Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File: B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier: InpjzFL/aurfnBWehxa0GJ5RriQ6NsIcfXjbQTvCNrE=
Subject key identifier: D8:0E:E9:FA:3D:50:A7:61:68:74:10:3C:95:A1:CA:11:03:EB:A7:17
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer: /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial: 01987A8949CF2062E4A59F63BC26F5100CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 14:01:14 +0000
Manifest this update: Tue 05 Aug 2025 14:01:14 +0000
Manifest next update: Wed 06 Aug 2025 14:01:14 +0000
Files and hashes: 1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: B2CjYudNoUT1pqYVmUiUBT00+jMusTSLOVxrUNrgEe8=)
2: bWkzDjoyXp1j-qZqgWYsRC5CuDw.roa (hash: +Se3L4OH81c744mhhDr0vSFFcNI0VPir7WMuZ7dt6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:49:cf:20:62:e4:a5:9f:63:bc:26:f5:10:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Validity
Not Before: Aug 5 14:01:14 2025 GMT
Not After : Aug 6 14:01:14 2025 GMT
Subject: CN=d80ee9fa3d50a7616874103c95a1ca1103eba717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:e7:76:c1:c5:42:20:25:ad:57:60:a4:ad:
1e:54:f8:fe:64:e3:65:7d:b8:22:f1:1f:24:e3:cc:
17:ed:b8:09:bf:93:34:f6:3a:3a:1b:d9:03:17:d0:
4b:b8:a9:d8:a2:e0:47:1c:f0:1f:03:1f:72:38:64:
69:84:27:63:06:f9:47:42:2d:f6:77:45:31:80:1b:
75:56:da:3f:3e:29:56:67:4d:82:b9:ce:03:f5:de:
9d:f1:fe:db:3a:86:e7:8a:15:43:d5:12:c8:cd:73:
fd:ed:da:41:90:fc:e2:04:50:10:05:07:ea:62:3e:
df:de:a6:ae:2e:10:3c:fb:01:b1:e6:61:d9:19:69:
b2:73:0a:2e:39:8c:8d:6b:74:45:4f:fe:3a:ee:96:
16:95:6d:6d:20:8e:56:2f:d9:bf:5a:e1:1c:e0:ac:
19:ec:8b:18:28:3f:bb:10:d6:ed:a0:13:1f:c5:94:
7e:8e:5a:ff:6e:a8:af:bc:4e:50:fc:38:79:b9:af:
5f:c0:c2:f7:5b:79:47:93:0d:11:00:c6:4f:9a:37:
8a:14:be:05:90:a7:67:9b:09:cc:95:75:4d:f7:e2:
1d:63:66:69:b6:23:d0:10:e4:a6:22:04:9b:3c:c3:
fc:56:c1:06:69:1a:0f:00:1e:30:1e:7c:c0:21:b4:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:E9:FA:3D:50:A7:61:68:74:10:3C:95:A1:CA:11:03:EB:A7:17
X509v3 Authority Key Identifier:
keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:85:ff:63:22:94:bd:4a:0b:c3:29:b8:22:6f:59:28:03:fd:
78:1e:b7:af:1e:b2:c2:29:aa:12:fc:d9:5c:6f:02:dd:b3:aa:
c7:c3:5c:eb:14:73:75:3d:18:1a:ae:4b:59:8b:b8:03:03:7c:
e6:b6:63:3d:26:ca:02:75:0d:e6:a9:27:bc:b7:53:08:fb:cf:
c1:9c:15:24:c9:5e:c6:02:22:67:dc:3b:ac:d4:aa:e4:0c:41:
7b:1c:87:fc:45:f6:28:fe:46:5d:dd:82:3a:71:8e:bf:d3:af:
51:b7:ce:80:20:1f:a6:01:ff:4c:8c:74:1d:70:b5:71:d7:59:
a1:b4:fd:7d:79:1c:09:fa:d6:fa:79:9f:c6:93:d4:22:fe:d6:
84:fe:ca:1e:f9:12:84:f8:c2:7e:6a:e9:0e:c2:fe:e6:1d:ff:
60:07:7e:09:d8:fa:69:3a:4f:b9:19:0a:99:d5:3a:2d:b7:39:
6a:9b:45:13:fb:56:e5:0c:b6:83:d1:3c:0c:af:cf:8b:d6:18:
7b:ec:72:cd:0c:a3:bc:5f:ac:2b:e9:18:56:c0:86:de:cd:00:
74:9d:76:5a:d4:88:c8:3f:c6:5e:7e:72:62:d3:b0:ad:68:43:
c0:23:af:9f:b5:a8:ec:24:fd:2e:02:11:81:25:b8:e9:9c:2c:
c8:0f:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:51:35 2025 by rpki-client