Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: jIMBSx82hQpUjK74QdFtjl7XChUOwMT8DjmvSEnLDmM=
Subject key identifier: E2:B2:32:9C:5A:FF:C4:E1:78:01:34:1F:1F:32:73:2A:CE:FC:51:7D
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 0198D4E0AB849DD17F537C51F5FCF485E26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0EB1
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: 00QxAl9M4eIYoWJFAy7AUWPHA8sMw3pqRSHo7WKKsEQ=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ab:84:9d:d1:7f:53:7c:51:f5:fc:f4:85:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=e2b2329c5affc4e17801341f1f32732acefc517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:ca:5e:5e:a1:c1:7c:68:c0:bb:d8:59:77:
73:e4:f7:d1:e6:37:41:81:c5:f8:9f:8c:9b:5d:d7:
2c:74:1b:4b:bf:9f:7a:d3:26:a1:c6:49:00:f1:cc:
13:0b:cf:18:d1:0f:e6:45:ce:90:78:1f:8f:68:89:
a4:b9:f5:9a:dd:9e:b1:37:19:82:39:92:43:54:7b:
8c:76:e7:47:86:ef:59:e9:e8:84:4b:8e:50:04:3e:
25:c0:5f:26:6f:d4:07:ca:f1:ba:b2:7b:3d:9d:5d:
9e:40:c2:50:2e:3e:71:a4:e3:a0:80:49:aa:c5:44:
98:6a:d8:89:f6:ae:59:b4:47:b9:5c:28:0b:e2:ef:
f5:ec:95:9f:df:8c:b8:55:55:85:25:0b:d6:79:07:
78:e9:c4:4d:88:9d:68:3a:60:77:96:96:c0:b7:b2:
b9:75:50:7c:d3:27:2c:68:4f:dd:10:ef:18:de:15:
b4:42:03:55:0e:42:30:b6:c2:cf:11:69:0e:7e:52:
66:36:f8:ad:3d:f1:93:86:e1:b4:1f:1f:ce:07:4c:
10:d9:1e:d5:97:71:b2:74:c6:c1:bf:50:f0:e5:d5:
13:1b:3b:7f:49:ad:5d:22:c3:65:68:be:f3:21:47:
0f:a8:8c:da:a4:33:92:4f:4c:bf:69:54:3f:67:30:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:32:9C:5A:FF:C4:E1:78:01:34:1F:1F:32:73:2A:CE:FC:51:7D
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:2b:04:b9:0d:6c:22:69:20:3e:a5:eb:b6:6a:14:c1:89:
0a:17:e0:06:2e:47:5b:fc:67:c1:30:80:83:37:88:77:4d:64:
79:e3:ee:d8:57:65:6e:29:14:71:f7:f0:89:24:3e:dc:b0:d4:
6c:6f:63:14:f4:c8:a1:b1:5a:0e:47:6c:77:81:3f:11:ab:b4:
03:5f:81:1f:36:ec:9d:93:de:ce:98:89:2e:40:b9:b6:fb:8b:
3c:ea:93:35:df:00:0c:d7:09:2b:7d:db:c5:2e:6b:5a:70:32:
2e:fa:18:20:67:75:f1:06:a0:cc:0b:65:b3:20:92:cb:16:6f:
3c:0a:a3:6c:a9:bf:c4:37:19:95:b0:3b:5c:b7:ef:85:3b:f4:
01:36:0f:9e:0e:c3:6a:38:62:e6:d1:e4:55:be:aa:a9:51:61:
62:34:5d:6d:94:56:23:92:24:a4:45:15:3e:82:90:12:c9:d4:
7c:bc:bc:2c:5d:d6:8d:41:a6:35:af:b8:cb:dc:23:48:18:01:
67:46:99:2a:81:b0:6a:37:9d:d6:c6:e2:a0:57:30:d1:6c:c2:
64:0b:72:3e:bb:6b:86:bf:a3:47:97:05:14:9b:d6:90:56:00:
8a:91:91:23:5b:9f:f5:d2:23:99:c9:1f:7f:8c:4a:54:d7:08:
0b:50:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:38 2025 by rpki-client