Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: 1eQ2CHXMWEDK0b8woVxsOQGrocT4deFxIM+LaZThRDU=
Subject key identifier: EC:2E:74:1D:45:34:F1:4A:0A:C2:0F:8A:4A:82:39:B2:95:77:BE:89
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01984A412C08AD4A1FD6B8D01CDA783BD901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 10D8
Signing time: Sun 27 Jul 2025 05:00:41 +0000
Manifest this update: Sun 27 Jul 2025 05:00:41 +0000
Manifest next update: Mon 28 Jul 2025 05:00:41 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: KJ9jLu7MYzDVD8NKMStqces1FDyYNfV8ykaDkqtMPt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:2c:08:ad:4a:1f:d6:b8:d0:1c:da:78:3b:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jul 27 05:00:41 2025 GMT
Not After : Jul 28 05:00:41 2025 GMT
Subject: CN=ec2e741d4534f14a0ac20f8a4a8239b29577be89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:18:b8:40:c1:f0:0c:3e:cd:72:8f:76:be:
bb:94:cf:b0:f3:6f:f6:7e:44:00:b0:2d:be:6d:77:
ae:f4:69:b8:f6:0b:85:f0:6b:bb:e8:d7:8f:0c:86:
db:bf:c6:32:55:66:4e:d3:25:76:5f:87:99:06:6d:
f5:ae:32:ca:8d:b3:7c:78:69:14:8f:b9:d5:76:df:
a4:7e:04:62:c8:b9:1c:f8:e5:a1:af:b0:07:ae:2c:
13:7c:e8:18:b1:21:c5:61:ce:05:86:99:65:98:67:
9d:cd:43:42:a3:b9:6c:e5:86:0f:b8:b5:22:8a:bc:
cc:97:61:8d:a3:04:4f:68:e7:f6:f7:02:99:2b:72:
e5:b2:0f:d7:18:f0:5c:8f:7b:5d:5f:74:51:26:b2:
0b:f0:7e:d1:fe:31:4d:f9:b2:a6:ea:bf:b6:ae:27:
d8:cd:42:d9:9e:b2:64:80:e1:98:80:ec:a6:96:00:
f7:dd:86:a6:26:96:7d:d3:ef:8f:0d:b5:df:c3:26:
db:1d:b3:1a:38:b8:c7:46:12:e8:33:3d:d9:fe:10:
41:da:d9:11:7f:a3:3f:10:8f:53:63:97:c2:d5:77:
66:f7:b1:97:57:bc:30:09:f1:65:8c:03:8c:f7:39:
86:46:84:b7:76:7e:c6:17:cc:ac:dd:2c:2d:5a:1d:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:74:1D:45:34:F1:4A:0A:C2:0F:8A:4A:82:39:B2:95:77:BE:89
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:e1:7b:b6:f3:c8:c9:c3:f8:9f:d8:ff:68:c1:a0:d3:b0:
6f:59:f2:bd:c3:bb:c0:c5:0a:2a:4c:36:a0:0c:6c:79:7b:55:
14:6d:64:3f:f1:89:eb:fe:90:fa:2e:69:37:87:b6:cb:6e:4d:
98:5e:15:be:4e:cc:71:9d:f5:8b:9a:5b:e6:a1:ea:32:f9:12:
4b:5b:a5:1b:43:0a:24:50:74:b2:e2:53:d5:34:e6:d4:0d:f4:
52:18:05:53:38:5b:6c:fc:2e:a6:c5:db:75:15:81:f8:f3:34:
cb:de:81:6c:e6:a3:04:45:22:a2:99:8d:ec:37:74:7c:4b:f3:
33:31:eb:1b:60:eb:7e:95:d4:74:57:05:39:6f:f3:27:de:6d:
ac:0c:6f:7f:61:47:1d:da:53:a0:c1:97:f9:74:ab:80:8d:c3:
2f:80:2d:90:9f:63:40:2c:a9:24:e4:b7:d7:9c:cc:0b:4b:a3:
1b:e8:63:fa:4c:bf:83:a2:39:64:07:14:6f:db:a9:6f:62:44:
8d:cd:01:54:c6:68:19:30:9f:cf:53:d5:0c:e4:bc:0e:32:f0:
63:03:9b:ee:f8:f5:4f:a7:c5:9d:58:d1:06:3e:6d:66:cb:d3:
27:65:26:36:f8:89:5c:6d:ae:b5:9a:fb:47:bd:c2:02:85:d3:
42:04:af:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQSwIrUof1rjQHNp4O9kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjUwNzI3MDUwMDQxWhcNMjUwNzI4MDUwMDQxWjAzMTEwLwYDVQQD
EyhlYzJlNzQxZDQ1MzRmMTRhMGFjMjBmOGE0YTgyMzliMjk1NzdiZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wYuEDB8Aw+zXKPdr67lM+w82/2
fkQAsC2+bXeu9Gm49guF8Gu76NePDIbbv8YyVWZO0yV2X4eZBm31rjLKjbN8eGkU
j7nVdt+kfgRiyLkc+OWhr7AHriwTfOgYsSHFYc4FhpllmGedzUNCo7ls5YYPuLUi
irzMl2GNowRPaOf29wKZK3Llsg/XGPBcj3tdX3RRJrIL8H7R/jFN+bKm6r+2rifY
zULZnrJkgOGYgOymlgD33YamJpZ90++PDbXfwybbHbMaOLjHRhLoMz3Z/hBB2tkR
f6M/EI9TY5fC1Xdm97GXV7wwCfFljAOM9zmGRoS3dn7GF8ys3SwtWh0XnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwudB1FNPFKCsIPikqCObKVd76JMB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0nhe7bz
yMnD+J/Y/2jBoNOwb1nyvcO7wMUKKkw2oAxseXtVFG1kP/GJ6/6Q+i5pN4e2y25N
mF4Vvk7McZ31i5pb5qHqMvkSS1ulG0MKJFB0suJT1TTm1A30UhgFUzhbbPwupsXb
dRWB+PM0y96BbOajBEUiopmN7Dd0fEvzMzHrG2DrfpXUdFcFOW/zJ95trAxvf2FH
HdpToMGX+XSrgI3DL4AtkJ9jQCypJOS315zMC0ujG+hj+ky/g6I5ZAcUb9upb2JE
jc0BVMZoGTCfz1PVDOS8DjLwYwOb7vj1T6fFnVjRBj5tZsvTJ2UmNviJXG2utZr7
R73CAoXTQgSvFA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:16 2025 by rpki-client