Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: 9246+2Cuwp4Ei9cBdZGv6Ae6hC2txDwyFiCOlEEqhQI=
Subject key identifier: DE:2D:BA:BD:16:DD:49:3C:5D:9B:3F:43:32:CD:94:E2:11:ED:B6:4C
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 01975C137C06A6AFC10D6F01D72D4E47FF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 23:01:10 +0000
Manifest this update: Tue 10 Jun 2025 23:01:10 +0000
Manifest next update: Wed 11 Jun 2025 23:01:10 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: jaTf2NPR6Np73lkHBQALE3esomiuU8CjofcX9LeGmh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:7c:06:a6:af:c1:0d:6f:01:d7:2d:4e:47:ff:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jun 10 23:01:10 2025 GMT
Not After : Jun 11 23:01:10 2025 GMT
Subject: CN=de2dbabd16dd493c5d9b3f4332cd94e211edb64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:f5:cc:1a:ed:31:c3:68:b9:c9:35:42:0d:
79:3c:64:a0:3d:3e:d6:82:b8:a2:f5:76:12:5d:d8:
9f:4b:26:18:8b:2b:2a:38:e4:a3:07:ac:e9:69:81:
ea:bf:72:84:43:23:8a:b1:47:1d:d0:b5:6a:21:ff:
d2:0a:7a:08:bf:ac:fe:75:e3:20:a3:5d:d5:1c:b4:
4b:d1:f5:de:a2:51:9a:d8:ea:f1:2a:d6:d5:cc:9a:
35:1e:0d:1d:13:ce:7b:54:87:7d:87:9f:b3:f2:e6:
8e:49:c0:58:c8:64:22:e5:98:62:e6:45:97:79:12:
d2:c3:36:f2:a1:65:10:27:d6:9b:5d:a7:29:5b:93:
5d:c7:c5:64:64:78:fc:8a:5a:d5:88:ca:7d:ad:c8:
b0:7c:e7:a8:cc:c1:09:23:67:74:45:80:1e:85:7e:
f6:d4:f6:50:78:c6:bf:bc:6c:a7:ec:29:7a:de:66:
15:f9:2b:4e:3c:32:d3:bf:35:5a:84:7f:5f:9e:ec:
5e:42:d0:b1:9e:b0:bd:20:2e:ba:40:1d:5c:54:ed:
2f:7a:37:f1:65:9a:9b:8b:c5:be:d9:2c:9b:f4:6e:
8b:68:1d:1b:84:33:68:43:d3:4e:c3:10:49:b1:1e:
2d:99:de:d8:14:1e:a5:17:c0:2d:7d:ea:d8:d3:45:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:BA:BD:16:DD:49:3C:5D:9B:3F:43:32:CD:94:E2:11:ED:B6:4C
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:53:cb:17:24:25:b7:36:87:65:a6:47:d7:15:2b:4b:ee:
06:e0:1e:f5:84:a9:3b:41:f6:58:a3:8b:76:b1:e9:f4:0e:9b:
83:49:ab:11:6e:b1:b3:93:68:34:06:65:92:3c:7a:59:25:00:
e0:0f:2f:da:e9:78:f3:50:13:91:74:c6:30:cd:c3:7d:48:a5:
6e:f9:a1:be:d8:77:14:d5:38:21:5e:e1:a5:c3:23:4d:0a:94:
7f:6b:3c:aa:1b:06:ef:36:9e:f2:b4:3e:95:4c:6c:7b:a5:c7:
2a:72:e6:7a:02:89:18:3f:4d:ec:1e:df:2b:b0:91:1a:8b:a6:
9c:ce:61:cf:8b:62:91:f0:0c:33:b4:b0:63:c1:e0:11:f7:2f:
fc:34:31:fc:ae:a0:ce:e7:c7:41:04:3b:c6:f0:4b:2f:c7:85:
67:e3:f9:a6:f8:4f:97:88:cb:5f:92:b5:5d:33:50:8c:51:12:
51:4c:c9:49:95:8b:f8:c0:0d:e2:96:a8:73:d2:2a:03:59:04:
c4:7b:b6:9f:72:53:5b:cc:7e:eb:bd:7b:34:d9:ee:20:32:d9:
a6:6a:71:8f:54:80:0d:68:02:78:b5:c2:b6:73:83:57:af:6a:
a0:86:75:aa:54:b8:42:18:75:b6:f0:fb:b0:15:76:e5:a2:2f:
70:8b:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:52:11 2025 by rpki-client