Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: Qck8sx2FU0sSFamfi+AODNLZ81LKXVglJ0TrBgyO6AY=
Subject key identifier: 4F:A1:B1:98:24:46:40:78:F6:5D:96:D6:1B:BF:D2:5A:AC:96:F5:FB
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01974EFC03FFE370FCB6889DB28678FC3627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 10:00:28 +0000
Manifest this update: Sun 08 Jun 2025 10:00:28 +0000
Manifest next update: Mon 09 Jun 2025 10:00:28 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: NjLtXKKsk5cPh0zmfA5G7FuEQRmwVLbTBZv2NEpMHJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:03:ff:e3:70:fc:b6:88:9d:b2:86:78:fc:36:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Jun 8 10:00:28 2025 GMT
Not After : Jun 9 10:00:28 2025 GMT
Subject: CN=4fa1b19824464078f65d96d61bbfd25aac96f5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:0f:e5:4e:39:24:43:0f:43:ea:e0:00:89:
0a:86:3e:8b:80:69:a2:59:96:6c:2d:c8:de:77:05:
90:0b:11:ec:4b:ff:e3:bb:06:90:4a:95:db:c9:34:
99:a1:60:ee:59:b0:39:2d:f7:7f:ae:8f:f1:64:bc:
37:e3:7c:69:63:3a:75:8c:10:b7:4f:de:1f:c0:a9:
dc:59:2b:93:97:ca:46:b9:a2:49:06:4e:c4:c8:75:
53:03:d4:77:dd:7b:2f:2f:f6:b7:8c:ed:42:42:d3:
49:6f:cd:be:3e:c5:51:f0:99:02:ec:e6:d4:df:a5:
a7:85:2d:fd:2b:89:66:17:15:66:64:28:44:65:74:
25:6b:37:a0:e9:05:b6:fa:a2:a7:8a:f5:e5:0c:fb:
3b:7a:dd:dc:e3:65:ba:7a:d4:ee:fa:b4:de:e4:22:
3c:4b:ee:67:b6:34:d7:80:f6:ea:72:70:a6:03:9e:
f4:cd:11:cc:0c:52:a4:73:30:91:5e:76:59:43:47:
b4:e9:63:49:b3:5e:1e:a5:59:df:5f:70:87:04:51:
d3:78:b4:64:36:68:22:56:f0:84:85:56:37:54:b7:
1e:8c:e6:8c:44:cb:52:be:12:28:65:68:a2:1e:e5:
2c:20:2d:94:ee:82:14:ed:10:91:b6:21:bf:a8:80:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:B1:98:24:46:40:78:F6:5D:96:D6:1B:BF:D2:5A:AC:96:F5:FB
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:dc:8b:bf:d7:89:92:1c:72:d6:aa:f5:1d:c5:75:7d:88:
ea:39:9d:d8:7c:e1:c7:86:e6:f1:73:ec:a0:e4:43:f0:d3:ef:
53:8e:49:94:5b:7c:6b:e5:34:72:69:1c:89:d6:23:77:28:a1:
55:2b:ad:99:18:58:8c:25:1d:29:8b:15:a4:3c:28:b8:26:0b:
ea:49:c5:02:a1:20:19:65:1c:a1:ff:80:27:bd:71:70:ca:19:
28:e1:7d:3e:7f:af:d2:48:8e:90:64:49:7f:2c:78:63:25:b8:
0c:33:0e:1e:c0:9e:d5:ca:85:1e:b6:67:a6:de:2f:a7:b4:67:
c5:ec:d6:e5:44:f7:3b:6e:ce:b3:6b:ff:5e:8a:e9:2e:c1:0c:
f9:6e:51:d0:f7:17:c5:99:7b:29:b7:f0:b2:ef:d3:f5:dd:b8:
08:f1:f9:73:e9:3a:9a:be:b0:48:a6:fe:fb:40:75:62:cd:e3:
33:82:f1:51:aa:ba:0b:5e:a6:be:db:46:37:55:dc:5e:6e:9c:
f7:e4:10:d2:ab:1d:1a:b4:36:07:ac:a3:99:ab:0a:ef:df:ab:
e8:8c:4f:d4:00:dc:d5:48:ea:dc:44:0f:6a:f3:4b:cb:29:f0:
25:8d:c8:3a:83:19:82:27:53:dc:5b:7e:d1:1e:7c:fa:a3:bd:
28:f5:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:19 2025 by rpki-client