Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: bzYI/sud+02YtpQ+KL2tBxbASUCET0+2f36VOxbVPcw=
Subject key identifier: F4:8D:DF:FF:83:27:62:07:FE:9E:C8:A4:C3:B4:26:C6:AB:E0:65:E1
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019872CF92F82A92ACC559D5AE1D3326046D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 15A5
Signing time: Mon 04 Aug 2025 02:01:02 +0000
Manifest this update: Mon 04 Aug 2025 02:01:02 +0000
Manifest next update: Tue 05 Aug 2025 02:01:02 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: 29KJtZlHvWDbs4G0qAcaJCGW+VOXLk9YG8Y6j9lVV2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:92:f8:2a:92:ac:c5:59:d5:ae:1d:33:26:04:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Aug 4 02:01:02 2025 GMT
Not After : Aug 5 02:01:02 2025 GMT
Subject: CN=f48ddfff83276207fe9ec8a4c3b426c6abe065e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:f4:4d:80:df:2c:c2:8e:85:e8:4e:5f:85:
b7:d2:47:e4:a8:82:17:a2:be:47:c8:ea:1f:f8:3a:
4b:a3:b5:7f:b6:93:e1:91:ed:84:5d:82:c8:d3:ba:
82:f1:2c:9a:ef:fc:69:f6:43:8c:9b:f0:ca:c9:58:
5a:fd:bd:21:b1:97:47:1c:7f:89:f6:22:fe:8b:a2:
8b:49:c7:d4:e0:73:a9:92:be:61:b3:a5:65:55:19:
48:a8:f1:f5:aa:38:12:ee:26:f0:5a:41:33:ac:89:
39:53:31:b9:23:72:be:63:e7:80:66:eb:9a:9b:03:
71:12:c8:10:89:f9:32:33:d9:49:68:1f:3b:fb:82:
45:fc:26:37:5a:66:db:ff:cb:76:fd:16:70:aa:fd:
bc:2e:01:68:d7:15:d5:52:7d:3f:93:55:15:de:8a:
0c:b4:c2:f4:fb:d0:d3:46:76:68:d4:50:b1:72:7a:
75:3f:75:7f:e1:b9:25:2b:d5:e7:80:d5:e4:5d:8e:
5e:1d:eb:d9:49:90:6f:91:99:f1:d9:da:9a:65:e3:
d3:e0:41:85:e8:a0:3f:61:b5:6f:ef:0f:a0:69:9a:
bb:5d:a9:9f:b5:d0:22:b8:4b:00:b9:5f:38:c5:f2:
44:ec:77:b6:89:22:8d:cd:62:54:44:9e:7c:77:e2:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:DF:FF:83:27:62:07:FE:9E:C8:A4:C3:B4:26:C6:AB:E0:65:E1
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:ba:22:79:b6:89:b9:e4:9e:a8:55:7a:16:e8:a6:77:5c:
46:c3:cf:86:5b:87:5d:be:01:c0:75:c3:c0:02:f3:67:d1:64:
8f:cb:bf:96:e4:19:38:51:a6:49:31:ce:67:19:51:e1:6e:7b:
0d:17:36:10:8a:c3:8e:21:97:6e:3e:54:7a:96:53:43:1e:93:
33:cf:10:b8:19:00:94:f1:22:57:f9:e1:d0:86:ae:81:0d:99:
d8:c5:ae:f0:09:42:eb:76:0a:f1:31:6a:ab:07:9b:07:a0:0b:
53:32:70:56:e8:c7:be:66:fa:da:bd:c7:27:7b:11:53:91:4b:
19:42:db:64:2d:1a:a9:c1:15:61:35:1d:16:7d:29:20:33:e8:
7b:e0:0a:34:c8:78:71:aa:d2:6a:54:27:6a:73:63:68:6a:67:
6f:0a:10:51:4c:6b:ef:77:85:6a:49:f9:c7:16:4d:c0:09:0e:
ee:a8:24:62:03:d7:d3:45:c0:e2:38:d7:98:48:99:50:09:b0:
b6:cf:c5:9a:2a:37:b8:e7:10:6a:43:0d:64:8c:8a:31:e0:9a:
6b:b0:37:c3:86:d6:5d:e8:74:ad:f4:46:63:a4:bc:61:5c:d3:
79:bd:26:d3:4d:89:f5:41:ac:1a:ac:3a:e1:bf:1c:2a:ba:67:
2f:b7:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:31 2025 by rpki-client