Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: IOGFzjIDCKosBHcNQFQ5APFFWJVMFHVj329lBlnptDk=
Subject key identifier: AA:83:E5:BC:26:19:2D:33:B0:A2:3B:44:05:8C:5E:F6:51:8B:A2:B4
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 019873E3757EE0B9C037294B74CC64F1C404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 0CFA
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: B72HEYlxkNoHxUElcieIdK5VD9VW8+k7dadahTdPzlA=)
2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:75:7e:e0:b9:c0:37:29:4b:74:cc:64:f1:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=aa83e5bc26192d33b0a23b44058c5ef6518ba2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:61:b1:58:86:8c:a2:4a:16:f6:f8:bd:2c:
19:d9:4a:fc:71:85:b9:34:2b:6d:ab:9e:b9:7a:ba:
0b:a3:20:83:3d:ae:09:d2:92:c2:0b:ca:9b:23:e8:
9e:1f:3a:e6:68:de:2b:24:f3:74:ff:29:ae:72:f2:
5b:91:24:0c:2f:b0:a6:de:2f:4f:fb:e3:87:7c:29:
d5:4a:b4:35:54:9d:82:e0:39:5d:3e:0d:12:dd:ae:
ec:e3:d3:32:4c:ba:27:f2:22:e4:e4:48:f9:be:e4:
d3:b8:4d:fc:ef:8c:8a:91:5a:eb:33:c9:c8:ca:23:
cc:71:0b:0d:3e:db:90:ab:a2:c2:00:5f:b1:72:d9:
49:43:0f:70:b1:00:8d:74:05:2d:d3:a2:14:27:f2:
f2:45:04:73:b9:3e:5a:3c:ba:08:fb:b6:a4:ec:06:
d6:78:37:4c:7f:d0:c7:1c:80:77:38:fc:50:20:a6:
46:bb:77:35:be:32:0c:06:93:24:e0:33:05:38:bf:
3c:3d:2b:51:a8:ae:ce:0a:53:1a:00:c1:f6:e8:8f:
64:f8:03:85:96:0f:f9:fd:64:36:80:30:08:c2:ba:
98:69:32:bc:00:0f:ca:ff:70:42:ff:5c:85:cf:cf:
66:98:51:dd:9b:f3:b4:84:9e:e5:8b:f9:92:e2:e0:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:E5:BC:26:19:2D:33:B0:A2:3B:44:05:8C:5E:F6:51:8B:A2:B4
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:b9:28:3a:d0:0a:b2:8d:47:93:25:f0:f1:7c:9b:20:ee:
f8:f8:89:b7:55:04:1b:64:de:c7:8e:e6:ae:a9:b6:a4:d9:98:
ef:c4:2a:6b:6d:b8:12:30:eb:3b:40:64:30:6a:f2:5e:b4:c9:
b2:f4:b9:e0:11:70:5c:71:53:63:d4:94:d1:43:7d:29:7e:5b:
7f:98:5b:de:5b:da:47:4b:06:af:c5:76:ef:8b:cf:d9:f3:76:
b6:f9:49:0b:ba:bf:0c:1e:46:bb:4f:83:43:0f:11:d3:6e:28:
ff:37:42:ce:72:48:bb:cf:da:e8:74:d7:e9:2f:01:d1:b2:02:
a9:65:58:df:09:37:e4:e4:a6:8b:9c:92:03:a7:31:ea:bd:b8:
d4:0c:e3:e9:98:fd:31:26:6e:0e:dc:26:c3:d1:aa:6e:fc:d0:
cb:76:3c:db:62:8c:c5:af:83:ec:76:05:8e:0f:84:76:f3:44:
18:77:ad:0f:6e:9b:f8:09:d3:20:a6:f5:1c:e4:84:99:2d:69:
41:72:af:74:27:34:6f:5c:f1:9e:e3:b9:dc:42:78:6e:dc:ee:
4c:a1:ec:d9:fe:84:b9:fa:97:94:e0:77:d3:a3:13:80:8d:78:
d5:19:a1:6d:b1:51:77:0e:34:3e:7d:1a:c5:ed:88:74:fa:21:
a3:24:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:43 2025 by rpki-client