Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: rZT54SqVjHAZqSJuOibOSUQZeNiQjP/nV1zUkDM+c48=
Subject key identifier: 57:7C:8E:F0:BE:D7:E4:61:73:6D:15:C3:68:D4:E3:F1:45:C2:C3:D0
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019763CC9D67671A4EE61A8DA3FC7C71A9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 11:00:43 +0000
Manifest this update: Thu 12 Jun 2025 11:00:43 +0000
Manifest next update: Fri 13 Jun 2025 11:00:43 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: taUPsiLycqYWTD9lj417FTQOZsBdNIXgvggCqPXHv5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:9d:67:67:1a:4e:e6:1a:8d:a3:fc:7c:71:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jun 12 11:00:43 2025 GMT
Not After : Jun 13 11:00:43 2025 GMT
Subject: CN=577c8ef0bed7e461736d15c368d4e3f145c2c3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:d6:b5:ce:67:83:64:f8:22:0a:13:e5:c4:
1e:12:f2:32:62:e4:6a:65:aa:ae:3f:79:07:12:ec:
68:ec:c5:0a:b5:e8:c9:3a:59:89:74:7f:08:f1:39:
32:ab:4a:81:35:18:63:4a:c9:fd:46:8e:38:49:91:
a6:1b:33:6d:89:db:e1:ed:86:3a:0a:44:ab:50:f4:
0e:d2:bb:4b:21:64:a7:4f:ab:56:05:11:2b:93:b8:
5d:a8:e6:b4:11:6d:f2:1a:51:ae:88:ba:d9:f3:ac:
cb:6a:30:a2:6d:ac:5a:ce:22:71:7e:8d:b5:84:b9:
c4:a8:d1:29:90:dd:aa:87:81:7e:04:9f:56:a5:5c:
88:ed:3d:3d:f0:54:95:8f:d9:fb:31:56:6d:1a:0e:
30:0a:c6:c1:cd:5d:8a:65:e7:bb:73:c5:53:02:49:
44:2f:2b:08:f6:45:9f:5f:a2:c6:6d:db:aa:53:91:
2b:16:cc:96:eb:2b:32:18:21:86:b9:b7:b4:92:40:
11:ae:40:b9:1b:4c:c0:3d:05:d3:d6:63:1b:cb:20:
80:6e:4d:3b:1a:1b:9b:f0:40:01:b5:f9:00:6e:7b:
5a:55:5d:62:28:d1:c9:bd:eb:b9:ea:75:65:9b:99:
99:1b:fb:51:90:7d:73:66:4d:f6:14:5f:6a:1b:f5:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:8E:F0:BE:D7:E4:61:73:6D:15:C3:68:D4:E3:F1:45:C2:C3:D0
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:9c:1e:1f:00:c8:91:d1:96:aa:93:47:af:48:04:6e:03:
cc:e4:2a:15:73:b8:60:c2:3d:68:fa:19:6c:c7:6c:e4:7f:fa:
c5:30:06:15:0c:0f:8e:4f:02:35:1b:f0:fe:ef:d2:41:70:9d:
ed:c1:53:66:7b:73:12:cf:f6:bc:af:a2:94:59:0a:90:32:75:
9d:3c:b6:46:45:10:1a:bf:22:63:1c:eb:94:d4:7d:21:51:07:
35:98:a7:9f:91:94:5a:01:42:57:ba:bf:d9:43:54:3f:11:2b:
ba:19:92:0b:83:7b:4f:d5:23:a1:f3:d2:c0:85:c0:f8:de:45:
c5:09:98:69:4e:62:5d:f3:58:da:9d:a8:8c:91:47:5e:68:99:
a1:07:a6:b2:3e:8c:5e:d8:cb:8f:d2:34:20:58:56:50:bb:b8:
cd:f7:02:9e:a9:1c:74:35:cb:04:69:d4:f5:a4:55:84:a8:18:
1e:74:02:cf:63:cc:2f:9e:81:6a:3e:25:27:0f:54:42:9b:24:
69:d7:f3:42:95:5a:c7:8c:a8:7d:4e:49:81:5e:cf:74:95:d0:
e1:c8:8b:21:aa:20:4f:a4:ba:a6:53:5e:35:de:66:c8:23:66:
c6:5d:fb:54:b5:69:24:b7:87:30:fa:e3:ae:17:6b:f0:a5:e3:
e5:18:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:02:14 2025 by rpki-client