Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: FF+kSPOECNSwZZ/PsTAzz3+WC34yv0oJeJx4I7W9N/g=
Subject key identifier: E1:DF:1B:1B:47:0A:82:77:14:F1:26:5A:DB:64:AD:98:F8:26:9E:5C
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 019848F739AE2E477F4F87212B3FB95DE50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:18 +0000
Manifest this update: Sat 26 Jul 2025 23:00:18 +0000
Manifest next update: Sun 27 Jul 2025 23:00:18 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: Ed06iSCcLRAeXURrfqcSkWFOrBV5myriYMfmgXmoLT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:39:ae:2e:47:7f:4f:87:21:2b:3f:b9:5d:e5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Jul 26 23:00:18 2025 GMT
Not After : Jul 27 23:00:18 2025 GMT
Subject: CN=e1df1b1b470a827714f1265adb64ad98f8269e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:fa:1c:8a:05:af:36:77:3e:88:fe:87:7e:
16:56:08:17:02:5b:69:35:6e:61:29:e2:8e:86:e2:
00:db:e0:2a:23:ca:6c:e4:8f:6b:48:d9:33:0a:5a:
7c:6a:f2:60:ee:4d:29:e6:e2:2f:f7:01:9e:a9:c0:
e0:49:e0:2b:79:a8:32:d3:e0:da:8c:7c:26:f6:62:
e1:0a:eb:3a:91:a1:b4:2c:a5:59:fc:b4:14:84:18:
a7:b0:3c:4c:6a:8a:9d:95:66:f3:9b:94:4b:ff:01:
11:73:ac:d4:b8:05:82:28:a9:0c:f1:30:85:58:26:
6d:e9:3e:72:17:1c:be:d5:c6:1b:0c:ee:91:cd:3a:
f1:fa:19:31:da:13:df:07:52:96:f8:6b:00:20:fe:
c5:f9:0c:9a:cd:5b:40:4c:b4:c0:0e:62:47:d9:5a:
2b:1f:18:f6:63:a2:cd:0e:68:3e:9f:53:37:00:d5:
74:c6:19:03:f7:00:9a:e1:89:d8:dc:87:c0:2d:67:
a7:25:2a:bf:90:3a:f4:15:c4:e6:d5:33:79:c5:e6:
54:f1:e1:49:37:ae:24:8c:7a:e1:8b:66:e2:49:75:
c0:2b:05:f6:c5:62:0a:df:70:1f:e0:66:16:8b:38:
01:7b:80:c0:54:35:c7:98:51:f1:ef:c2:20:3e:6b:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:1B:1B:47:0A:82:77:14:F1:26:5A:DB:64:AD:98:F8:26:9E:5C
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:a5:f3:61:f1:27:6b:89:bd:95:db:31:3b:92:63:69:23:
7d:c6:e8:85:32:e2:81:dc:bc:58:45:ae:9b:a1:b9:3b:d5:7e:
e1:76:cf:6c:7e:21:52:32:0c:91:88:d0:e3:c4:4a:65:37:2d:
66:04:f3:11:e6:31:0f:f7:6e:43:81:b5:2e:ce:7d:f0:4f:d3:
d1:6a:ed:6b:77:b2:ae:8c:a1:fa:66:37:29:32:93:2f:85:4a:
65:2c:54:ca:d1:53:6c:cf:58:6b:74:05:0e:a9:e5:47:8c:e8:
c5:69:a5:b5:61:f0:69:dc:f5:a1:5b:f0:08:47:7b:65:c2:9e:
1a:83:26:42:b0:2f:ad:b7:a4:5b:96:19:fa:8b:cf:af:11:6d:
a7:6b:30:00:c5:13:94:dd:2a:d7:58:1a:6a:ae:a9:64:67:79:
30:91:ca:33:77:8d:98:d9:00:f5:eb:c1:24:a4:c7:b9:ea:e8:
37:32:c5:f8:18:d5:f6:d9:6d:eb:9c:55:5a:99:4e:06:30:c7:
4b:0c:40:f4:9d:fb:f3:16:cf:be:e4:84:ef:b2:f4:ec:e4:29:
da:17:90:24:72:15:85:54:42:40:90:a5:b4:c4:17:fc:16:34:
e6:b3:17:89:0f:70:d0:57:36:eb:ed:a6:43:8e:08:7b:71:72:
68:1c:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:39 2025 by rpki-client