Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: 9kgzbL0MT+QervzRQZC0NxEqs5I1pxOyjZUF3Bk+X5E=
Subject key identifier: 5A:AE:80:9D:7F:50:77:C7:2A:61:2A:FF:D7:89:8F:CC:AC:FD:46:A2
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 01987C408AFA3E749B542284D90079F3DF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 04E2
Signing time: Tue 05 Aug 2025 22:01:01 +0000
Manifest this update: Tue 05 Aug 2025 22:01:01 +0000
Manifest next update: Wed 06 Aug 2025 22:01:01 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: OQYt4kiYvLDOG8jvG2wau6TR+HpEas8Rmk4pXn+SXmg=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:8a:fa:3e:74:9b:54:22:84:d9:00:79:f3:df:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Aug 5 22:01:01 2025 GMT
Not After : Aug 6 22:01:01 2025 GMT
Subject: CN=5aae809d7f5077c72a612affd7898fccacfd46a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:83:71:cf:a9:2d:b6:a8:21:fc:05:f4:55:
34:aa:1a:c9:68:e4:e0:16:2c:e6:26:d4:46:a5:35:
ab:1b:a4:17:05:63:0a:9a:5d:1e:3f:c6:f1:b7:b6:
58:56:a0:7d:94:71:70:6c:91:c8:cf:03:d2:e2:d1:
a6:4f:e4:a2:37:32:7b:96:74:b7:15:27:2b:be:b6:
52:27:cf:de:b1:4c:94:6a:da:c9:3f:52:4e:18:d6:
5a:f4:e6:cb:59:07:d5:c2:d4:be:be:1a:dc:5b:09:
8d:8e:39:e4:cc:36:cf:d7:bc:07:68:e0:26:af:cd:
13:3e:7b:c9:da:77:12:52:4e:d5:87:97:30:0f:eb:
a6:11:e0:ad:e7:49:78:6b:64:7c:a4:d9:7e:bb:26:
98:6c:d2:b8:43:bd:d5:e5:d3:21:8a:5b:42:30:a5:
63:20:a7:a1:ef:ac:b3:37:2f:9e:d9:d2:a4:c6:fa:
4e:24:ea:14:70:ba:47:39:54:2b:40:ff:49:dd:c2:
3d:29:0b:5f:b7:fc:9b:f7:6d:2d:7d:a6:15:7a:9e:
9f:5e:cc:21:76:ac:b6:f3:6e:50:5f:42:8c:2e:eb:
32:f1:e7:fa:88:61:d4:a2:a4:0e:04:99:85:c1:36:
d8:59:0a:50:86:5f:0c:80:41:85:17:05:08:ec:11:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:80:9D:7F:50:77:C7:2A:61:2A:FF:D7:89:8F:CC:AC:FD:46:A2
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2a:3a:b7:4e:d0:a3:dc:91:f7:11:8d:4e:fc:37:3c:76:97:
74:e3:08:62:ba:e5:ab:0f:74:f8:e0:f7:72:13:73:26:e2:f7:
27:12:5d:f9:9c:1f:8b:9b:25:23:74:4c:2c:cf:43:0b:00:59:
75:87:c9:49:a4:8e:a2:19:b8:00:4e:3a:5a:15:22:b8:4a:44:
ac:9b:17:21:da:45:d9:dd:c8:73:86:35:a5:9d:5e:f2:10:7b:
0a:12:a3:4c:b3:89:5d:ce:8f:f4:60:c0:e5:ea:9d:c2:67:49:
9d:4c:7b:2d:49:c2:fa:75:31:5b:00:b6:77:af:26:dc:73:c5:
68:aa:64:b6:0c:8c:da:c8:92:9a:5c:1f:73:d1:77:4f:8e:89:
02:6a:80:4f:c9:07:d7:cd:65:e5:14:3d:4a:6d:13:37:06:2f:
3d:44:07:0d:39:fb:82:35:c3:1e:a2:1d:71:9b:dc:cc:a8:89:
0f:f1:eb:bb:78:6e:26:d4:83:05:ea:be:c5:e3:40:05:f6:f6:
e2:45:27:c4:9c:aa:92:b3:79:2c:8f:bc:d9:ce:1c:4e:96:76:
18:07:97:e8:b9:95:c6:0c:eb:70:64:b3:1f:c9:54:d4:02:4c:
ff:0b:bc:17:b9:aa:75:a4:94:03:87:07:b7:9b:a1:68:52:20:
db:37:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:24 2025 by rpki-client