
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: WcTk7vypOtBvXmrOg4rZcVolmcE0qy4HKVmb4WSR7RU=
Subject key identifier: FF:7D:16:8A:A7:60:E5:A2:63:1F:8C:C6:06:80:7E:A5:16:F5:AA:97
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 0197B9337D5481B0B4A6474AF2B837505A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 01:00:48 +0000
Manifest this update: Sun 29 Jun 2025 01:00:48 +0000
Manifest next update: Mon 30 Jun 2025 01:00:48 +0000
Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: ybe5C282LhD30iT8bNKoMfpj8wp+/+X90g/o7tqrDoY=)
3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:7d:54:81:b0:b4:a6:47:4a:f2:b8:37:50:5a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jun 29 01:00:48 2025 GMT
Not After : Jun 30 01:00:48 2025 GMT
Subject: CN=ff7d168aa760e5a2631f8cc606807ea516f5aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:aa:65:3b:46:4a:3c:65:ff:52:c4:32:cd:fe:
ff:62:6c:eb:38:c9:0e:ed:28:19:76:43:2b:49:50:
81:f0:0e:f2:d3:13:d4:85:b3:2a:f6:26:0b:17:75:
a2:35:fa:88:77:8e:cd:cb:7d:cd:c8:2b:d0:af:66:
98:7e:29:f8:69:fd:30:ea:9f:5b:a6:58:49:27:37:
aa:2f:97:72:a3:9b:d1:24:2a:f0:ad:35:e1:ab:67:
68:f0:71:22:9e:ed:c4:c5:95:8c:4d:0c:30:ff:be:
1e:32:5d:2f:ad:73:e0:93:43:3f:bf:63:79:fc:eb:
c6:a2:53:68:08:50:41:97:33:8e:20:be:a3:6f:a5:
c6:cd:b8:64:40:35:d9:7a:a9:ee:59:4d:60:f5:d3:
da:d8:15:35:4f:af:56:3f:03:65:cd:85:29:63:e0:
82:9b:8f:b2:2d:98:45:73:6b:f1:51:c2:af:fb:b7:
8a:50:a1:4b:69:86:4a:78:df:c8:13:fd:ff:f9:72:
fb:8a:2b:1a:7e:22:ee:65:a2:6c:6c:a8:39:63:96:
d1:78:69:e5:1a:cf:4e:19:34:c2:80:99:7c:bc:af:
8f:9f:53:0c:00:fe:a8:a3:ef:e3:a6:9b:ff:88:38:
0d:e2:e7:24:0c:1c:66:18:71:fe:ef:bf:7f:ec:ff:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:16:8A:A7:60:E5:A2:63:1F:8C:C6:06:80:7E:A5:16:F5:AA:97
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:ad:53:db:13:7c:90:6a:d2:9d:55:2e:2c:7a:b3:7f:fb:
8a:77:90:9b:a1:cd:50:d9:5a:eb:33:9a:74:0f:f1:bc:59:25:
fd:1c:ae:3b:4b:80:77:6f:3a:9b:67:20:83:e0:ed:e2:70:23:
38:4d:42:0d:f7:71:36:5e:7d:36:61:f7:b6:38:8b:ef:f8:17:
17:83:f1:56:29:94:2c:64:c1:58:3d:ef:a1:b9:3c:85:1a:c7:
b6:ef:52:5c:64:d2:b1:77:4f:96:10:03:00:52:9a:9d:d4:6a:
1e:22:3e:29:7a:3a:68:ef:9b:44:d2:cf:6a:86:ef:10:79:40:
38:7d:28:1f:44:2c:36:6c:30:97:3a:12:19:40:1d:33:73:30:
3f:c1:8d:b5:19:cc:5d:78:17:6c:46:b6:3e:bb:47:18:7d:0a:
f3:ef:eb:39:ff:d3:82:4b:48:24:08:70:ad:b6:66:f5:28:4c:
a8:78:d1:b8:c2:70:15:54:5f:a3:f2:a2:58:5e:8c:5f:33:0f:
2e:00:a2:f2:c7:89:5c:20:09:ce:82:e7:e1:65:38:45:b8:4b:
8b:23:27:28:92:1f:bd:1c:f8:f7:7e:41:c3:2b:fd:69:73:0a:
bd:d9:67:1a:7e:16:25:f2:b2:41:03:8f:5b:49:1b:60:98:47:
c0:60:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:05 2025 by rpki-client