Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: oCqEbIMYX/mWQoS1cKpIY2Dby/pE5LyJI8us66aARh8=
Subject key identifier: 98:88:CE:12:01:B5:BC:1A:82:21:7B:5B:98:A0:9B:08:55:66:5D:08
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 01984BC18727C73D14EE710FDF8FDDDB4CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0C1D
Signing time: Sun 27 Jul 2025 12:00:30 +0000
Manifest this update: Sun 27 Jul 2025 12:00:30 +0000
Manifest next update: Mon 28 Jul 2025 12:00:30 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: LKNJQGrFAtaeyp1EyXqJaL9fZlzERnnJ20KGqMkCqzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:87:27:c7:3d:14:ee:71:0f:df:8f:dd:db:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Jul 27 12:00:30 2025 GMT
Not After : Jul 28 12:00:30 2025 GMT
Subject: CN=9888ce1201b5bc1a82217b5b98a09b0855665d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:bc:b8:d6:75:c8:26:77:14:84:96:46:7b:
77:7e:42:f1:db:b7:9d:55:b9:e6:5c:a8:b0:25:31:
66:a3:77:c7:6d:e1:88:3c:f3:3f:d6:bc:79:27:4c:
f7:61:52:db:81:06:e5:07:27:90:87:83:43:8d:49:
2d:96:9c:c0:aa:9a:fe:b6:fb:6d:24:78:ab:e4:86:
7c:8d:91:ba:e1:4c:32:2d:db:76:ac:3f:52:5f:00:
3b:cf:fa:26:f0:2f:34:2c:9d:fc:36:79:7f:2b:86:
b7:bc:07:02:6d:d9:04:79:c5:30:cf:74:98:8f:bb:
0f:2b:0b:15:35:fb:a9:65:e1:de:0e:54:80:41:9e:
6a:b5:0b:20:f8:73:e0:cf:97:9d:62:fe:6b:69:2c:
00:4a:56:a2:83:e0:23:55:3b:e7:f5:b9:ba:7d:88:
66:51:6e:15:8d:79:42:50:ac:c8:6f:ad:40:36:f4:
0b:da:ac:9d:96:c7:61:13:5c:c5:47:38:0b:71:95:
01:fe:08:f0:c7:32:a4:17:36:46:32:39:ea:4f:45:
78:77:2d:68:3f:67:25:73:74:f0:18:44:9d:ff:11:
56:6a:61:80:37:aa:d4:25:c6:4c:55:f4:0c:43:d2:
97:31:d5:28:4f:be:d3:cb:c1:ba:eb:24:d6:cc:1e:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:CE:12:01:B5:BC:1A:82:21:7B:5B:98:A0:9B:08:55:66:5D:08
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:ab:05:18:ee:86:4f:33:c3:91:46:3f:02:fc:bd:92:3c:
90:16:5a:b3:5b:ed:ea:a9:7c:5c:f8:ad:c4:1e:fb:1d:c7:69:
89:42:b6:ee:49:90:1b:fe:29:b5:02:e6:ee:7c:43:05:94:74:
46:ba:0e:fe:73:3e:5f:f2:f2:7f:7c:90:8d:d4:4a:7a:59:57:
57:dc:72:1f:e7:dc:c3:43:0f:d1:47:40:63:3a:06:14:41:f2:
7e:54:06:b0:9f:ac:1d:2c:f0:41:07:1e:ea:75:dd:42:f8:24:
e5:3f:65:73:e4:8b:9d:e3:f5:d4:0f:0d:b9:1a:76:38:35:fa:
ca:79:74:88:e3:bb:b7:e6:80:9f:d9:7a:d1:25:6e:48:99:89:
6f:26:44:67:57:08:3b:5d:ae:e5:e7:e3:dd:5d:9e:17:4c:e0:
dc:dc:a7:4c:a0:79:6b:a8:82:9d:7e:0e:55:d3:e4:bf:35:57:
33:86:2d:46:16:f3:90:82:da:32:d9:c2:eb:84:42:35:05:d9:
d4:4e:6b:48:8a:a9:2e:53:54:4d:6b:9c:a1:20:cb:e3:ff:82:
a1:f8:e7:84:3d:8f:ae:b6:c7:51:5d:34:33:ff:d3:82:d9:19:
e6:c4:0d:a1:5f:85:77:e7:39:58:c9:8d:ee:18:e7:ea:7c:39:
01:39:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:28:01 2025 by rpki-client