Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: giYXIRNl064vZ0iC7Wq6hnoO3bVcATKAiK+H+jl5OX0=
Subject key identifier: 7A:BA:D2:6D:8B:D2:85:89:27:A3:2E:61:50:83:16:92:5F:DF:27:5F
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 01983F18BDEB3F6B8DCD6BEC3FD550CB2E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1443
Signing time: Fri 25 Jul 2025 01:00:42 +0000
Manifest this update: Fri 25 Jul 2025 01:00:42 +0000
Manifest next update: Sat 26 Jul 2025 01:00:42 +0000
Files and hashes: 1: k6UKx3bCnfW1Q3tkVsPcIPEuvlQ.roa (hash: +0DXQs0QMlsJXI7gX3eM0Gw9l35+q3Rn2eAjam8Wggc=)
2: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: I8wQX1iGWMlx0clI9ZHuGVRkEPVdJQ2Fn2/m8SPhYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:18:bd:eb:3f:6b:8d:cd:6b:ec:3f:d5:50:cb:2e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jul 25 01:00:42 2025 GMT
Not After : Jul 26 01:00:42 2025 GMT
Subject: CN=7abad26d8bd2858927a32e61508316925fdf275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:1e:9e:f3:93:ca:40:19:cd:b9:fb:fa:9b:
2c:8f:8a:01:9f:61:9d:8f:2f:9d:fe:c5:93:e8:26:
ad:8f:5b:d9:2c:3b:75:f6:7d:d0:95:c5:48:c7:dd:
4d:7f:c4:80:18:72:e5:a8:e8:e9:80:35:5c:f9:fb:
0f:6c:4c:bf:f6:9d:18:a9:7d:f0:1e:91:2f:ec:a0:
b7:17:3f:75:47:be:fc:98:e7:46:a6:68:fc:2f:fe:
56:9a:60:a0:01:a4:c4:99:e7:9c:2c:0a:d4:65:df:
77:de:25:9e:f0:de:49:3c:e7:26:57:f0:b0:1f:bc:
96:d3:40:b1:70:32:2f:1b:ee:73:7b:04:ff:d2:ba:
25:10:88:b7:19:58:13:2e:2a:ae:27:d7:b6:51:38:
49:05:55:4e:83:15:e8:5a:59:a6:8d:0a:44:ec:cb:
80:ac:e9:01:06:11:a1:31:21:88:2a:53:e8:c2:4b:
2e:ff:ec:87:bd:7c:4b:9b:06:87:29:08:18:fa:9a:
4e:1b:95:37:89:c3:e4:d0:36:a7:64:c1:89:72:9c:
0c:b2:81:30:c2:2a:ee:d1:51:8e:36:03:d1:49:aa:
6d:a4:cc:35:88:a3:81:5a:53:c7:f2:2f:ac:37:79:
55:a7:55:0c:a0:a0:f4:7b:31:1a:a2:b4:3f:67:58:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:D2:6D:8B:D2:85:89:27:A3:2E:61:50:83:16:92:5F:DF:27:5F
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:88:ab:25:23:df:c8:cd:32:9d:11:03:8e:07:d9:00:d7:ea:
70:e2:2c:bb:88:05:d5:9a:0e:b2:97:e4:55:f4:6f:b6:21:c5:
6e:27:51:63:63:16:6c:0e:6c:0d:f6:7b:36:2a:9b:0f:ec:d0:
07:53:f3:20:02:fd:df:f3:f5:ed:37:09:bf:58:9f:41:bb:d4:
42:f9:d9:60:ab:cb:1c:a5:52:8a:cf:3c:07:70:be:18:de:2f:
ec:22:85:02:e5:55:4d:21:12:51:17:7e:56:4b:38:e1:77:87:
57:ea:30:44:f8:01:04:7b:6e:07:ea:73:5e:21:ac:83:23:25:
d6:3e:64:4b:bf:9d:60:ed:65:c7:04:64:6a:a6:eb:48:f6:c5:
97:20:ba:5e:b2:5f:f8:d9:18:98:f1:be:66:64:e9:f4:5c:d8:
62:42:70:60:2f:56:d1:76:bd:22:13:f0:a4:79:f2:87:c1:a1:
43:39:64:b3:64:32:6a:07:8b:bc:b4:30:31:24:9a:79:c0:bf:
a7:7b:76:7c:f1:9e:77:e0:c5:bb:cf:e0:51:47:5b:80:ed:dc:
ea:c3:66:ac:c2:0e:39:2d:68:6a:fb:2c:3d:41:29:c5:02:70:
eb:db:1c:cf:a5:27:e6:ee:48:70:ce:29:be:fb:34:c4:7a:45:
f5:39:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:09:12 2025 by rpki-client