
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: 7/90aTKOjJGJ7xHKq8NF0oyaDyn1HB1INMwWJEPqJc0=
Subject key identifier: A8:B8:5F:14:9A:36:57:FF:89:33:19:23:DF:9F:63:8A:B5:69:74:08
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 01987418FD79B33745CD363E03B7F04FCA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0C9B
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: oDWx3xbB0my2YxSZaB4uO/0gtuuyYMT0zY4F72ZpL4o=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fd:79:b3:37:45:cd:36:3e:03:b7:f0:4f:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=a8b85f149a3657ff89331923df9f638ab5697408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:6b:87:d4:4f:54:88:58:1d:4f:d0:dc:49:
65:4b:67:8a:5c:d2:96:c0:18:5d:6a:32:2a:3b:41:
18:8f:b3:bb:0d:00:98:7e:13:e5:af:f9:f9:e6:dc:
26:90:e1:f5:d0:22:e2:2f:c8:fc:b4:a8:96:b6:ad:
f4:c6:f9:ba:96:28:6a:4e:b6:4f:13:13:c0:17:74:
7e:a7:ed:84:b1:4f:fb:70:47:bc:46:7c:49:20:18:
1f:58:c5:91:04:c9:aa:7a:49:41:1f:3c:33:9d:9b:
d8:92:80:cc:6b:99:c8:f0:3b:0b:47:64:e9:c8:fd:
81:31:f6:3c:3f:a9:d9:1e:53:d5:fc:d7:02:0e:7a:
6e:cc:3f:a4:36:17:8e:4b:06:b4:05:ed:9b:a1:c6:
41:9a:ed:28:ff:a8:16:50:25:99:54:27:fd:70:1f:
67:c5:3c:cb:65:e7:f2:ff:0c:29:02:5d:d4:bb:d8:
50:10:13:de:8a:6e:bd:d2:6d:64:75:23:cf:cc:41:
96:27:d1:82:de:34:ff:f9:27:c5:77:e9:04:73:cc:
7e:23:67:f8:bd:d3:5a:f9:0b:b6:b1:08:7a:d8:ae:
c7:f1:c5:9d:7a:dc:5d:4e:7f:7f:0f:47:b2:44:a7:
fe:ba:c7:cf:d2:fe:8d:8e:2c:63:d8:27:91:2c:b6:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:5F:14:9A:36:57:FF:89:33:19:23:DF:9F:63:8A:B5:69:74:08
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:4e:67:6f:52:e6:97:5c:93:76:87:8a:6f:0e:29:5b:c4:
f2:aa:c8:64:56:14:85:98:09:88:df:25:5c:b0:bf:99:95:46:
5c:4c:df:8f:39:a1:80:3b:ec:62:6a:cb:0d:5f:01:1d:2d:ee:
5e:3c:83:12:28:0d:4f:f2:e6:34:a8:26:65:c7:5b:f3:1e:65:
3b:b9:4e:cb:f1:99:fe:c2:67:89:40:cc:6b:83:22:a6:52:a3:
97:2e:dc:b3:2e:e5:63:6f:d9:17:73:15:1c:61:ab:d0:cd:28:
2e:23:16:d0:7d:67:f9:26:7e:24:c6:6a:7e:20:4e:35:b9:34:
67:68:6e:d2:01:c4:c5:64:52:1e:35:30:d8:cd:db:72:fe:61:
b9:7b:13:36:4c:3d:15:28:86:9a:28:24:74:b5:63:be:2d:56:
d6:b5:f3:b3:02:c7:f0:10:76:54:74:39:1e:a2:02:f8:9b:b2:
a8:1a:2a:01:7b:b4:e4:cf:68:30:f7:91:7a:83:5e:8e:c6:4e:
bf:9b:a8:21:3f:bf:d8:70:64:df:1a:8b:10:1c:aa:00:8b:a8:
80:92:67:0d:d0:ba:f8:92:c8:47:73:ba:d8:5a:cc:08:6c:7e:
8f:0f:75:93:54:a7:5c:5e:a1:02:2c:af:74:2f:48:06:41:55:
5d:5c:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:41 2025 by rpki-client