Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: +sbU0ipTJcE6avXJysB4ayp7ZFirdTKaY9nbghWf+EY=
Subject key identifier: 6F:5B:AA:93:0D:47:56:7E:F2:41:F5:97:1B:10:4E:34:8B:B6:77:35
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 01983E3D66621B80145945549BB4DF7078F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 1055
Signing time: Thu 24 Jul 2025 21:01:07 +0000
Manifest this update: Thu 24 Jul 2025 21:01:07 +0000
Manifest next update: Fri 25 Jul 2025 21:01:07 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: cQ7memJ7D1n6S5Rm8peiC1OkU0GbseFM4jw+RhBt7yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:66:62:1b:80:14:59:45:54:9b:b4:df:70:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jul 24 21:01:07 2025 GMT
Not After : Jul 25 21:01:07 2025 GMT
Subject: CN=6f5baa930d47567ef241f5971b104e348bb67735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:fa:7f:99:24:c3:42:3b:96:64:5d:82:f4:
9d:dd:58:92:65:82:c2:ab:9e:1c:5d:33:a2:17:68:
88:30:15:d2:ad:c8:da:07:62:89:5f:ee:a5:5c:0d:
d0:cf:7a:1c:ee:53:b9:2e:96:d2:41:9d:de:b0:03:
74:52:cc:2b:73:46:c3:00:0c:8f:f7:3b:a9:a4:85:
9c:0a:c5:60:aa:56:f0:e0:3a:e0:59:1f:77:9b:55:
c5:34:97:ec:6b:ff:c9:b4:47:6c:d9:1a:ac:51:be:
8b:91:87:c4:eb:ab:af:0d:ee:1c:91:60:f1:28:99:
62:2c:53:69:24:88:ad:db:28:af:61:56:62:54:76:
d8:da:3a:5b:b5:4a:5e:ac:dd:a1:17:fb:22:be:45:
5b:2e:0d:3e:38:77:58:e4:ed:1a:82:a7:77:8f:83:
9a:f3:42:0d:8a:85:ca:4d:89:31:cb:31:c5:09:9e:
f1:63:26:57:94:79:a9:ca:19:7b:e5:ee:28:89:00:
de:49:9a:a9:85:50:a3:e8:3e:2a:19:19:7f:4d:35:
77:3e:41:91:26:4c:84:22:9d:80:42:3a:61:3d:33:
14:cf:61:32:03:2c:97:66:d1:db:a7:4f:6d:d4:04:
93:5f:41:6f:10:ce:39:3c:4b:e2:1b:b5:9f:6c:1b:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:AA:93:0D:47:56:7E:F2:41:F5:97:1B:10:4E:34:8B:B6:77:35
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b7:8b:94:a3:13:86:ed:b4:31:f6:5c:02:93:38:03:8e:4b:
d9:a5:3d:89:24:63:7a:9e:8a:61:03:4a:37:bb:f8:db:4e:a7:
5b:f7:0b:78:65:00:8a:bb:b5:ca:7d:64:18:b2:84:1e:cf:67:
bd:ba:60:28:c0:ca:3e:38:b8:47:e6:48:6d:b1:87:f2:a6:7e:
fd:1f:f4:a9:5e:74:76:dd:93:9d:2f:31:49:66:7b:ba:4d:9d:
a5:7f:50:0a:27:14:c5:a9:19:ed:d3:05:04:e5:07:38:ba:50:
18:78:6a:cb:a1:bf:35:cd:5d:3f:ad:6b:9f:ab:54:63:97:21:
a6:41:7d:9c:61:94:ff:43:06:71:21:fc:c3:31:18:d6:95:06:
1a:92:fc:4b:d1:3f:89:84:db:88:aa:7a:b5:59:1d:55:46:6f:
f2:4e:74:02:2e:b0:61:f9:8c:1b:d5:1d:f0:62:0f:f4:bb:88:
e2:14:fa:d9:b7:27:c5:7d:1f:ce:9d:f2:1c:2a:b6:69:27:bd:
af:79:40:a5:83:71:30:1d:0f:8d:a3:75:67:84:28:79:86:14:
99:ee:a9:77:76:13:70:ac:cc:df:47:40:01:68:2a:3a:f9:74:
20:76:a4:f8:28:e6:8f:6b:e0:47:85:07:21:13:4b:bd:82:0d:
e8:fc:16:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PWZiG4AUWUVUm7TfcHjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjJmZTZiN2YzZDM2NDMzMmJjZDZlMGRhZjc5MjI2Y2Nm
ODA5ZTIwHhcNMjUwNzI0MjEwMTA3WhcNMjUwNzI1MjEwMTA3WjAzMTEwLwYDVQQD
Eyg2ZjViYWE5MzBkNDc1NjdlZjI0MWY1OTcxYjEwNGUzNDhiYjY3NzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdT6f5kkw0I7lmRdgvSd3ViSZYLC
q54cXTOiF2iIMBXSrcjaB2KJX+6lXA3Qz3oc7lO5LpbSQZ3esAN0Uswrc0bDAAyP
9zuppIWcCsVgqlbw4DrgWR93m1XFNJfsa//JtEds2RqsUb6LkYfE66uvDe4ckWDx
KJliLFNpJIit2yivYVZiVHbY2jpbtUperN2hF/sivkVbLg0+OHdY5O0agqd3j4Oa
80INioXKTYkxyzHFCZ7xYyZXlHmpyhl75e4oiQDeSZqphVCj6D4qGRl/TTV3PkGR
JkyEIp2AQjphPTMUz2EyAyyXZtHbp09t1ASTX0FvEM45PEviG7WfbBvFawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9bqpMNR1Z+8kH1lxsQTjSLtnc1MB8GA1UdIwQY
MBaAFLti/mt/PTZDMrzW4Nr3kibM+AniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQt
MTQxNDUwZjEwYTg1LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQtMTQxNDUwZjEwYTg1
LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLeLlKMT
hu20MfZcApM4A45L2aU9iSRjep6KYQNKN7v4206nW/cLeGUAiru1yn1kGLKEHs9n
vbpgKMDKPji4R+ZIbbGH8qZ+/R/0qV50dt2TnS8xSWZ7uk2dpX9QCicUxakZ7dMF
BOUHOLpQGHhqy6G/Nc1dP61rn6tUY5chpkF9nGGU/0MGcSH8wzEY1pUGGpL8S9E/
iYTbiKp6tVkdVUZv8k50Ai6wYfmMG9Ud8GIP9LuI4hT62bcnxX0fzp3yHCq2aSe9
r3lApYNxMB0PjaN1Z4QoeYYUme6pd3YTcKzM30dAAWgqOvl0IHak+Cjmj2vgR4UH
IRNLvYIN6PwWpQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:32:48 2025 by rpki-client