Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: cU26DqZGtzNBA8Lq3MHxRgh51W0Gs/AXNHM6J31NSzE=
Subject key identifier: 1D:5C:E8:9E:98:67:85:D4:F3:9F:EA:51:36:FB:18:16:26:36:27:ED
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01987CE5687259F333626BDB2082DAB7578D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 01:01:05 +0000
Manifest this update: Wed 06 Aug 2025 01:01:05 +0000
Manifest next update: Thu 07 Aug 2025 01:01:05 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: aC8ATS9UXN/hmWb1/OOYAsTMr5NuHHEz54iXBAmMJvA=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:68:72:59:f3:33:62:6b:db:20:82:da:b7:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Aug 6 01:01:05 2025 GMT
Not After : Aug 7 01:01:05 2025 GMT
Subject: CN=1d5ce89e986785d4f39fea5136fb1816263627ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:14:0e:38:22:35:b3:8c:12:de:ae:0a:66:9e:
ba:b0:65:30:9c:d7:9e:0d:13:4f:9b:f8:db:4c:72:
d5:bd:ec:8c:75:69:69:37:05:7d:b6:7d:8c:fc:09:
a1:e1:1a:cd:5f:d8:f8:0b:83:4f:66:59:5c:5b:00:
3d:38:44:1c:91:b3:1f:af:c2:31:ab:36:e8:c7:d5:
cb:9a:34:c8:83:f8:69:eb:a0:2e:77:84:4b:81:11:
e1:be:24:c9:56:1f:9d:d7:ba:a2:a1:7a:c1:7f:5b:
1a:ba:fb:92:48:2b:6b:c4:d6:c0:ef:6f:7a:59:0a:
1e:07:a5:0b:a8:a5:07:d5:8c:40:c3:d0:e4:05:cd:
49:b4:36:d1:c5:fc:00:19:31:10:5a:e4:94:1a:af:
e4:ff:8c:3d:4b:39:c5:2c:d9:f7:d6:f8:8d:f2:e0:
7d:d1:95:00:1f:dc:e3:3f:6d:f9:c7:a1:87:02:5d:
40:c4:f1:e7:26:10:82:51:6c:1d:95:6a:9e:43:46:
bd:68:67:12:5f:99:52:e0:d1:0e:47:78:03:df:4a:
9f:bd:58:cd:47:15:2e:fb:10:2c:ac:04:ea:15:10:
f8:d2:b4:42:0e:7b:77:89:fa:3a:64:51:23:0a:12:
ba:b0:08:58:fb:d2:bc:c6:5f:9d:5d:14:91:77:c5:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:E8:9E:98:67:85:D4:F3:9F:EA:51:36:FB:18:16:26:36:27:ED
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:4c:83:7d:0b:71:a4:3e:a1:bf:f9:bb:c7:2a:2c:5d:e9:
d0:c5:43:1f:22:50:12:41:63:1a:43:b9:10:8a:af:45:af:7e:
c3:45:82:01:3f:3a:7f:16:d3:2b:d4:17:9f:16:12:a2:c5:45:
25:e0:10:d8:2f:f8:f8:d6:7e:9c:46:13:3e:b4:d4:02:d6:eb:
1d:c2:5f:ec:47:1f:c8:4e:89:4e:bc:8a:b3:14:e9:ab:34:f5:
11:eb:16:d2:62:0d:0c:4c:4f:4f:d5:b7:93:06:53:7e:4a:0d:
e1:e1:b5:fe:b3:36:98:76:49:a2:3c:93:42:80:3a:5b:3b:7b:
a8:cb:d6:8a:b4:c8:4c:2b:61:1a:0f:2d:6e:fa:6e:8b:19:cd:
4d:d9:14:75:ff:ab:65:a8:31:9e:6f:46:44:01:4b:9c:5c:f0:
c5:42:cd:df:60:9a:6c:50:fd:fd:6d:1a:de:78:d3:7e:f3:5f:
12:e5:d7:23:71:73:4a:66:0e:8d:da:6b:f2:11:71:7d:cc:5d:
a3:1c:92:5a:e0:9a:34:31:c2:38:cf:c5:b7:07:a5:26:0f:ea:
43:99:fa:68:b6:90:5c:df:70:ed:39:0d:06:64:af:41:32:79:
7c:b4:13:43:57:df:14:0d:3e:d6:3b:67:13:98:17:84:3f:44:
1e:93:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:12 2025 by rpki-client