Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: Q35T1WusBDWL3JGMRVTi+2lH7nv8rIE6E04YH0UjQ7s=
Subject key identifier: E5:70:CF:7A:90:D8:B3:2F:9E:35:BC:8A:5F:F5:30:2F:63:D4:0A:97
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0197583633D1F8E3B0E23CFBFBC2E71BEDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 05:00:36 +0000
Manifest this update: Tue 10 Jun 2025 05:00:36 +0000
Manifest next update: Wed 11 Jun 2025 05:00:36 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: WDrtLFGaZJwxhTdEQ1JpNaLnYiu5KhFGRsXS1VQxyXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:33:d1:f8:e3:b0:e2:3c:fb:fb:c2:e7:1b:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jun 10 05:00:36 2025 GMT
Not After : Jun 11 05:00:36 2025 GMT
Subject: CN=e570cf7a90d8b32f9e35bc8a5ff5302f63d40a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:dc:23:1f:c0:d0:2c:01:db:c4:1f:42:d4:
f9:67:2e:72:a5:a9:5a:d2:30:ff:71:97:48:ca:32:
29:56:e8:9d:a5:81:96:ac:ff:cc:ad:40:f9:f9:d8:
2c:6e:26:bd:45:9c:9f:d9:38:b0:7a:e6:77:3c:d8:
72:97:bb:9a:60:ed:ea:6a:64:ab:77:90:cd:75:e5:
8b:cb:b6:22:50:f3:d1:3f:bf:ab:b8:e6:7b:ac:1c:
37:be:fe:5c:4d:c9:93:91:e5:5c:bc:33:be:dd:40:
aa:7c:88:ad:21:c7:be:c4:de:a8:20:16:30:c4:22:
99:b0:28:bf:94:17:dd:d3:19:56:90:17:18:70:b7:
54:9f:ce:6c:63:a7:c2:14:89:72:b9:94:6c:22:58:
01:c5:e6:26:ba:ec:b1:b6:ab:8d:b6:92:15:f6:5b:
b8:1d:dd:69:00:3b:4a:c8:06:dc:0c:d3:b0:5e:88:
91:46:ff:4c:a4:5c:f7:ec:94:1f:9d:56:70:2f:38:
5c:61:cd:38:cc:30:ad:2b:f2:db:7f:1b:53:ee:5d:
d6:37:60:ce:7c:93:b0:a5:93:f0:11:62:ad:77:56:
26:5f:33:e2:e7:21:92:2f:fb:0b:1d:a0:3b:19:81:
40:1e:aa:54:38:ff:ba:2f:51:1f:84:a6:71:87:84:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:CF:7A:90:D8:B3:2F:9E:35:BC:8A:5F:F5:30:2F:63:D4:0A:97
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:e8:ad:df:6a:da:d6:e2:ab:a0:97:83:a7:2b:64:0a:84:
ff:23:b0:a7:60:26:de:7f:46:c2:5b:0c:18:8e:ef:7f:a8:eb:
33:1c:59:61:96:a7:0c:f9:ed:1d:1c:11:8f:79:3b:38:ab:75:
af:39:9e:2d:7b:48:8d:11:2b:97:14:58:ad:65:df:4c:ca:1b:
4a:a0:36:af:60:7f:08:6b:98:c6:9f:ad:de:54:97:a9:02:55:
02:c3:8d:4f:68:d0:89:52:ac:51:e9:e1:80:a1:f2:af:53:0f:
42:da:d6:a2:2f:c1:ad:9e:c0:e9:4e:f1:bd:3a:96:be:28:3d:
b0:08:b2:1e:53:21:fc:63:7c:e9:86:c5:3b:52:bf:7d:2e:89:
fc:29:b0:90:a2:7d:0b:09:a7:c6:3f:a9:6e:b7:0c:c8:35:cc:
c8:37:ad:c7:60:9b:63:e5:7a:4e:5d:25:ba:05:60:e7:98:93:
85:ca:4d:cc:d7:8f:03:16:36:0d:2c:8a:78:08:ae:b5:2d:a2:
a3:c4:65:e1:6e:ee:45:9f:6c:10:98:91:3f:31:6a:ae:c0:9c:
ea:3d:97:0b:c6:bb:8d:af:02:b6:a4:fe:03:57:71:ee:cb:5e:
82:6c:4b:16:7a:55:3d:2a:01:c2:12:32:0d:bf:67:80:b2:3d:
f4:89:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:11:46 2025 by rpki-client