Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: d6pYSCxDD+DfcX13dlOT7NSYcltGNlRwVyig7ZcAvKY=
Subject key identifier: 11:B9:56:9E:01:76:0F:E1:0E:B2:3F:42:B2:7E:4B:AE:97:3E:00:F1
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01984A0A656E82D8030EE3AF84103D579ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:51 +0000
Manifest this update: Sun 27 Jul 2025 04:00:51 +0000
Manifest next update: Mon 28 Jul 2025 04:00:51 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: uKLXCM06oHFpJLhtj2idQaUyxv6WV2KIT4AUmxKLrt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:65:6e:82:d8:03:0e:e3:af:84:10:3d:57:9e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Jul 27 04:00:51 2025 GMT
Not After : Jul 28 04:00:51 2025 GMT
Subject: CN=11b9569e01760fe10eb23f42b27e4bae973e00f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:fc:9e:bb:9e:f1:7c:8d:e1:fc:48:da:21:
2a:f1:e7:83:0e:ad:12:f9:26:7e:79:d9:a6:5d:8a:
2f:27:0b:19:ad:72:3a:a9:2c:73:30:75:36:35:4c:
3c:34:cc:08:e8:ca:b3:09:4b:e9:0e:2c:fa:2a:3c:
e6:f2:91:12:66:09:d3:95:07:99:7f:93:f1:ff:ec:
8e:ac:8d:0b:2d:be:91:76:0d:91:4b:ed:2b:92:fb:
2a:54:9e:91:e1:10:2f:8a:e4:da:57:db:2b:ed:3f:
2b:c6:77:78:14:b3:83:19:13:f9:ba:eb:09:80:46:
0e:a7:48:80:98:fb:08:1d:b7:b0:49:2c:ba:75:ba:
cf:5a:5c:ca:db:fe:ae:07:83:00:3c:e5:0a:59:19:
3d:44:e0:33:66:0a:1f:ec:57:ba:f7:32:74:1e:c6:
93:03:4e:a6:6f:c0:39:0a:fb:d8:46:50:7c:2d:fa:
17:c6:2a:53:17:5b:e4:0a:af:ec:13:c1:6c:24:4a:
d7:ef:7a:b6:12:a1:bb:2c:95:4d:08:a1:45:1a:19:
6a:6a:0a:ec:af:ce:0e:c4:3d:4f:34:48:85:24:72:
b4:e7:09:1f:7c:ee:1c:48:26:b7:21:9c:cd:ab:9a:
a1:68:19:8c:26:97:c3:61:b3:83:26:e0:03:8b:ab:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:56:9E:01:76:0F:E1:0E:B2:3F:42:B2:7E:4B:AE:97:3E:00:F1
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:01:b0:b4:22:7a:28:a0:bc:b8:ab:13:e9:e4:01:f1:4a:
25:12:ac:38:30:8d:c4:39:16:c0:52:2f:73:34:66:c2:bc:39:
a4:86:01:29:c9:5b:08:3e:f9:5c:34:35:87:ff:0e:8b:2b:70:
c9:9c:85:b6:41:ae:67:42:b6:22:76:7c:c4:4c:bf:95:8a:4e:
2d:bd:ae:a7:5f:9a:af:d6:81:1d:1d:10:e5:c1:f4:d9:92:56:
81:fa:82:98:9e:9e:49:7b:58:74:9d:ea:16:8c:81:5e:0e:a1:
6e:93:39:41:f1:1a:4f:53:78:11:09:23:9e:5a:45:6c:d8:46:
55:b3:b9:95:3e:b6:49:19:9a:5e:76:4d:ce:df:d3:a2:d6:ba:
80:9f:5c:96:4d:7b:40:7f:4f:28:60:29:62:6d:43:a8:9d:64:
bd:2d:26:39:45:12:d8:5b:82:7f:64:c0:92:b2:80:23:de:4a:
65:d4:bc:34:0c:53:69:e8:9d:ec:f2:f4:dc:12:68:7b:4f:5f:
aa:b8:94:36:3e:18:ac:a3:e5:39:da:c5:e4:b3:ca:0e:ea:31:
e5:20:68:b1:09:b9:a6:f4:89:56:b6:28:11:74:50:ad:f9:87:
eb:00:bc:1a:13:b8:a5:4d:11:78:1c:c2:e7:0f:92:2d:03:d0:
29:24:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:33:21 2025 by rpki-client