Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: wPq3wNGefwm1T5+5S8y5+2MSfKvdo6tmg6sZ+ja2TlE=
Subject key identifier: AE:E4:10:11:74:BC:49:89:16:4D:38:69:D7:F6:5B:35:B6:53:83:C9
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 0199228C3566F676662F358D28E4447FF2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 09A3
Signing time: Sun 07 Sep 2025 05:00:37 +0000
Manifest this update: Sun 07 Sep 2025 05:00:37 +0000
Manifest next update: Mon 08 Sep 2025 05:00:37 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: lJG4xvyi19ZjK4xjBqseMvwf/n0kN6w9h8fKfk8Sm+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:35:66:f6:76:66:2f:35:8d:28:e4:44:7f:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Sep 7 05:00:37 2025 GMT
Not After : Sep 8 05:00:37 2025 GMT
Subject: CN=aee4101174bc4989164d3869d7f65b35b65383c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:06:e5:95:ad:e2:bb:af:eb:c7:fa:ab:f0:
c8:d3:9e:61:c6:ca:6a:24:fc:44:a9:a2:89:df:59:
2a:0c:d1:83:0b:fa:97:de:93:81:b0:84:49:24:84:
4c:1b:ae:8f:fc:32:97:a9:21:11:f3:6b:89:58:0f:
dc:c2:bc:ea:43:8a:99:1d:79:17:3a:19:a7:95:e3:
08:af:7e:f4:38:8a:76:33:3b:8e:ed:00:a4:5b:4a:
54:ff:78:fe:d1:62:de:6f:27:e1:f3:91:0b:30:05:
f4:07:c2:21:17:27:af:33:0f:1c:7e:41:bd:b0:ce:
f5:5e:62:68:5b:29:ac:29:43:c2:d8:94:99:9b:76:
5f:f1:37:05:6c:69:6a:e0:38:65:12:40:64:72:d2:
6d:22:2d:1e:58:1a:cf:80:fc:f1:97:29:a7:f4:63:
75:74:20:be:e2:2f:47:72:b9:93:a7:20:d8:e6:11:
c2:e6:7a:bd:0e:e1:b4:06:07:61:78:57:b3:25:39:
44:26:5f:df:10:e0:66:eb:ca:ac:cc:31:40:ce:a7:
6a:48:41:4b:62:4f:e9:ea:41:ac:bb:04:96:d6:8e:
78:c8:34:85:f3:31:a5:ae:55:2e:e7:e7:6e:46:8c:
0a:50:14:8a:3a:bc:2f:ab:5e:d1:21:eb:17:af:37:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:10:11:74:BC:49:89:16:4D:38:69:D7:F6:5B:35:B6:53:83:C9
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ab:71:42:61:2c:ab:47:55:57:2a:5a:20:61:d4:bc:a9:53:
9c:0e:e1:29:66:3a:f2:bc:1e:53:9b:af:74:52:c6:bd:7e:b1:
b1:b5:66:1c:51:56:1a:6f:ac:a8:0f:4b:31:a5:5b:46:fb:f6:
d5:f8:e6:f2:14:09:ae:a4:40:f5:fe:08:0a:23:cd:8c:1d:e9:
ec:2f:ce:35:ee:e7:53:29:fa:02:70:18:6e:01:d5:5e:ee:8c:
0f:5a:d4:69:e7:f0:22:eb:36:5f:7b:48:81:8c:ce:6b:3d:ea:
ef:b3:9e:be:f0:29:84:32:bf:43:b3:8f:c5:08:9d:7c:b4:ce:
a6:43:43:47:21:5a:c6:f2:b1:2b:1f:4b:b3:87:64:4b:1d:29:
c6:8e:44:cf:a4:80:15:81:60:ba:ad:69:0f:41:80:d9:b6:a8:
ce:91:f6:8c:0f:c0:25:69:12:52:f0:d1:b4:7b:f8:12:15:71:
0f:69:c9:a0:06:5d:bb:5f:2d:0a:47:ca:16:4e:3e:6b:07:f3:
e9:dc:14:f1:bc:4f:02:e5:80:0f:34:5e:e0:6b:7a:a2:07:e1:
36:f3:77:67:c7:10:87:b5:b8:71:0c:76:9c:14:78:10:1b:f9:
b3:e8:84:ca:7b:ff:81:bf:1e:ad:b2:49:e5:ad:0f:4c:2b:19:
7f:15:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:46 2025 by rpki-client