Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File: B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier: 5rEg1VdenftuEboYZ1ts0Lhk8zMphNsGMsycHkRyGz0=
Subject key identifier: 39:88:5E:3B:5A:42:66:43:BA:A6:24:75:05:9A:1B:DD:69:7E:85:93
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0199FD6AE22BEC0742927A3DF1D44976CB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number: 04D4
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: Yuq2JhVAfAHMoWz18VzQsXnA+jUgdtgzefXNTR4gsMs=)
2: BEs4jr5ihG6iRqRU5cUSDL5kRog.roa (hash: cWYPPJkN2Kgx8P4ZXPtPBFDG5DzBZcOtlwsZBu+Q2cQ=)
3: aLDoJgH4Nlxid6F2i52QQmHATOU.roa (hash: Upqlw/+QOVJ6e0/cJB4hrSuWN2UHeQkpcuVHfS+Mr/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e2:2b:ec:07:42:92:7a:3d:f1:d4:49:76:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=39885e3b5a426643baa62475059a1bdd697e8593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:76:82:3c:71:5a:a5:5a:20:99:1c:6a:a0:
a0:82:f2:db:91:89:28:2d:10:b8:20:1d:4c:01:f7:
0f:e2:8b:b7:37:f0:f6:02:a2:75:38:94:62:ad:69:
c6:c2:a4:73:a0:23:32:26:61:73:d1:29:3b:7d:6c:
eb:90:c2:a3:65:49:eb:f1:ec:3c:bb:45:de:a3:6b:
41:62:7a:f4:ff:bb:20:ca:65:0d:36:4d:48:b1:8f:
8c:6e:ef:b6:77:f8:48:5d:a4:85:9c:71:42:b6:b8:
2d:f1:f4:b3:0d:27:88:0c:70:89:1e:1b:bc:dc:cc:
71:4e:de:44:8f:d7:1a:6f:c3:08:f5:4b:30:bf:a5:
f1:8f:3e:43:d9:70:42:0b:75:9b:79:aa:16:23:1b:
01:a4:cc:81:30:4a:0d:f4:91:53:ac:8f:2c:3e:5f:
1d:e5:26:c4:ff:cf:c3:77:dc:a9:2f:69:86:43:56:
10:32:32:a6:04:b5:b6:c2:71:ab:aa:23:1f:61:12:
bd:13:03:c2:10:4b:8f:c6:f9:24:58:b4:fa:67:41:
6d:f8:bb:5a:11:22:dc:82:20:02:b6:90:e3:c8:50:
68:5c:95:bc:c0:30:09:51:d4:a8:cd:0d:43:b3:a4:
14:fe:8a:70:b1:40:64:20:35:3c:7a:e4:16:8c:69:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:5E:3B:5A:42:66:43:BA:A6:24:75:05:9A:1B:DD:69:7E:85:93
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:45:5f:c8:7c:95:2b:8d:b5:38:30:c8:f7:31:c5:99:c3:
03:c7:c1:bf:ab:36:64:e6:dc:cb:1f:07:1e:b1:9c:b2:b7:fc:
4a:1d:b8:28:4f:99:1d:48:c7:df:37:8d:26:d6:1c:9d:b2:78:
93:7b:37:56:ac:9f:32:2b:70:4c:7b:7a:cb:43:de:76:ed:89:
e4:6c:98:60:fb:59:17:1e:90:70:b2:6c:db:77:0a:7f:8c:64:
db:ee:c5:60:b6:14:8a:bc:69:e7:52:6b:a8:29:ca:1c:25:ae:
0f:92:4c:1e:fe:b3:1d:d3:6b:3a:f6:61:ce:19:df:24:7d:ef:
da:62:37:1a:2f:9b:19:5e:cd:c1:f8:c1:7f:5f:02:ce:19:1f:
f4:0a:54:45:a8:a9:51:89:70:d4:43:5d:fc:d4:e8:7e:2c:de:
8c:ac:73:3a:dd:1a:0c:58:35:ac:cc:8a:19:a9:2b:e5:2e:33:
ff:57:b2:c9:da:c3:9c:b6:a3:a8:d4:23:8b:e9:f6:bd:9a:41:
d8:59:25:c0:23:16:2b:9c:bc:69:e4:47:f0:1e:8c:6a:b9:6d:
a5:e2:03:95:50:f0:41:33:7c:37:fa:dc:50:07:1b:c0:93:4a:
08:e9:63:de:c2:d6:8c:16:e2:d0:10:92:aa:88:22:83:ee:61:
80:e1:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:30 2025 by rpki-client