Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: G/+TeSG9BJSYcL4/wAxngaT3cwyx5GCEFmC1P4V4ldc=
Subject key identifier: 40:C3:49:F4:DB:E3:D1:DE:0C:A0:CB:9F:63:C5:E3:3A:18:EC:84:C6
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 0198439A29CED75C962378AB482D30B28839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 120B
Signing time: Fri 25 Jul 2025 22:00:33 +0000
Manifest this update: Fri 25 Jul 2025 22:00:33 +0000
Manifest next update: Sat 26 Jul 2025 22:00:33 +0000
Files and hashes: 1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=)
2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: oVhbbGD1KZBqQzhKee87p6bNboXcbJCtdgkUjtlcWtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:29:ce:d7:5c:96:23:78:ab:48:2d:30:b2:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Jul 25 22:00:33 2025 GMT
Not After : Jul 26 22:00:33 2025 GMT
Subject: CN=40c349f4dbe3d1de0ca0cb9f63c5e33a18ec84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:ec:30:c8:8a:d4:1e:34:59:26:8a:c0:97:
6a:9f:2f:d2:b3:4e:b9:86:2d:eb:41:70:40:52:49:
9a:ba:a5:aa:37:09:5d:f9:5e:22:9e:0e:ab:03:93:
d9:65:b8:9c:fe:80:17:0a:9c:1d:d1:e2:19:c6:40:
e0:0e:b0:c6:0c:49:ab:91:69:3a:b4:59:87:eb:24:
a4:bd:0b:df:f1:a4:34:38:60:8a:f5:e5:2c:48:a2:
f8:e7:dc:f0:08:0d:0c:e2:55:bf:fe:79:a6:83:4a:
9f:76:df:10:48:0e:77:70:7b:85:84:c2:b2:c5:a1:
4c:24:f9:16:81:62:d2:46:6b:59:f1:95:20:d2:1d:
b5:e9:44:dd:30:8f:1c:54:ce:4f:2f:4b:6d:15:d1:
b3:87:08:a9:2b:a7:9d:fc:a5:34:16:36:d6:5e:aa:
5a:b2:d5:c2:72:b6:77:e6:a9:42:6a:f2:8a:d2:63:
53:6c:57:71:30:79:05:05:a1:57:bb:89:0e:78:8f:
9f:9d:f4:dd:fa:79:fe:86:45:4f:4c:35:8a:41:d1:
b9:34:6e:a2:bb:c6:3a:4e:22:b1:14:c5:7c:04:a5:
29:be:06:7e:8a:89:ff:9d:f6:67:02:39:d9:ef:c2:
17:dd:d4:ee:98:ec:cb:6f:2a:6c:6f:3d:a5:a0:0e:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:49:F4:DB:E3:D1:DE:0C:A0:CB:9F:63:C5:E3:3A:18:EC:84:C6
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9b:24:0e:12:a8:08:39:83:95:19:67:b3:16:d5:ab:d2:16:
eb:44:49:7c:0c:83:62:36:c7:b1:d2:1c:9c:32:d0:2c:f6:43:
bb:d2:7d:d6:2b:53:ed:aa:ce:66:c7:de:8c:09:e7:08:12:08:
0d:b6:5c:f7:14:fd:ee:69:bd:ca:58:2a:12:1d:84:81:4d:6a:
fe:8c:3f:7d:79:dc:a1:31:d5:c2:28:52:c2:0c:f2:00:fb:e5:
92:ef:8c:12:09:c0:e9:ae:c2:01:bc:c5:8a:55:12:5c:5d:d6:
d8:5a:54:3f:6d:5c:44:37:d1:5a:e5:53:53:38:a9:8d:d5:b9:
00:ed:a5:1f:e2:b2:5c:a7:99:35:e3:d4:ab:ee:ac:60:b8:92:
1f:8d:58:67:e9:73:af:ac:34:ee:4a:c9:d0:68:31:e6:fb:2a:
cf:27:48:13:34:c1:c1:15:11:58:c5:37:84:6c:ed:0c:4a:9f:
c1:40:0d:4c:c7:d6:71:fe:cd:5c:7a:42:6f:73:b3:80:e7:bf:
d1:83:c4:07:dd:06:d9:d3:1c:51:13:12:d3:75:82:0c:f9:08:
66:ba:f9:cd:d6:b4:16:d9:5b:bb:ef:86:b3:8f:e2:68:9a:32:
2b:37:e8:98:78:02:f4:9b:c9:7a:2c:92:fd:75:60:a7:a1:2f:
f5:cc:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:49:10 2025 by rpki-client