Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: O0+lFgWmlEpCe/23qvFr/BHnha5amMmJuRXcxq9Y+Ow=
Subject key identifier: CA:15:34:87:0F:53:27:27:FC:52:EC:87:1C:69:52:11:D2:A2:4D:10
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 01987D8A8DB485CD8784BB90984F49FCCFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 37
Signing time: Wed 06 Aug 2025 04:01:28 +0000
Manifest this update: Wed 06 Aug 2025 04:01:28 +0000
Manifest next update: Thu 07 Aug 2025 04:01:28 +0000
Files and hashes: 1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=)
2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: yNqq8DAlwgrPFbNZBJJ8pJmhsunQHdzq5H2P+4cd/Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:8d:b4:85:cd:87:84:bb:90:98:4f:49:fc:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Aug 6 04:01:28 2025 GMT
Not After : Aug 7 04:01:28 2025 GMT
Subject: CN=ca1534870f532727fc52ec871c695211d2a24d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:5e:37:30:10:4e:fb:23:f0:37:18:2a:24:
45:cc:93:f7:74:08:88:1c:41:38:24:8f:3e:10:03:
30:e1:8a:0a:90:84:28:8d:fb:e0:8e:c3:f7:f3:29:
d5:93:bc:51:b0:80:62:a3:07:40:5f:ef:f0:3b:d4:
42:b4:e0:6d:43:fd:84:59:1e:c1:9a:29:72:f5:fb:
4f:f2:3a:e6:d9:4a:c4:1a:82:10:d0:59:fd:ae:b4:
c8:da:a1:44:cf:1c:ce:e1:7a:54:14:01:a2:07:12:
d1:e9:f4:1f:58:b0:94:2a:58:af:3a:e2:d7:3a:f6:
9d:58:f3:dc:92:06:ce:53:38:63:03:a4:7f:a2:9e:
eb:85:a1:44:c2:88:a7:b4:bb:2d:aa:64:73:85:5f:
0e:06:02:7c:0a:7d:af:94:5f:73:01:67:1b:b1:09:
19:71:c5:97:12:9f:4a:51:40:42:31:e5:76:0f:b8:
1e:dc:0e:2c:ab:50:34:cd:01:6d:9a:f7:9f:70:00:
4f:fa:12:c6:6e:3a:a2:85:72:79:9a:38:d6:70:2d:
15:ec:98:ea:2e:2c:45:f8:1a:96:0b:23:a3:bb:81:
09:f8:7a:2c:a3:a9:d3:ca:d2:9d:a9:fa:23:37:d8:
e6:90:cb:ec:df:87:15:b7:00:a8:0e:95:af:a7:4d:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:15:34:87:0F:53:27:27:FC:52:EC:87:1C:69:52:11:D2:A2:4D:10
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4e:4e:59:1f:23:f9:9c:18:e2:a9:07:52:70:55:07:24:aa:
09:e1:39:e5:bd:8f:3c:4f:83:62:f2:44:d0:e4:72:ce:7d:a8:
b6:0b:59:5b:f6:87:be:71:84:9e:63:ae:aa:dd:bd:95:0e:88:
18:42:12:02:56:a5:d2:7e:42:0b:33:a5:a6:41:1d:ee:7d:ac:
7f:2d:e1:8b:40:95:7c:4c:be:03:78:c2:a7:98:00:a3:75:34:
a3:1f:8d:08:f7:8c:51:96:0b:aa:56:ca:c4:fb:0f:cd:af:e1:
0d:63:2b:ba:97:73:7d:59:9b:02:25:cc:4e:fa:88:26:72:89:
b6:f4:aa:06:07:55:2b:ba:76:bb:da:ec:18:c2:7d:69:20:5d:
3e:fa:67:21:8c:d5:9b:a4:4b:84:5b:02:56:8a:3b:6d:4c:e1:
8e:e6:cb:a1:cc:99:d1:45:6a:50:d0:5f:c1:20:58:b4:ce:0a:
8a:f7:f0:e7:c8:5c:c4:55:61:c4:5c:a9:a2:b4:5e:24:7b:0c:
d1:5f:fb:f5:b5:89:69:a6:27:42:d6:23:92:e4:da:aa:b0:b5:
b3:df:fb:52:f9:43:39:f0:b4:f2:4d:cf:60:6a:c5:28:89:18:
68:77:94:c8:35:91:6b:49:f5:3f:70:05:89:1d:16:a1:9c:67:
23:1c:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:59 2025 by rpki-client