Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: z01GVVj+XNX9At2tTeGTH6VrXWxMXbbCeG3xV8BsXUE=
Subject key identifier: B8:8A:7E:C9:B3:EF:E6:90:8B:7C:E6:F5:A5:09:90:5F:F7:67:25:31
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 019856459F0490DE14CFE37D5091CEC62A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 13:00:59 +0000
Manifest this update: Tue 29 Jul 2025 13:00:59 +0000
Manifest next update: Wed 30 Jul 2025 13:00:59 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: yyDA6nPl9og6BFjyQ/Esu1Mw0BEc+mlZqLjcHwkURwo=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:9f:04:90:de:14:cf:e3:7d:50:91:ce:c6:2a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jul 29 13:00:59 2025 GMT
Not After : Jul 30 13:00:59 2025 GMT
Subject: CN=b88a7ec9b3efe6908b7ce6f5a509905ff7672531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:8d:fa:49:61:68:0b:91:48:01:f9:14:0e:
e6:b6:79:b3:e8:64:9a:59:c5:cd:2a:5e:f8:00:2d:
17:1e:b9:6d:fd:74:11:fb:9a:6f:bf:fe:65:cb:b5:
33:ba:f0:f7:7c:2e:d9:0f:e2:61:fc:51:66:59:d8:
e8:d4:a6:6b:a7:8c:9a:e3:8b:57:4c:c6:94:56:e4:
e0:93:ac:5e:92:42:06:a4:c9:5b:d0:8a:11:1f:dc:
00:57:84:7e:fc:80:25:28:0b:80:d7:e7:b5:e3:53:
95:c6:f6:a1:1c:6d:5b:44:b5:c4:9c:10:d0:71:af:
2b:45:ac:90:76:15:1a:be:8c:7d:c8:ae:ff:48:90:
6e:6b:61:09:56:28:60:51:6d:c6:ba:fb:2b:eb:57:
f7:d1:bc:3f:be:ea:83:2c:94:38:ab:fd:cf:80:e3:
78:a7:81:33:44:63:13:96:af:0c:64:39:0a:3b:14:
9f:17:dc:8b:79:24:cd:e0:e2:e6:47:d7:79:48:f5:
18:ff:ad:e4:9c:63:0e:f5:e7:46:c7:83:5a:bf:a7:
73:8c:17:08:ae:43:9f:99:db:c9:7c:db:91:8e:d0:
68:91:23:0a:ee:f6:25:0d:28:e7:9c:88:18:0c:90:
5f:5f:c6:7e:6a:a9:5e:9f:58:92:46:c7:d2:08:20:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:7E:C9:B3:EF:E6:90:8B:7C:E6:F5:A5:09:90:5F:F7:67:25:31
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f1:43:37:46:0a:0d:7e:43:fc:9d:d5:e6:fe:e4:d3:17:98:
5e:1a:ca:02:ea:4c:84:97:bc:d7:98:31:40:03:0a:45:4b:18:
d0:42:b4:50:4c:f9:e4:03:6d:e8:51:f9:f1:1c:f2:42:0f:03:
0a:b9:b8:9f:d4:ec:9a:6f:6f:9b:78:9f:e3:0c:10:9e:9f:5c:
2d:34:4e:c7:20:65:80:8a:c9:97:14:4f:46:24:ea:f0:f7:df:
d9:a1:b7:5e:ee:3c:6f:54:e3:fd:59:ba:00:ea:58:16:f5:db:
a1:62:84:07:f2:82:07:78:b8:59:05:6f:e7:1a:f7:19:2a:9b:
2b:fd:5e:41:0b:c7:24:53:67:b9:4c:9c:e4:22:86:a6:6f:47:
7d:6e:4f:6d:44:7f:41:09:ea:69:3a:09:cf:48:58:ad:84:36:
d0:11:55:3c:14:9d:85:31:f2:ee:88:40:9b:e5:98:0d:65:67:
61:06:db:6e:e4:11:f1:2a:22:12:d5:3e:3d:01:08:fb:89:fa:
60:ce:8d:3c:e1:95:aa:cd:7b:cd:dd:af:b2:1d:f5:c2:cb:52:
c4:49:ad:2f:3b:c5:1d:c8:3c:f9:a5:56:ff:67:30:88:19:6d:
47:f0:c9:d4:2b:25:de:24:a0:ab:de:b7:1a:b0:59:be:84:8a:
81:89:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:02 2025 by rpki-client