Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: W/GcoscUFld3b5XbJ1/McDp3Ox+yIGAuWxAoDJfXyog=
Subject key identifier: 4E:38:19:1B:A2:AE:F0:D4:23:0A:B5:39:F3:6F:4F:84:0E:70:C2:5F
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0198D9991AD0292D4F8FFD195E9A59DE66C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0F0A
Signing time: Sun 24 Aug 2025 01:02:26 +0000
Manifest this update: Sun 24 Aug 2025 01:02:26 +0000
Manifest next update: Mon 25 Aug 2025 01:02:26 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: LetsCF2V9fUsoLs8JqBBN2kA26sXc/ybmcjNi17d00w=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:1a:d0:29:2d:4f:8f:fd:19:5e:9a:59:de:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Aug 24 01:02:26 2025 GMT
Not After : Aug 25 01:02:26 2025 GMT
Subject: CN=4e38191ba2aef0d4230ab539f36f4f840e70c25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:45:35:bd:25:eb:3c:8f:9b:b6:52:97:ad:
69:a5:5b:0d:1a:d2:7b:95:b9:0d:f2:b0:f6:62:3c:
68:f5:12:dc:9f:e1:f5:46:25:17:af:bf:b7:d7:19:
e1:04:34:91:f3:fb:70:f0:d0:df:29:e3:21:3e:07:
c6:83:82:98:6e:ef:83:a2:c0:71:72:f7:06:6f:73:
5d:f9:47:81:28:36:db:57:47:44:78:6f:d1:42:33:
35:70:81:c1:93:df:72:78:97:a0:03:41:16:58:d1:
2f:01:ad:51:8c:13:b8:1d:c2:39:61:7e:2d:7d:c7:
ed:8d:96:ee:40:28:2c:e0:ed:41:b2:4a:9b:26:c3:
9f:07:1d:ff:12:15:27:64:2a:d5:60:5e:b8:1b:1e:
30:be:04:93:29:65:eb:dc:12:c1:01:33:5d:04:ec:
c2:4e:c6:ad:67:d2:30:15:9f:4d:c1:b0:44:35:18:
c6:03:64:ea:bd:6c:57:10:b0:3d:7b:70:7a:69:09:
cf:9e:01:01:5d:66:ee:2f:4e:aa:f0:5a:7a:ba:94:
89:d6:41:6d:40:ed:fe:8a:fe:99:5c:59:c0:a0:d3:
b6:04:f5:48:72:5c:28:10:58:48:2e:4f:fd:4f:ad:
28:58:00:ca:2c:7c:f3:03:0a:aa:b1:5a:99:21:99:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:19:1B:A2:AE:F0:D4:23:0A:B5:39:F3:6F:4F:84:0E:70:C2:5F
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:a4:46:3a:90:9f:14:c9:93:44:6f:5b:01:ac:11:2a:95:
70:6a:21:33:4f:ae:9e:46:96:02:05:3f:13:a7:3a:ac:05:4e:
3e:d8:a2:87:17:04:0f:ab:f3:c3:dc:48:ee:4b:36:58:9b:b8:
78:9e:ca:8a:35:ac:fa:2a:58:4c:d0:06:49:35:cf:56:59:30:
b3:49:7f:76:99:6a:d3:c3:55:cb:d7:a6:ea:3d:c3:ed:a2:61:
64:e8:6a:87:fe:28:e0:13:7d:7c:06:b9:c7:a6:90:be:80:c7:
70:4c:de:a0:14:f3:e7:db:5b:bc:fe:49:f1:a2:08:a2:0c:3a:
61:0f:99:d3:da:17:ef:e6:9f:8c:fd:b8:9c:8a:e1:f7:fc:2b:
46:e3:ea:93:80:b0:ce:c6:82:ae:3a:63:cd:70:7f:58:d3:45:
59:ea:ce:61:00:84:b0:bb:f5:f3:31:28:2d:5d:e5:6e:a7:b7:
27:7b:5c:92:df:d0:42:68:c0:21:bc:78:68:a8:c6:47:f2:27:
14:15:b7:a7:fe:09:4c:83:1a:cb:19:8d:d7:2e:9d:22:b9:99:
6b:cf:90:23:c0:ec:a9:ba:0e:82:cf:62:ff:80:67:87:be:4e:
db:26:8c:cf:91:a3:53:bd:a4:a6:05:e3:8c:62:e8:94:22:7d:
b6:a1:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:14 2025 by rpki-client