b:f5:41:1b:a3:8d:f6:64:4a:9a:02:98:2a:80:b5:
f8:9e:c0:ed:e7:ad:53:1d:17:ec:b4:18:02:a3:8a:
16:54:08:2c:78:ad:83:05:75:f2:a2:25:35:75:62:
1f:43:80:61:3f:db:34:46:4f:db:48:81:89:01:4d:
d1:aa:5a:e0:c6:b6:e3:c9:72:6f:fe:96:45:ab:97:
3d:a5:62:33:92:dc:af:56:3c:02:76:a1:ed:5f:32:
14:17:96:27:b9:7a:67:f2:a1:f0:55:51:79:07:fc:
07:3c:25:46:05:a8:45:f0:63:a6:39:43:55:a8:9a:
f2:3a:c9:d2:76:58:f7:cf:e1:1a:5c:7b:6c:e3:73:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:44:84:7C:79:EE:E6:C7:04:4B:03:B4:32:9B:AE:51:48:1E:15
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:26:13:74:80:03:17:13:87:ae:86:86:ec:24:f5:b0:9f:
d2:c4:ac:0a:dd:dd:0d:81:04:06:a5:60:fd:0a:d1:de:7f:ae:
c3:4e:bc:94:be:8f:74:15:9c:41:4f:d6:0c:97:8d:a9:c2:df:
b0:9b:72:3b:d1:8f:9c:6a:5b:f0:18:53:6e:6c:e1:7e:cc:c2:
4e:57:ca:ed:73:08:c6:54:02:4c:84:d5:b1:6e:57:14:c7:01:
ed:ed:94:8a:7d:a8:e9:95:75:42:29:d3:0d:9b:67:69:09:c6:
6b:63:9f:92:53:40:13:5d:d5:36:c3:09:81:69:72:8e:3e:5f:
ff:9f:ab:65:a8:7b:0b:3f:b1:89:4c:ba:f1:59:4c:22:89:17:
d5:69:f6:1f:1f:9d:8b:3d:08:27:52:ad:bb:0f:f8:cb:70:6e:
d7:6a:74:35:ea:76:43:5f:2c:53:00:2f:69:71:6b:10:28:90:
a8:0b:3b:72:b1:53:ba:2e:37:47:13:f8:92:f3:37:3f:9e:18:
fd:b2:f6:16:16:32:4a:31:9d:9f:00:c5:4f:fb:ad:f8:09:20:
d6:1a:5a:de:79:03:47:13:02:48:84:16:21:4b:55:1c:93:78:
c4:f5:b2:af:9f:98:26:e4:96:c2:c1:cf:f5:98:ef:2f:a1:1a:
90:33:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:23 2025 by rpki-client