Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: YH6YbvcGNENxDtcqx4jdDM2UsAg8E1ISBblN7wyqW24=
Subject key identifier: 99:13:DF:B8:EA:04:CC:C7:E1:FC:25:9E:B5:E3:8F:B0:09:8A:45:F6
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 01984B8ACA299855CA6C76E7B154F7D00F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 14DE
Signing time: Sun 27 Jul 2025 11:00:43 +0000
Manifest this update: Sun 27 Jul 2025 11:00:43 +0000
Manifest next update: Mon 28 Jul 2025 11:00:43 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: mnPfJehkrXZAaylRuZzbJMFIjG0FVJ/q95KcbLbNc0k=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:ca:29:98:55:ca:6c:76:e7:b1:54:f7:d0:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jul 27 11:00:43 2025 GMT
Not After : Jul 28 11:00:43 2025 GMT
Subject: CN=9913dfb8ea04ccc7e1fc259eb5e38fb0098a45f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:8f:5f:ba:b3:1e:27:ea:a1:26:58:d2:ab:
16:cd:63:84:4b:37:37:5a:df:99:75:df:52:4d:26:
cb:d0:1a:4a:03:74:78:5a:63:d3:2c:70:05:7f:26:
0b:c4:3e:be:c1:fb:07:37:a0:0f:95:a4:77:09:b9:
88:df:25:6f:e1:fb:53:5b:b8:70:9a:e0:37:e8:43:
8a:6b:91:11:b4:88:65:d5:8d:2c:43:5c:68:47:c4:
be:ac:eb:f2:9e:77:99:d7:b1:13:39:5c:cb:2c:9a:
87:d7:67:70:f1:49:89:22:6e:28:53:06:95:22:a6:
fa:45:1f:cc:21:25:60:0c:c3:4b:cb:14:e6:19:54:
9d:2d:9b:d8:40:f8:9d:19:45:48:90:de:58:eb:db:
4d:31:42:39:4d:38:65:2f:9b:91:10:03:d0:2c:79:
d4:87:b7:f7:0a:e6:76:ee:7c:91:7a:1f:b8:5b:c3:
cc:ad:d7:0a:f6:16:80:b3:dc:6c:93:04:b8:ba:d0:
37:66:89:4c:79:0f:0d:5c:7d:12:92:8a:0b:37:c7:
b8:0f:bb:ca:ac:fd:c5:e7:49:35:6c:4b:80:68:e0:
d1:9c:ee:13:35:3e:49:2b:84:d2:46:23:6b:cc:0e:
05:4c:3d:91:62:4c:26:f9:0f:d7:e4:35:ed:d8:4b:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:DF:B8:EA:04:CC:C7:E1:FC:25:9E:B5:E3:8F:B0:09:8A:45:F6
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:a5:5f:30:39:ce:80:43:7e:27:c2:69:af:fb:c4:d7:d8:
78:4d:d4:e3:8b:83:7f:ce:47:e3:98:ea:71:34:0a:3c:3f:79:
8d:63:2b:b0:33:cd:b3:d8:2b:31:b1:57:a4:79:66:ca:0e:b4:
bf:d1:3d:85:01:d8:90:e4:fe:0e:db:17:dc:06:d4:fe:72:8b:
7d:95:3c:db:c1:04:a5:97:68:66:25:8c:a6:6d:0a:8a:bd:f2:
ed:98:b4:26:74:9b:0f:7b:3f:3b:bb:d6:43:f4:f8:f5:d5:ba:
db:bf:44:00:dd:44:e7:fc:c1:6a:d7:6d:10:af:3e:af:f2:28:
c1:d4:ca:69:14:48:db:14:55:92:d8:73:ea:11:ec:a1:19:9f:
31:b7:ad:2f:d5:2d:a5:5f:2c:f8:6c:15:2a:56:8f:38:fa:bb:
1f:11:8a:6b:a1:0a:14:80:d9:fd:b8:bf:79:aa:3b:ff:4b:4c:
36:7f:da:ae:2d:78:aa:ea:1a:18:28:b7:f8:ff:43:f7:bf:5d:
12:01:34:39:67:57:d1:b9:ee:c7:06:0d:c1:f2:c6:6f:15:a8:
0b:cd:ea:a4:81:37:74:95:c6:15:f2:92:54:b8:70:9d:dd:63:
ab:5f:e0:11:ba:e3:eb:fe:86:b6:b7:95:ad:72:a3:5d:4c:c0:
80:ca:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:14:57 2025 by rpki-client