Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: MH2aN2bRIok8RMVRONz4N0Hkk6/Sq1y3PLIPR24ym2I=
Subject key identifier: E5:0E:54:FD:90:AD:3B:B7:87:BA:32:15:3C:96:1E:E0:66:B6:7C:80
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0198917EA8F9B678D2BFF3E0AD5B63A1295F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 06AF
Signing time: Sun 10 Aug 2025 01:00:53 +0000
Manifest this update: Sun 10 Aug 2025 01:00:53 +0000
Manifest next update: Mon 11 Aug 2025 01:00:53 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: WPsvwKLBCZd5QKhgU9qiNpgH2Wm9FMn/Spi7qqoU5Yo=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:a8:f9:b6:78:d2:bf:f3:e0:ad:5b:63:a1:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Aug 10 01:00:53 2025 GMT
Not After : Aug 11 01:00:53 2025 GMT
Subject: CN=e50e54fd90ad3bb787ba32153c961ee066b67c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:b8:b3:02:f2:4d:7a:93:81:f8:63:03:41:
a6:6d:f7:6f:c3:4c:3e:e5:69:96:dc:4c:a9:31:51:
a8:e0:b7:d9:be:80:46:c0:00:17:9b:b1:2e:cf:61:
30:43:ed:ac:19:0c:cf:00:44:d9:53:2d:d3:3f:d1:
a4:95:7a:cc:89:7b:9d:03:a4:0d:ae:2d:2f:e5:ea:
2a:f3:16:57:e7:19:75:44:b0:fe:46:f8:61:bf:00:
5d:fd:4c:41:87:aa:e4:72:74:d0:21:49:f4:a8:17:
ce:85:c6:a3:71:09:81:e3:56:a2:a3:26:7f:b1:d7:
0c:9b:36:b3:6b:08:a9:1c:ac:d9:f2:60:c5:f8:36:
0f:99:7f:b2:e7:f5:65:1e:aa:85:23:cf:85:e7:4a:
71:1a:e3:65:ee:7a:d1:c4:77:da:e0:df:f6:6d:dc:
8b:48:ae:e6:71:f0:db:34:4a:2b:d9:bf:e2:24:17:
6f:3e:79:4f:c1:39:43:49:4c:7b:7a:4f:4d:41:a4:
c6:c6:d7:93:bb:0c:9c:22:50:77:b5:fb:57:c2:77:
d7:8d:5e:3b:82:ff:21:d9:57:58:11:76:ec:96:b4:
2c:17:4f:4e:6b:0f:10:83:0f:b0:bd:7e:fa:ed:25:
f9:4e:bb:fa:03:da:e6:cc:95:a1:f0:96:4a:d7:1b:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:54:FD:90:AD:3B:B7:87:BA:32:15:3C:96:1E:E0:66:B6:7C:80
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:cc:da:5a:e2:6d:54:18:6b:f0:d2:c4:48:0d:e0:7c:a5:
5d:c6:fb:ee:f8:78:10:05:29:19:40:3b:e0:f1:4c:90:e1:6f:
fa:c7:20:92:f9:8c:72:0a:09:94:68:37:17:3c:b2:d2:4e:9c:
8e:5d:47:c8:07:34:ae:10:2c:5e:d0:eb:06:57:43:f0:a5:7b:
b8:12:a2:e9:7b:9c:21:5f:0a:1e:fc:82:9c:3d:df:27:06:e0:
65:26:82:2e:3c:bf:2f:b7:0e:b3:b6:9d:a7:a7:06:1b:10:e5:
48:95:44:53:fd:dc:c6:b7:37:21:13:43:c5:3e:42:ef:96:46:
a2:e8:c0:c9:8f:a1:9f:b9:f5:69:68:2f:19:3c:a3:84:06:8e:
39:12:be:a4:40:ee:d5:cd:61:87:64:b6:36:f9:bf:ee:13:32:
f8:bc:3a:db:4e:56:7f:71:57:3a:86:f3:69:1e:21:ef:ca:79:
42:76:29:cd:83:00:e0:96:a5:8f:56:45:11:25:6f:f1:93:b6:
a3:1b:24:97:50:4a:4c:d6:3d:4d:0f:79:0b:18:5e:9b:2e:23:
9b:2f:36:30:73:d0:3b:ae:eb:28:c0:5d:a5:06:5a:c2:74:c9:
6b:f6:17:3a:57:32:07:53:06:cb:b1:bd:f5:bd:e8:b6:9e:e1:
80:ee:bb:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRfqj5tnjSv/PgrVtjoSlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjUwODEwMDEwMDUzWhcNMjUwODExMDEwMDUzWjAzMTEwLwYDVQQD
EyhlNTBlNTRmZDkwYWQzYmI3ODdiYTMyMTUzYzk2MWVlMDY2YjY3YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKS4swLyTXqTgfhjA0Gmbfdvw0w+
5WmW3EypMVGo4LfZvoBGwAAXm7Euz2EwQ+2sGQzPAETZUy3TP9GklXrMiXudA6QN
ri0v5eoq8xZX5xl1RLD+RvhhvwBd/UxBh6rkcnTQIUn0qBfOhcajcQmB41aioyZ/
sdcMmzazawipHKzZ8mDF+DYPmX+y5/VlHqqFI8+F50pxGuNl7nrRxHfa4N/2bdyL
SK7mcfDbNEor2b/iJBdvPnlPwTlDSUx7ek9NQaTGxteTuwycIlB3tftXwnfXjV47
gv8h2VdYEXbslrQsF09Oaw8Qgw+wvX767SX5Trv6A9rmzJWh8JZK1xvI6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUOVP2QrTu3h7oyFTyWHuBmtnyAMB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRvM2lri
bVQYa/DSxEgN4HylXcb77vh4EAUpGUA74PFMkOFv+scgkvmMcgoJlGg3Fzyy0k6c
jl1HyAc0rhAsXtDrBldD8KV7uBKi6XucIV8KHvyCnD3fJwbgZSaCLjy/L7cOs7ad
p6cGGxDlSJVEU/3cxrc3IRNDxT5C75ZGoujAyY+hn7n1aWgvGTyjhAaOORK+pEDu
1c1hh2S2Nvm/7hMy+Lw6205Wf3FXOobzaR4h78p5QnYpzYMA4Jalj1ZFESVv8ZO2
oxskl1BKTNY9TQ95Cxhemy4jmy82MHPQO67rKMBdpQZawnTJa/YXOlcyB1MGy7G9
9b3otp7hgO673w==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:12 2025 by rpki-client