Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: Y/EApoWMsKltxG0oUxXIwMOpgYZcB0ZxBoMYx6Fldt8=
Subject key identifier: D1:DF:06:5B:AF:2E:0F:E5:1F:B1:45:46:A5:60:22:EB:96:DB:6E:A2
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 019848F7A5F4B2CD186DF0003A78A34CBFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 0267
Signing time: Sat 26 Jul 2025 23:00:46 +0000
Manifest this update: Sat 26 Jul 2025 23:00:46 +0000
Manifest next update: Sun 27 Jul 2025 23:00:46 +0000
Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: DypQo4Z88DvewgEsRDSPJftrnzzq711XNH1hCpILze4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a5:f4:b2:cd:18:6d:f0:00:3a:78:a3:4c:bf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Jul 26 23:00:46 2025 GMT
Not After : Jul 27 23:00:46 2025 GMT
Subject: CN=d1df065baf2e0fe51fb14546a56022eb96db6ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:ba:0f:6c:69:76:bd:de:dd:6a:5c:10:22:
c8:5c:3e:f3:e6:75:3f:d0:eb:f9:bf:df:fc:95:0b:
03:2f:ec:bf:ed:20:cf:74:43:6a:78:c2:17:11:55:
c2:a1:55:3b:21:25:92:11:3a:6f:63:41:18:ed:98:
9f:10:6a:bf:f2:f6:80:d4:7d:5d:f9:49:50:ab:cd:
ab:85:a1:b0:1a:4d:bb:fa:df:4d:ae:93:29:4b:26:
4d:1a:2c:46:f4:3d:ff:58:5d:2a:0c:4c:1b:f8:d9:
c9:73:54:21:df:b5:69:e0:b9:e1:a9:60:b7:b9:e8:
87:a3:41:86:64:df:df:fd:8b:06:6f:5b:bd:4b:86:
07:44:2f:cc:fc:37:ce:e1:15:1d:d2:99:de:ff:a8:
35:cd:e6:dd:e5:74:00:29:0c:fe:15:56:bd:51:71:
28:1e:35:67:b9:c2:a1:55:6e:3c:aa:0a:4a:0e:74:
07:b9:9f:c3:e9:11:c7:98:74:9c:67:7f:81:8a:92:
00:10:35:20:b6:82:3d:19:0f:d0:ac:09:49:a7:c4:
f8:94:e3:ba:0e:fc:b6:9b:99:be:02:b1:2e:14:5f:
63:aa:80:3e:41:bb:6e:a8:45:b3:fa:87:42:10:78:
2b:31:fd:2f:80:7b:e8:e4:06:29:f0:6f:79:c3:10:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:06:5B:AF:2E:0F:E5:1F:B1:45:46:A5:60:22:EB:96:DB:6E:A2
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:63:26:a6:bd:ca:ed:e5:c9:d4:9a:4a:04:56:39:0b:26:37:
85:1d:f3:c0:37:f6:f2:6f:bf:be:55:3c:c1:0f:6b:ae:d7:df:
d1:13:20:1c:34:02:1f:4e:b2:80:b0:17:0b:40:51:9a:8b:38:
a9:3a:f1:74:89:10:d4:a9:cc:83:3d:eb:81:24:be:8f:61:43:
0c:c4:db:63:ed:56:82:5b:95:3c:f8:71:e5:51:1a:bb:53:31:
2c:a1:f0:28:fc:cf:7e:a4:cb:f2:e3:32:c4:83:60:e5:c7:f8:
3a:ee:9b:4e:bb:14:04:e4:b5:a4:9b:40:81:f7:fa:30:a7:35:
97:d1:7d:03:ef:6c:56:95:6d:6b:d0:e1:34:16:4f:d3:4d:6d:
f6:89:9c:fa:e5:0d:ef:fb:71:4a:f2:2e:9f:11:58:cf:cc:d2:
3e:01:f5:0c:53:28:2c:23:a0:08:4d:d7:56:9d:93:88:26:c4:
5a:9c:9c:be:08:be:9e:72:a8:77:91:0f:fd:3d:b6:6f:af:e7:
bd:ba:61:0c:41:23:97:e3:83:c4:31:c7:7b:68:42:0a:9b:47:
39:6d:35:ad:de:71:17:0f:01:63:06:ca:ba:6a:c8:72:41:bb:
d4:d7:db:a9:25:da:80:06:2d:4c:d7:85:da:4d:be:43:60:67:
d6:0c:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:55 2025 by rpki-client