Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: jPZGHFMhqzkqPJ6QiQ3gm6Qcv9Rx5Ewy8ET16RQ8eSU=
Subject key identifier: 88:DC:5F:89:8E:E4:61:41:7F:FE:CB:28:FC:84:F4:36:1F:4B:7E:F6
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 0198D6CD386AE56905F4BE3BB47C864120F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 12:00:30 +0000
Manifest this update: Sat 23 Aug 2025 12:00:30 +0000
Manifest next update: Sun 24 Aug 2025 12:00:30 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: DNNpBwGj/QFSHm5VCFUDuXb0qAhLFuqIvzvaY/ZZ890=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:38:6a:e5:69:05:f4:be:3b:b4:7c:86:41:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Aug 23 12:00:30 2025 GMT
Not After : Aug 24 12:00:30 2025 GMT
Subject: CN=88dc5f898ee461417ffecb28fc84f4361f4b7ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:e7:93:b9:ca:7b:e2:9a:8c:70:7e:71:6a:
e5:9f:ad:d0:37:dc:83:3a:ee:30:5c:61:a1:9c:59:
17:bb:b8:00:78:18:a7:ea:19:0d:8b:aa:5b:49:b7:
ec:30:91:a7:2a:68:3c:c7:8d:dc:71:76:34:71:2a:
a6:ca:ca:82:57:c7:48:7f:35:a8:64:b2:73:f6:4e:
36:aa:6c:f4:8a:8e:e1:49:c7:a9:03:b5:6c:c0:42:
23:ab:bb:7d:aa:20:c3:c7:77:df:00:54:97:d3:8e:
61:2d:2e:3a:32:81:2e:f7:d2:7e:14:ea:df:e7:17:
c6:c5:f2:75:3f:b7:c4:ed:9b:ec:19:7b:86:ab:8b:
46:39:f2:c9:e5:bc:87:3a:fb:6a:a0:ac:77:88:c4:
45:4b:6c:35:2d:6b:a3:50:76:8a:3f:cb:17:1a:36:
dd:70:33:dd:3e:d7:f4:60:bd:18:6e:0a:5a:74:04:
43:53:2f:5e:51:5e:91:50:5f:25:61:04:05:66:ed:
fe:a1:8c:11:d0:05:b5:83:9e:c6:51:2f:d7:bb:78:
49:27:47:2a:ad:e6:d6:7f:df:fc:7b:cf:d8:73:5b:
12:1a:81:4c:91:a8:d8:f5:0f:fa:9f:96:5c:c2:f7:
dd:9f:b2:f3:86:5c:90:9a:67:8f:da:cd:57:64:74:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:5F:89:8E:E4:61:41:7F:FE:CB:28:FC:84:F4:36:1F:4B:7E:F6
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fa:1c:bf:73:d7:c5:56:39:80:53:fa:12:46:61:63:10:bc:
8e:29:2a:eb:fe:f9:bc:7e:39:4a:bc:4f:4d:ef:79:8c:c3:24:
54:90:af:88:9a:3b:1b:18:25:c1:3a:12:db:b5:fb:f8:97:25:
61:8f:5b:94:8d:6f:14:d6:12:66:e3:7d:94:c2:d2:84:1a:59:
ed:8b:8a:f2:00:1c:27:f9:d0:96:2d:da:ac:8c:16:ad:8c:c9:
df:ee:4e:cf:8b:fc:fa:62:bd:83:8d:4b:37:7f:14:17:fb:b9:
98:08:3d:b5:55:c0:2f:7f:4f:53:8c:e3:42:59:ac:d5:57:2b:
b0:62:2f:5c:2f:c4:c4:a2:ee:7d:af:be:5d:9c:7f:9e:c5:de:
86:f5:fc:36:72:a6:6a:b0:9c:6f:22:c9:81:58:0c:8e:d2:f1:
da:c9:b1:33:51:c5:e3:53:24:34:94:c1:37:67:9a:ef:d2:1a:
53:9c:3c:25:62:66:49:b1:b9:20:ef:da:ef:f4:9d:fb:fc:34:
b9:b6:5b:bf:f3:13:27:ba:08:f0:95:8b:45:31:f3:67:f0:d7:
c4:11:af:ad:a3:4c:6a:72:3a:22:91:9c:35:95:e6:c7:92:a9:
cc:da:2b:1b:13:12:a4:db:92:84:af:e7:5e:3d:e6:01:b9:64:
ce:20:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:16 2025 by rpki-client