Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: wfj56F5rM7d2Ccw79jcmEA3ZyYBVE9IiX7VprRuDdxE=
Subject key identifier: D5:65:42:62:A1:CF:94:4E:C9:75:00:9A:0C:10:A5:CF:7D:06:A5:2F
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019849D32BCAF55BE3DAD6A52B1A848A1306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:32 +0000
Manifest this update: Sun 27 Jul 2025 03:00:32 +0000
Manifest next update: Mon 28 Jul 2025 03:00:32 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: +uPC6RT83hiH5B5MTNAOoOqvSKYitkGc/XlxTOgbTX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:2b:ca:f5:5b:e3:da:d6:a5:2b:1a:84:8a:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jul 27 03:00:32 2025 GMT
Not After : Jul 28 03:00:32 2025 GMT
Subject: CN=d5654262a1cf944ec975009a0c10a5cf7d06a52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:32:e8:5e:c1:a5:f2:6e:94:6d:0b:dc:3c:
01:69:0e:09:e0:80:10:7b:df:cd:46:6d:84:b4:5d:
da:75:61:92:36:c9:f5:5b:c8:3f:80:bb:52:fe:af:
7d:e3:92:09:1a:8b:85:74:47:e9:d4:57:ab:cc:41:
79:26:41:3c:7c:36:d3:4c:ce:45:64:a5:70:02:73:
1c:46:24:ad:df:92:d4:c6:4d:94:b9:2f:7f:27:ec:
39:6b:b6:a5:b0:4b:e7:83:91:d5:fe:0e:42:34:b5:
28:26:72:fd:06:55:64:0b:b1:7e:0a:95:b2:33:e9:
4f:df:db:02:52:fd:99:b5:9e:89:67:df:68:36:a9:
19:ea:0e:b0:c3:5d:a7:d3:fc:5c:28:dc:c1:ab:95:
b8:29:e6:6c:af:f0:bb:88:de:d4:21:3e:95:d1:61:
d5:18:4e:7c:2e:7e:51:f5:07:30:53:3e:1c:96:8c:
f0:16:9a:49:13:dd:61:87:06:ee:65:e8:52:48:74:
99:72:3d:52:fc:95:be:ff:1f:1f:57:74:56:78:53:
28:b2:4b:6a:22:5e:ea:c7:83:6d:2f:31:85:d3:75:
01:83:8d:25:ca:be:bb:78:07:ad:9d:8a:e9:33:64:
2a:d5:b7:91:ae:b2:0d:2d:94:f0:7b:1c:ca:8d:67:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:42:62:A1:CF:94:4E:C9:75:00:9A:0C:10:A5:CF:7D:06:A5:2F
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:79:3d:7b:5f:c3:4c:9e:48:6e:2f:e2:a2:af:11:f4:e0:fd:
52:ce:88:b4:cd:29:1c:05:a5:22:12:94:48:67:14:25:32:dd:
19:75:aa:c7:d4:83:2d:d0:e9:91:5b:c2:c8:f6:5e:63:0c:9d:
fb:d3:7f:6d:e2:2e:14:e6:03:e8:17:bb:26:27:e9:b7:34:46:
ff:38:e9:ca:51:2e:49:64:82:67:cb:d3:28:53:e6:36:2c:a0:
0d:12:23:fd:73:8d:5b:07:99:b5:f5:f1:02:dd:12:07:d1:35:
d6:4c:5f:87:54:6d:ef:58:8c:24:4e:ec:9a:6c:c0:ad:87:72:
45:12:e8:74:81:b3:80:8a:38:11:ac:eb:55:5d:b9:97:00:5f:
1d:07:6d:da:a0:99:ea:80:ed:95:de:7e:27:cb:8c:45:c5:46:
a1:11:d2:9b:63:f7:c3:aa:19:50:cb:c9:4e:8a:41:d2:68:eb:
24:5d:86:a3:48:25:95:92:8e:3e:ce:d7:f9:e6:73:e9:81:bf:
16:f1:10:c2:09:92:8b:b7:bd:9f:1d:1d:2b:98:d0:75:cc:56:
61:75:82:6c:7c:d6:9b:51:92:b3:f4:ff:ea:41:eb:68:00:66:
35:27:d3:96:cd:76:a2:d7:0f:2a:2f:0d:c8:dc:48:31:8d:69:
c6:d3:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:46:03 2025 by rpki-client