
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: X+CZoUYTHraempcNzKRiRgupGgrMxYVZumvc51sKCjU=
Subject key identifier: 7B:B2:35:13:4D:C3:87:32:47:3B:17:0E:65:73:DA:E0:C0:12:A1:F6
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0197B7EA366384AAFF330F5B96EABAB40394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0E74
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: OGqTEAKdRrEOXexSnWm1fb3+0AN6/M0K0BsS3kSy1Xg=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:36:63:84:aa:ff:33:0f:5b:96:ea:ba:b4:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=7bb235134dc38732473b170e6573dae0c012a1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:75:85:d2:3b:ef:a4:2b:29:cc:fd:25:ce:
ce:fd:66:f6:f6:e0:64:ff:93:c4:b2:2c:39:3c:f7:
2c:6c:58:f3:de:e4:15:1e:ac:18:95:b8:ce:66:dc:
0f:13:f3:b1:d8:33:f0:a9:49:5c:74:53:cd:1b:4d:
da:aa:3b:f3:5f:4e:ac:73:7d:0a:67:1c:7b:a8:52:
76:2e:01:f2:b9:61:b7:2f:d7:ff:98:7f:f3:b0:67:
e6:8c:76:c8:45:bf:5a:05:08:e1:a9:73:03:bb:cc:
8b:53:1c:8a:03:8a:44:c9:4e:79:e2:77:41:04:93:
31:af:cf:92:e3:3f:9c:48:7c:4c:61:97:70:75:ec:
56:21:d6:00:01:42:12:0e:c8:50:ed:0e:aa:5f:49:
79:68:21:ca:fb:a5:b4:2e:93:90:c8:69:97:36:95:
d7:8d:5a:7f:2c:c5:e7:eb:c6:40:0e:00:6f:ad:0c:
51:16:50:14:79:65:af:62:bd:8b:97:4d:e9:5f:4f:
3d:5c:29:71:1c:08:39:32:9e:78:77:1d:ba:7f:38:
08:b1:52:ef:1e:9a:89:32:c2:d7:d7:e7:3f:ec:e4:
3a:26:c8:38:6d:37:3c:2f:05:ae:75:fd:86:83:00:
c9:6e:01:87:47:24:ba:c6:83:b1:14:1c:4a:61:cf:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:35:13:4D:C3:87:32:47:3B:17:0E:65:73:DA:E0:C0:12:A1:F6
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:fa:b3:67:a1:47:88:e2:7f:df:f3:d5:e2:f8:7c:ef:d1:
6d:19:7f:05:5b:74:68:58:dd:78:90:e5:10:ce:11:aa:dc:94:
55:54:21:c6:2e:cd:29:85:42:c2:fc:53:db:20:e5:5a:61:6e:
8b:73:fd:5b:4e:38:60:17:26:6b:b1:9a:e1:49:64:2d:63:d7:
5a:63:e3:f0:af:63:eb:58:b8:b1:c2:58:8c:7c:a6:54:c1:e0:
87:b0:15:a5:cf:03:f0:3b:89:27:a0:07:fb:b2:6d:7b:ff:b7:
e9:ac:14:74:e7:0c:ca:e5:51:fc:89:de:3a:b6:02:d4:b4:e9:
1a:ed:83:d5:3d:07:85:43:59:72:25:c8:78:f1:5e:75:79:8f:
c7:1a:77:50:8d:a5:54:35:62:17:4e:33:d8:eb:da:06:fe:96:
51:47:c1:c6:e0:82:87:1e:a0:0f:4c:77:af:9f:58:41:46:db:
7d:bd:3d:5b:e6:92:aa:61:d1:21:08:52:b1:b5:87:a0:b2:ce:
e5:0e:64:31:cb:a7:d9:86:d5:d2:05:7b:21:bd:5f:ea:e0:42:
ab:9f:1d:0e:46:dd:74:a6:2d:d0:ba:df:23:15:f8:4d:c9:dd:
cc:c5:69:a0:24:52:94:40:4f:83:fc:cb:88:0e:6f:90:94:3a:
a8:fb:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:38 2025 by rpki-client