Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: LBzNufYv7wSsvuWQ9QCgG6sYnf6qiEbaLs/ZQQQX97I=
Subject key identifier: 7C:81:0E:BE:C9:57:6E:96:10:CB:50:AA:92:4D:A2:BC:6C:34:54:91
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01988168D172BE957ED75D2409987D87035F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0CC5
Signing time: Wed 06 Aug 2025 22:03:06 +0000
Manifest this update: Wed 06 Aug 2025 22:03:06 +0000
Manifest next update: Thu 07 Aug 2025 22:03:06 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: Fo+I+13dIkZkm6GA5b/M/5wkTEAlxQhOHuG4KN0+tx8=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:d1:72:be:95:7e:d7:5d:24:09:98:7d:87:03:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Aug 6 22:03:06 2025 GMT
Not After : Aug 7 22:03:06 2025 GMT
Subject: CN=7c810ebec9576e9610cb50aa924da2bc6c345491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:d6:9b:8f:33:61:f2:48:be:bc:72:4d:b2:
62:c3:38:4e:a2:e0:6c:66:fb:30:b0:bf:1f:5f:c5:
0b:89:ba:9b:7f:0a:fd:70:ec:2f:7b:45:5f:cb:2c:
79:29:f1:73:92:9f:c6:47:9d:3f:25:de:3f:82:8b:
00:ec:17:c7:36:76:f4:67:9e:30:57:15:3b:80:eb:
57:a0:99:57:8b:91:7a:f4:e7:fe:5e:34:a0:22:21:
ba:e3:70:04:ab:48:e6:68:5b:ed:3d:71:83:fb:66:
9d:5a:df:3c:e4:f2:c3:45:00:f4:bf:0c:92:1e:cf:
31:ed:cc:18:2e:22:7f:b2:9c:05:ee:ca:25:27:0e:
00:67:49:cf:e2:ec:d8:0c:d6:f3:9e:4e:ad:74:9d:
ed:c9:42:1e:14:3a:6c:8d:31:08:93:f9:87:5f:47:
5c:57:bd:9b:81:bd:a9:bc:23:10:73:b7:49:68:82:
7d:68:d8:84:eb:c1:bf:a5:a6:21:a4:02:81:87:f2:
ba:54:09:14:5d:56:83:22:b8:27:ab:75:65:fa:0c:
dc:92:f5:fc:08:7f:2e:80:0d:c0:6f:72:72:ee:16:
57:df:00:ba:9d:a7:ee:01:85:78:f2:f8:7f:45:86:
00:78:c7:75:15:83:74:f9:66:e3:24:d3:f4:cf:73:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:81:0E:BE:C9:57:6E:96:10:CB:50:AA:92:4D:A2:BC:6C:34:54:91
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:f8:61:1e:e0:3c:31:e7:96:55:30:c8:ad:1a:7e:8e:40:
68:99:5c:fc:8d:d6:2c:19:29:5a:f4:73:9d:d6:16:36:4d:1b:
dd:f4:c6:d5:61:cb:7a:b4:da:47:59:77:c6:94:49:cc:0f:93:
89:b5:75:f1:39:3f:71:6d:49:20:47:43:cf:31:c0:30:66:ce:
56:c2:02:fa:b6:26:df:55:69:96:d0:0d:66:68:ec:2d:fa:ed:
9c:67:4c:ff:5c:bc:e7:31:80:85:8c:14:40:1b:19:69:2e:74:
c4:ed:60:d8:9e:c9:cd:fb:19:ae:32:ae:42:88:a7:cd:36:2c:
5e:e8:35:bd:23:ae:12:1b:bb:9c:ce:5c:9f:25:40:a9:ed:ae:
90:64:a3:ab:33:8a:ea:df:59:c9:f3:e7:89:33:25:12:5f:c3:
a2:d4:13:21:9d:9f:e0:c8:46:3a:0a:fa:d9:e7:d7:ad:1a:61:
5d:f6:a6:73:93:fa:b5:b7:c7:25:d7:9e:65:fb:1e:bd:c0:fb:
11:dd:3f:22:e3:9c:1a:58:2c:37:63:02:55:8b:2f:7c:96:d3:
25:2d:d5:ff:c0:aa:6e:22:78:73:82:ce:fb:a3:84:dc:07:db:
21:d8:b3:67:71:80:2b:5a:b0:a6:2c:a8:9a:67:4b:79:37:60:
73:55:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:19 2025 by rpki-client