Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: fp6cyo6M/2B/OIzgZDHlLxV4hNE/oHhIpgKgg92j6eI=
Subject key identifier: 64:8D:71:81:F1:D4:EB:A7:62:F9:B9:7C:AB:A7:BA:EF:92:27:1F:21
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019853446370B9E4B64BD8329EE9CEC200B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1325
Signing time: Mon 28 Jul 2025 23:00:47 +0000
Manifest this update: Mon 28 Jul 2025 23:00:47 +0000
Manifest next update: Tue 29 Jul 2025 23:00:47 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: FyawaohiEEvS8UrQ+j1AfRpjptKZQNfON98Ecv+Ugag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:63:70:b9:e4:b6:4b:d8:32:9e:e9:ce:c2:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jul 28 23:00:47 2025 GMT
Not After : Jul 29 23:00:47 2025 GMT
Subject: CN=648d7181f1d4eba762f9b97caba7baef92271f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:fc:a5:13:9c:88:d0:c3:a7:8e:8f:7e:24:
cf:8c:7b:9f:06:5a:a9:84:56:87:39:ab:4d:5e:a7:
09:be:a5:58:e5:95:3b:c5:ff:c1:4e:39:63:96:c5:
6b:2e:4a:f2:ee:56:1f:53:6e:97:35:42:69:23:f5:
1d:3c:87:0f:c3:13:5f:fa:42:06:fe:a4:6e:a6:e1:
c5:6c:54:8c:59:36:32:d4:73:a4:d1:6e:56:28:49:
b7:f3:86:4b:bf:1f:20:79:de:bd:89:c2:32:66:10:
c4:7e:d6:7f:5f:6b:5b:48:5b:17:ce:bc:b7:a8:53:
c4:0b:a1:e6:f8:50:1b:3d:60:4d:19:76:99:44:31:
c0:aa:92:ba:7c:31:38:97:1d:0b:95:c5:af:24:eb:
22:95:24:42:66:f4:50:78:29:20:4d:2d:69:ac:e0:
0a:c9:9c:f0:26:4a:b5:31:22:27:69:e5:a3:9a:7b:
80:0c:da:db:6b:90:b0:ac:6c:63:b1:e0:b3:90:88:
88:47:4a:c8:c4:37:80:77:f6:f4:7b:f2:7d:7f:b9:
0b:04:93:98:24:aa:c8:00:1e:4b:57:d2:dd:3e:2d:
97:43:0a:65:5c:d8:d0:eb:38:d5:a6:34:9d:e0:91:
13:aa:87:d2:c0:01:b7:d2:de:b4:b9:c4:e2:44:15:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:71:81:F1:D4:EB:A7:62:F9:B9:7C:AB:A7:BA:EF:92:27:1F:21
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:55:7c:05:cd:6e:04:ab:3b:ca:3f:28:42:15:74:32:8f:d1:
9d:31:d8:95:e8:9d:f9:a8:2a:b2:78:77:7d:8d:cd:45:ec:46:
ba:23:d0:16:2e:6e:78:e2:2d:81:6c:d9:5a:cf:6a:0f:2a:35:
db:a2:e9:0b:35:e4:63:f2:08:d0:5d:bc:5e:3b:56:ac:14:d7:
b7:df:0e:3a:06:4a:46:4f:4d:07:ec:9e:9a:cb:77:36:a4:72:
f5:53:4f:bc:1e:0e:76:4d:b0:e7:50:49:47:80:15:ea:c0:cf:
27:0d:0d:01:b4:0d:ec:b2:58:44:b0:f7:13:e6:c1:e2:a4:73:
3f:ee:bc:3d:f5:50:04:6a:61:70:af:94:26:60:44:40:d3:24:
5a:b8:88:0e:e5:e0:83:66:c1:af:3c:b3:22:fa:04:b6:5d:24:
95:47:9a:6c:ea:69:9b:c0:a1:6d:d3:aa:62:d3:fa:af:ab:24:
6c:cc:db:e3:b4:8f:c7:10:7f:44:48:e1:18:49:33:a2:da:46:
4e:78:07:07:a2:a4:63:0a:b5:c1:6d:8f:c6:83:47:6e:9f:35:
50:22:13:0c:d8:e9:c2:a2:fd:c7:80:85:af:b8:81:7b:4c:54:
f8:62:5c:eb:3a:18:1f:e8:96:47:eb:66:55:43:15:40:dc:bc:
94:3c:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:34 2025 by rpki-client