Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: tsDAGO2sVCBY1ZNwm6Hy+ovtRIHeTWWk+ZOq8rIzt/s=
Subject key identifier: 45:D7:1D:B5:64:A7:11:73:89:F8:52:9E:CD:2C:93:3C:4A:77:0A:1B
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 0199FBEABE04A7431BC0F25CBC64E87A7141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: pVJ+f5khma3Xbboo78xlu2hD15Esa9g5ntgESZ3SRWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:be:04:a7:43:1b:c0:f2:5c:bc:64:e8:7a:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=45d71db564a7117389f8529ecd2c933c4a770a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:e7:4a:78:66:1f:9f:62:11:2d:5f:1a:0a:
35:de:92:b5:32:fe:ca:80:82:87:d0:bb:ea:13:68:
1e:d6:b1:ff:3b:51:d3:4c:16:4a:9b:54:29:5d:20:
72:94:85:25:d9:83:45:ce:20:45:70:8a:9a:a7:8f:
b1:cb:d7:04:9b:fd:95:64:23:14:95:c2:41:eb:57:
03:8c:96:85:d4:62:89:5d:53:53:70:89:a0:11:bb:
73:7c:07:ed:f0:cd:04:41:3d:ad:53:06:4e:96:a4:
32:b8:78:80:a6:2e:49:9b:f9:5f:12:d6:76:85:3b:
ea:b2:ca:24:ff:f9:ed:07:af:d3:bb:f8:08:c6:af:
30:66:08:1c:47:38:4a:57:b9:44:2b:ee:f2:0b:4b:
f0:a9:a4:2f:ed:90:b4:23:50:19:e2:5c:af:4f:d5:
ba:58:ee:74:cd:a9:c5:09:ea:fc:3e:48:c1:9a:05:
16:33:96:f0:5a:fa:eb:f6:40:bf:01:20:d3:07:db:
06:c8:38:37:0c:07:df:ac:cc:70:5e:c0:96:af:b8:
58:89:61:d0:60:84:48:56:96:6f:9e:60:6f:89:6f:
0a:cb:91:66:eb:96:fa:0b:16:f8:ec:3e:39:19:fd:
64:97:e7:bd:a5:e7:5f:8a:db:3a:5d:bf:d9:98:85:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:1D:B5:64:A7:11:73:89:F8:52:9E:CD:2C:93:3C:4A:77:0A:1B
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:04:ca:cb:96:48:ef:6b:ba:33:38:96:66:11:db:58:db:
72:e4:f0:ba:92:6b:59:97:00:04:ab:4f:39:c7:49:c9:ab:11:
43:cc:1e:c9:d4:ec:b5:66:7d:24:cd:d9:15:90:b1:47:68:9d:
41:6d:90:70:04:b4:23:df:9e:2f:60:be:12:00:8a:4e:74:ca:
b7:0a:b5:49:d5:8b:a0:bc:ef:9e:40:8f:bf:f2:89:a8:26:62:
63:3d:3a:a3:f7:5d:3a:db:84:e2:30:9a:d4:02:3e:da:5a:7d:
66:fe:4d:54:6a:97:65:30:51:8b:06:b7:b4:da:13:be:eb:10:
bb:f1:4d:7b:65:9a:13:6a:2c:5e:a7:1a:ae:5a:6b:59:81:4a:
de:46:70:0e:d6:f8:ec:c6:b7:81:f1:52:5f:b8:da:70:85:0d:
a8:39:34:a7:41:ef:03:40:c8:b4:60:8b:f9:95:e6:c3:a3:2c:
0f:df:c2:f0:4f:73:17:95:f7:fa:96:4f:d3:27:27:1b:e6:90:
72:04:42:5c:86:71:27:d6:c0:b4:25:34:d8:6c:59:c8:83:d6:
e2:a2:ff:97:7b:23:e5:2a:e4:30:ee:b0:84:e9:8f:f4:95:73:
1b:c2:21:8d:51:c2:a6:42:fb:0b:61:53:a7:bb:40:84:9c:c8:
c4:25:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:37 2025 by rpki-client