Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: okk+NUh+KnLlNAQsQQMb0F/Iz3PHn86RQbORlOgkv2w=
Subject key identifier: 70:D2:52:DB:5C:52:6C:18:C6:6B:BF:86:B2:68:5A:DD:5B:57:1D:F2
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01976F2C166A23B87C199D1A1F01C00472FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0C37
Signing time: Sat 14 Jun 2025 16:00:49 +0000
Manifest this update: Sat 14 Jun 2025 16:00:49 +0000
Manifest next update: Sun 15 Jun 2025 16:00:49 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: Rm5nMafRv646GdVoPWws2N1Phu6TqimFH0PCxlslWeo=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:16:6a:23:b8:7c:19:9d:1a:1f:01:c0:04:72:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jun 14 16:00:49 2025 GMT
Not After : Jun 15 16:00:49 2025 GMT
Subject: CN=70d252db5c526c18c66bbf86b2685add5b571df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:d5:0c:18:e3:6d:26:52:37:77:65:31:32:
95:a4:a6:29:54:51:bf:31:d8:76:d6:f3:d4:77:47:
d0:06:c0:50:68:e8:40:f3:ae:5e:26:0f:0b:3b:64:
a2:b3:64:e9:fb:c9:f0:7e:f9:6d:63:a9:01:07:31:
d4:61:d1:51:74:68:24:47:bc:13:7e:7b:36:98:8c:
2d:c7:06:2b:a8:f3:1e:35:69:af:a9:75:6b:80:44:
bf:3e:87:d6:ae:6c:e4:7c:8f:64:eb:23:44:b3:0d:
63:7d:62:c0:f7:e2:1a:df:c1:f4:ac:8b:b7:70:d0:
59:55:d7:ac:aa:1b:98:00:dc:c6:da:8a:8a:ec:50:
1a:60:30:36:5b:41:4f:0a:0d:1f:a2:c2:5e:e4:6f:
6c:dc:53:ff:da:ca:f8:3f:23:16:35:cb:ee:57:df:
4a:61:09:f2:09:0f:a2:ae:01:3c:c9:f9:2e:de:a0:
bf:bc:b2:31:19:ca:12:66:bd:4b:dd:18:37:45:ff:
aa:26:8a:f6:dd:ef:61:71:14:23:83:15:3b:ff:8e:
ee:94:5a:63:e0:96:07:68:b9:99:63:32:bd:23:48:
92:e5:10:34:cb:4d:5e:fd:7d:40:9e:0c:27:88:c7:
39:79:aa:53:b9:d3:a7:c7:45:b3:e4:e2:73:7c:02:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:52:DB:5C:52:6C:18:C6:6B:BF:86:B2:68:5A:DD:5B:57:1D:F2
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ab:c2:b0:b7:0f:4f:59:01:96:55:75:e7:64:38:cf:57:fb:
36:ee:ff:65:ef:6b:90:7e:b8:aa:02:8c:85:cb:c0:ff:17:f6:
2e:9f:71:c1:d9:d5:5e:87:32:cf:4b:c4:aa:26:b3:bf:bf:7a:
f0:03:4e:b8:f3:32:e6:ab:ac:69:12:ea:9e:8b:34:2d:93:ec:
fc:8c:3a:10:cf:b1:a0:b8:41:f1:fe:26:f1:50:74:bb:d1:42:
87:c1:6a:30:89:3c:41:d6:2d:5e:7d:b6:08:f7:c0:2c:bc:60:
43:6c:02:fd:26:5c:ef:a2:c5:c1:59:4a:fb:1c:a9:2a:93:c2:
d9:40:77:27:0d:19:79:8d:04:62:42:ac:f6:19:51:96:56:d7:
a2:6b:94:9c:29:47:42:75:fd:c8:90:3f:99:3c:37:d2:84:5b:
da:c5:59:87:7a:fd:dd:4e:7c:2f:59:f4:96:38:e4:42:99:9c:
8e:16:7f:44:5f:0b:92:f6:92:3c:40:b2:79:87:c3:1d:7f:3f:
a4:f6:a7:f8:21:e2:a6:a7:8b:5d:d9:8e:60:41:46:00:79:fb:
97:a6:21:47:4f:33:7f:67:9f:71:ac:54:c1:de:24:24:8d:76:
2e:05:14:58:02:fa:50:66:8d:33:cd:38:7b:9b:bf:28:4d:1a:
82:8b:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:43:39 2025 by rpki-client