Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: 7za8/Pq971JuMZanjLXAm+b2oF9REm1tmYe9IcZNo9g=
Subject key identifier: 17:2C:1E:3D:1F:B3:C9:ED:A3:B0:61:93:2D:B3:95:74:82:01:98:62
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01988E7D7640BF8DB33BE670D236D651C4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 11:00:43 +0000
Manifest this update: Sat 09 Aug 2025 11:00:43 +0000
Manifest next update: Sun 10 Aug 2025 11:00:43 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: IY6TnC9kkICc2VWCCs9objiaBlX5zpAcqj5ekkpjmJk=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:76:40:bf:8d:b3:3b:e6:70:d2:36:d6:51:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Aug 9 11:00:43 2025 GMT
Not After : Aug 10 11:00:43 2025 GMT
Subject: CN=172c1e3d1fb3c9eda3b061932db3957482019862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:72:e2:ed:6a:f5:95:e4:f7:e7:72:29:4b:
9a:83:f4:14:0f:97:47:50:10:5f:cc:7c:7a:bf:0b:
7d:05:95:d1:f6:ad:8a:e5:d3:c0:e5:0a:7b:81:1c:
a1:11:84:74:49:13:24:7f:36:df:51:99:26:b2:50:
f6:f9:ae:21:d7:74:c4:5b:49:52:46:8f:c4:90:c1:
f7:d6:aa:dd:22:02:a5:06:57:36:30:06:0b:76:e8:
51:c9:88:53:81:30:35:92:87:35:3f:33:3c:4a:03:
29:62:f6:d9:e3:85:71:7f:a8:07:2f:09:68:61:98:
6c:62:76:83:bb:1b:46:05:b8:92:94:1b:a7:19:de:
76:ad:dd:51:ad:e9:8f:89:5f:8f:66:aa:a0:82:c1:
82:9c:47:50:1d:4c:1b:24:43:93:c3:a6:99:53:ea:
00:9b:04:d5:3e:0a:dc:62:19:f9:d9:40:6b:7b:40:
d3:67:0b:85:f0:72:aa:3f:39:fb:8e:bf:9c:37:d8:
55:40:8f:cb:6f:48:31:2b:58:cd:c8:21:f8:f6:e5:
41:c1:b2:6c:c1:9b:a8:e8:d4:31:c6:55:f3:b1:3d:
98:8f:d3:80:59:ba:b3:fe:2f:73:74:67:f9:00:37:
5d:b9:3d:67:39:40:8a:c6:bd:20:f2:ea:50:50:9c:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:1E:3D:1F:B3:C9:ED:A3:B0:61:93:2D:B3:95:74:82:01:98:62
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:50:46:8c:9f:4d:87:eb:2f:7f:6a:fd:d6:af:04:e5:a8:
4c:ab:2d:fd:cf:79:36:5c:96:43:90:24:da:16:68:36:6e:0b:
bb:4b:13:27:89:36:e9:c6:2c:36:21:ad:14:40:f3:0d:ef:95:
40:45:2b:db:f4:de:f8:8b:c5:7f:9f:f4:1c:e3:29:48:0d:58:
60:bf:73:28:98:11:57:cd:33:3d:50:8e:52:4c:63:66:bc:0d:
45:bf:b3:a4:20:e3:94:a7:47:b2:1f:8e:e4:09:da:f3:41:23:
82:87:88:3c:d1:98:4a:1a:b3:38:06:d7:6b:59:45:21:08:87:
2f:83:51:0f:3a:b2:48:38:90:fd:78:c9:64:c6:a6:d1:ee:c4:
ae:97:68:f7:5e:ac:83:c1:31:2d:70:63:b0:3f:ed:10:4c:27:
a8:3c:b2:80:7c:d5:93:3d:dc:a7:89:10:e9:60:29:b3:c7:f7:
db:23:f0:84:bb:5c:6d:45:bb:c1:d9:60:51:20:23:5a:66:0e:
3e:b9:e0:c5:14:ca:71:08:33:31:b8:bc:3e:b7:8c:8e:ca:11:
91:25:22:ef:e1:a3:2a:93:56:fe:fa:87:ed:d7:f1:e1:c1:08:
af:62:4a:98:4c:db:eb:6b:6c:d3:73:a2:b8:e4:fe:d3:e2:ef:
37:4b:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:22 2025 by rpki-client