Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: KE0gb7u6cFmfwUKu6r+yrjfHLTIpl0XJ7sECHa7rVJs=
Subject key identifier: C8:88:F0:40:F4:B1:CA:2C:5D:4F:C2:53:1C:1E:38:2B:BD:BF:6C:52
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019756480BE3E9861EFCC63DEA25758C490F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 20:00:51 +0000
Manifest this update: Mon 09 Jun 2025 20:00:51 +0000
Manifest next update: Tue 10 Jun 2025 20:00:51 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: FnCVvPsmiDzs/uHznzcJReOLqYSkB/TOmOqbJxoVcDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:48:0b:e3:e9:86:1e:fc:c6:3d:ea:25:75:8c:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jun 9 20:00:51 2025 GMT
Not After : Jun 10 20:00:51 2025 GMT
Subject: CN=c888f040f4b1ca2c5d4fc2531c1e382bbdbf6c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:a5:c8:25:0e:c3:57:5a:2a:7e:91:28:ca:
b8:f6:29:ca:f6:ec:e4:61:3e:f6:6c:87:93:09:fa:
93:e2:14:3d:30:e8:37:fc:e2:73:fb:a1:25:fb:6e:
b5:11:6e:cb:45:ae:cb:19:aa:52:21:c2:18:9d:cc:
33:e5:12:ad:be:ac:1e:9c:9e:7e:4b:42:68:41:5f:
5d:43:0b:00:ff:c2:d6:60:14:79:dd:fa:09:e0:20:
2f:02:ab:4e:fa:91:d9:df:5c:c1:be:fa:50:92:b3:
d0:3d:d2:ee:ce:a8:d6:88:e0:63:98:af:22:c8:cd:
01:c3:18:59:fa:5a:9b:5b:46:49:b3:02:ec:9e:83:
fb:3c:98:47:23:31:fc:24:d6:49:5f:5f:27:7f:34:
5a:32:19:fd:ec:56:fe:72:36:39:a4:89:dd:85:f8:
12:7b:6a:37:67:62:70:59:66:95:f4:2f:06:3a:04:
54:8d:fa:2a:88:88:5b:da:51:d4:20:b4:98:39:fc:
e1:f0:7a:d0:17:20:cd:ab:31:19:d3:5e:85:f9:5d:
e2:db:e0:28:0d:91:0b:1d:66:b7:83:eb:84:00:e1:
08:6c:b8:d0:e6:29:f2:48:bc:67:e6:bf:21:cb:8b:
30:7a:98:8e:dd:dc:5b:40:b5:6d:00:13:b7:3c:0d:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:F0:40:F4:B1:CA:2C:5D:4F:C2:53:1C:1E:38:2B:BD:BF:6C:52
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:1d:ec:20:af:76:f7:94:0e:90:26:c1:3a:ea:96:1b:63:
e1:fc:01:96:05:ae:e6:0a:b2:ec:ca:0b:7d:12:5c:9a:0f:23:
9a:39:22:df:20:68:0d:28:a7:55:b9:48:06:02:5d:ac:79:a6:
17:10:c8:e2:3b:e0:2e:64:03:88:f2:cd:5c:42:c8:f5:a5:32:
2d:3f:c0:77:88:a1:5e:9f:75:c7:05:9c:e4:8e:f8:80:60:49:
b2:6e:be:a4:d0:c1:8a:d2:a9:89:63:e6:0c:a9:b7:41:88:b1:
b5:ec:ac:26:50:98:d7:a4:7d:6b:77:32:c3:cd:e8:01:46:54:
b3:5b:f0:ab:bc:5f:56:71:0d:cb:de:1a:ae:1b:46:49:dc:a1:
2e:92:22:da:00:a3:8a:a8:25:3f:fe:93:ee:0a:56:b3:b3:4a:
03:a0:a2:c0:8d:21:2d:f2:6d:e9:3f:53:f2:c1:ed:26:9f:f9:
42:32:2f:10:f5:3c:25:7b:64:f7:2f:c7:87:11:5d:d4:87:08:
4e:ba:7c:e2:80:11:c3:6e:3b:f0:a3:a3:99:d0:75:7f:52:71:
95:c4:17:68:89:92:45:07:41:79:cb:51:cc:de:02:b9:c0:6c:
2e:ad:1a:ea:08:0f:cd:2a:ef:e1:64:7b:73:27:e5:bf:01:e6:
89:c6:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:32:54 2025 by rpki-client