Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: gjwRrjhL2HW8QQvMGprKcY8AAlYwFrByga6PoWGJ5Xo=
Subject key identifier: 41:41:CE:1B:8F:8E:57:B2:20:7E:98:7B:3F:7E:E9:2B:FE:A5:02:D7
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019939157CF0833999863630D2A01EDCD931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 14:02:13 +0000
Manifest this update: Thu 11 Sep 2025 14:02:13 +0000
Manifest next update: Fri 12 Sep 2025 14:02:13 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: iFuoXxS7EHeOhZnGCdlDFHW0kfuuaYC59PkbARba8e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:7c:f0:83:39:99:86:36:30:d2:a0:1e:dc:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Sep 11 14:02:13 2025 GMT
Not After : Sep 12 14:02:13 2025 GMT
Subject: CN=4141ce1b8f8e57b2207e987b3f7ee92bfea502d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:fd:e6:81:6a:fe:09:7c:a7:96:59:0a:a0:
ec:fa:2a:f6:a5:dc:90:2e:53:f0:5e:0f:60:0e:0d:
06:0a:04:7e:35:99:b0:10:11:6c:e7:12:05:02:80:
2e:01:63:d3:6b:73:41:48:99:30:22:ea:0c:47:fb:
11:9d:47:f3:a4:23:79:30:64:11:82:64:b0:a7:2f:
78:86:cd:07:d9:75:0d:2d:0b:d0:1d:00:55:bf:da:
86:7c:6e:03:1a:f0:07:32:c0:af:0a:d7:69:d5:00:
72:b8:92:bf:d6:0c:e3:1c:4c:0b:77:c8:09:6d:bd:
33:86:04:aa:b2:db:87:00:a8:3a:63:a7:22:e5:30:
66:57:35:7c:d7:3a:cb:11:e8:be:9f:9e:35:08:88:
4f:52:57:51:60:55:95:2d:21:c1:3e:49:40:fe:23:
63:dc:76:80:3e:c5:28:6d:fa:c7:bf:6e:7d:f6:ff:
04:a8:97:4d:e2:d0:a5:c1:12:59:42:91:c4:1b:3f:
0c:9d:2e:1a:1e:11:4b:c7:8d:e6:8a:9f:b8:1c:2d:
7d:a6:7e:2e:54:7d:ae:a9:33:4d:4f:7b:ca:9b:5b:
38:5e:ab:cb:a0:43:17:7e:76:83:b3:09:f4:35:36:
28:f2:c7:af:41:c0:be:76:56:a6:54:88:19:5e:8a:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:CE:1B:8F:8E:57:B2:20:7E:98:7B:3F:7E:E9:2B:FE:A5:02:D7
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:82:ed:6f:fd:88:7b:76:87:72:b4:8b:00:97:3e:2b:0e:3f:
1d:7e:73:04:0c:d8:b1:23:b2:97:4d:b8:a5:fe:ba:1d:cb:dd:
0b:fd:0b:4d:fc:ac:d4:b1:c4:3a:eb:14:2a:0e:27:8e:94:f3:
5e:19:f0:40:d7:09:c3:d4:3a:67:4b:0d:02:a8:21:10:32:aa:
b9:dc:51:90:7f:21:53:9c:16:72:eb:a4:24:cc:e8:5d:ad:82:
7f:b9:04:9d:c5:58:05:a1:26:ff:46:92:75:9c:a7:6d:54:8c:
ec:d4:b4:7b:e9:f6:de:83:c7:53:cb:02:9c:ad:66:bb:70:be:
eb:61:82:35:aa:ca:98:ab:9b:9a:70:b6:ba:3b:6b:09:28:3c:
31:e2:d9:d6:30:d9:7e:c5:6e:5a:eb:4a:fc:da:d8:11:30:67:
86:e5:04:39:c0:5b:f5:14:21:e7:06:2c:6e:32:cd:06:a3:f3:
6d:a3:75:15:20:d1:33:2e:34:03:29:3c:69:f4:ee:23:02:53:
21:e3:6e:21:46:40:4c:c7:3c:90:e8:ce:14:57:4e:75:60:17:
dc:ba:3e:39:be:eb:32:f2:77:4d:c9:45:8b:fc:be:fa:47:cf:
6b:e4:99:76:d9:e5:80:45:71:47:9c:38:ac:a7:85:a9:27:07:
8a:91:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:38:46 2025 by rpki-client