Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier: TyyikZEgb24rfJpt0BSeBDy/DqDXI2DlfO54Xk4cuVA=
Subject key identifier: 45:16:C0:1B:8C:5A:5C:52:F9:24:65:D5:9A:C0:CC:6B:4A:D6:88:6A
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 01984965118F5EF08981DBCEB1A7247E306E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number: B6
Signing time: Sun 27 Jul 2025 01:00:17 +0000
Manifest this update: Sun 27 Jul 2025 01:00:17 +0000
Manifest next update: Mon 28 Jul 2025 01:00:17 +0000
Files and hashes: 1: BPp-br1m8twWuKnnT9fY7MJwn_Y.roa (hash: jSYthsXuRkdrCtZydE+6ZCFDw/F0UdXQcHDK5mHn62A=)
2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: ECQLNihGI+6FdP2HHPLwbf8yGoo1mhy4am+nboXMS/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:11:8f:5e:f0:89:81:db:ce:b1:a7:24:7e:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: Jul 27 01:00:17 2025 GMT
Not After : Jul 28 01:00:17 2025 GMT
Subject: CN=4516c01b8c5a5c52f92465d59ac0cc6b4ad6886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:c8:9a:58:05:0e:60:5d:25:36:62:9a:d8:
76:cd:7e:49:4e:2d:85:a2:df:4e:75:15:5f:fb:cb:
94:55:0d:28:f6:c6:c6:59:f2:9b:20:29:4f:bc:ab:
3a:df:5b:78:ed:72:13:8d:da:3c:c8:aa:bd:5b:c8:
1c:4a:10:f8:bf:11:8e:4e:a4:a2:dc:dd:0b:3a:43:
1f:82:5b:9d:e8:b3:01:e0:49:af:fe:4f:50:9d:78:
a0:93:ec:46:d3:e2:7b:e2:5c:f0:7d:3c:4e:a4:4d:
22:92:1c:91:09:dc:35:39:cd:04:d0:13:cf:81:5f:
e0:01:1c:ed:89:55:f5:b2:b1:88:ba:68:fd:10:ad:
ba:77:ca:a9:7a:b7:0b:6f:ab:62:44:fc:e6:0f:d5:
68:da:c6:ae:27:99:b6:a2:9f:6c:94:b9:30:be:2d:
bd:26:dc:39:ae:26:ed:89:3f:f1:ff:5a:a4:36:f5:
42:a6:59:b9:aa:11:93:56:19:f1:6a:b0:1a:98:fe:
c5:a6:f5:3c:d2:4e:fb:19:eb:04:6a:08:97:f8:be:
e8:bc:bc:72:00:54:fb:24:71:2a:14:97:37:10:dc:
d8:49:cf:67:33:39:64:a0:47:4a:a9:7c:08:e1:b0:
38:5e:44:59:54:8f:c9:e5:01:cf:25:09:9f:43:47:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:C0:1B:8C:5A:5C:52:F9:24:65:D5:9A:C0:CC:6B:4A:D6:88:6A
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ef:d4:32:02:15:d6:46:c5:59:27:99:02:e4:f5:02:e4:ff:
93:42:a2:6e:b0:2b:b4:2d:fc:67:f1:dd:11:2f:da:85:7c:a1:
e5:90:f6:75:82:58:e6:42:d5:33:c9:57:88:89:dc:cc:fb:02:
80:5f:16:45:a7:3d:76:22:65:76:43:1d:58:b9:34:6c:d9:32:
d9:c8:8a:b1:b9:df:95:32:25:81:1b:50:b2:f1:e4:9f:55:af:
f8:3e:7f:fe:65:25:53:9d:90:03:a5:2e:f9:22:8a:0d:4b:9c:
70:4e:b3:ee:cd:94:1f:25:b4:ee:14:41:0c:97:1b:20:a4:c5:
5b:59:b9:28:fd:43:b2:a0:e4:aa:b3:61:c2:d8:06:22:f5:ea:
d9:41:a9:88:02:fd:7d:18:cd:0b:8c:1a:03:d9:dd:3a:86:8a:
ce:ba:1d:b7:66:5a:49:8c:30:8d:32:00:e5:c7:f7:46:a4:14:
45:ba:2c:f0:f1:0d:0d:11:14:cc:66:a8:93:8b:48:db:3c:c0:
f7:05:8b:0a:4c:1c:e3:93:63:74:8d:ee:cd:2b:0c:d9:04:d1:
52:c8:2f:ae:12:4e:0d:3c:01:27:6d:da:9d:c5:52:7b:85:6f:
e5:fb:e9:c8:39:fb:80:03:a7:9d:99:13:ac:df:00:64:58:0f:
a9:c4:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:46 2025 by rpki-client