Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File: B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier: kova+PFpE8DiVGOuj1gwBwaim1WXV018a0qGhv1fiqs=
Subject key identifier: 24:FF:3B:56:BC:82:C4:1F:78:F9:8E:0D:06:BE:34:C8:2E:62:D0:9F
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 0198D5BBF2D72B56D84464BF4376B0732D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number: 1032
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: unN61b+DMvtbp3LeYec+tHUyEnptx1O5hdiCRhRjsKk=)
2: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f2:d7:2b:56:d8:44:64:bf:43:76:b0:73:2d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=24ff3b56bc82c41f78f98e0d06be34c82e62d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:61:94:bb:ab:0c:5f:4a:04:1a:77:9a:20:
66:09:94:9b:b3:6e:8e:e1:7c:1e:64:84:64:ab:dd:
9e:af:02:86:0a:88:a6:df:e3:de:84:95:5c:ac:d2:
c4:38:a0:13:6a:1f:8d:b5:85:be:ff:1c:b1:d3:e2:
cc:1e:4d:d4:29:5d:4e:88:b7:d2:8f:d0:4e:b5:e1:
41:33:82:27:21:57:35:dd:44:02:4b:fe:12:df:a0:
94:f0:7f:1d:f1:4b:df:eb:bf:a2:00:1b:dd:46:aa:
80:4a:06:e9:ec:f3:b2:0a:72:0c:f7:2f:fb:dc:d2:
52:65:bc:ca:cc:9c:46:88:7c:5a:cf:dc:34:b5:96:
99:95:3b:12:34:2c:96:c4:0b:64:b7:a3:a7:86:f7:
8b:81:4e:44:08:ec:fb:eb:0e:e2:eb:f6:37:7c:e2:
8d:76:82:5e:82:ae:db:14:fc:a4:3e:13:05:b8:a3:
57:fe:6b:cc:25:35:8e:c8:93:e0:6c:a4:a5:1a:33:
d6:d1:05:42:8d:0d:44:16:2c:28:9d:da:e4:4b:1e:
c4:9d:15:d3:f4:93:82:3e:8b:76:76:66:40:87:c5:
5c:46:c8:b2:2e:a8:99:d5:fe:62:30:a2:1c:2c:49:
08:3f:50:86:57:4d:8f:f3:df:32:8c:2b:64:73:f8:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:3B:56:BC:82:C4:1F:78:F9:8E:0D:06:BE:34:C8:2E:62:D0:9F
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:0d:8e:cf:ec:e3:7e:55:b6:7d:5d:4a:f1:9d:b8:8a:19:
e7:8c:c5:c4:57:94:bd:c5:5c:bb:f2:5a:88:5f:b8:24:8e:2e:
b7:bf:a4:42:a5:64:52:5e:6f:c4:96:ca:af:41:ab:31:4d:60:
26:c8:b2:69:bc:80:f2:65:32:e1:60:75:8c:5e:a4:be:97:b1:
f4:83:d9:57:4e:c0:c0:39:2e:72:af:e0:64:22:ce:65:5f:8f:
67:a1:ea:46:bd:9b:0c:f2:fa:98:76:06:bd:5e:95:82:b0:7d:
e1:8a:57:67:87:a0:e8:dc:82:eb:96:0c:f3:ed:27:95:df:50:
4f:a6:7b:33:e3:d0:5d:b4:2b:10:87:06:a8:b4:da:6d:23:22:
73:d4:a4:3d:7d:c6:5c:b2:24:df:93:22:5e:a0:fe:10:f2:57:
a7:c4:f4:21:10:71:72:60:1f:12:eb:0b:18:bd:4d:63:b9:1f:
f1:cd:2b:f9:82:5c:75:6e:c7:c4:52:19:f1:cd:2c:90:6e:8a:
85:d2:0f:bc:be:d0:95:3a:43:c7:78:e2:f0:18:3d:2e:87:91:
7e:31:fd:bc:8f:f6:2c:76:42:ea:83:31:ff:2c:21:cb:08:63:
06:6e:e7:29:5f:64:28:8f:70:e5:60:7e:b6:02:b8:b3:fb:e5:
94:8e:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:40 2025 by rpki-client