Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: uLXjLJ6eSQmDmfXKW1qsC7X8kd933HRBqZBiNDG6jbY=
Subject key identifier: A7:9B:D9:AF:E5:57:25:AA:A5:09:A2:60:BB:EE:0A:FB:DB:EE:8D:40
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 01992C3488022E229C2B9E32848E98270404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0299
Signing time: Tue 09 Sep 2025 02:01:04 +0000
Manifest this update: Tue 09 Sep 2025 02:01:04 +0000
Manifest next update: Wed 10 Sep 2025 02:01:04 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: w6g9DDWObEnzXYO4zTpW/bOeADiI7G0qzYr9WltKdM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:88:02:2e:22:9c:2b:9e:32:84:8e:98:27:04:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Sep 9 02:01:04 2025 GMT
Not After : Sep 10 02:01:04 2025 GMT
Subject: CN=a79bd9afe55725aaa509a260bbee0afbdbee8d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:66:1d:ad:df:36:fb:a8:2a:0d:70:b9:1c:
af:97:d2:3c:0a:25:72:35:61:6f:51:97:20:94:81:
d2:06:b2:a9:7e:cb:ca:34:40:7d:a3:3b:3d:ff:11:
55:27:30:c3:15:34:90:63:b2:4b:ec:b1:2a:99:bf:
36:f7:26:53:69:14:a9:b4:c9:78:41:7b:5d:f4:01:
fa:a5:a6:93:27:3b:64:00:1c:d7:06:a3:0c:77:72:
6a:4f:16:6c:fd:f4:e3:66:40:af:17:50:43:00:b0:
71:0d:e7:b7:32:c4:4e:7d:c6:03:27:ce:01:dc:95:
4e:02:63:09:3a:a7:1c:eb:7f:d5:09:0e:37:b9:1f:
af:c3:c6:19:ee:d8:1a:3f:a6:50:2b:20:76:38:5f:
78:1a:88:c2:82:46:df:ac:aa:12:1b:7d:16:6b:e3:
94:d5:d3:98:d1:21:e2:65:d0:9f:23:b5:0a:fd:a9:
c4:ff:58:dc:69:39:a7:7a:04:f4:21:03:18:54:da:
04:2f:7c:af:cf:75:6b:4b:2e:b6:af:54:0a:43:d0:
36:09:56:1f:29:97:f4:78:4f:54:79:96:f8:0a:54:
1a:cc:88:32:f3:64:d5:94:25:42:c7:a6:01:3a:21:
90:a6:4e:a5:49:67:a7:a6:16:c8:60:fc:9c:81:67:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:D9:AF:E5:57:25:AA:A5:09:A2:60:BB:EE:0A:FB:DB:EE:8D:40
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7a:2a:8a:72:c7:a2:0f:7b:05:f6:6a:0f:b2:31:c3:fd:26:
bc:6b:b1:22:3c:ca:74:60:72:7e:43:db:3f:a0:19:9e:b7:03:
70:c7:c2:68:d3:fa:93:03:8f:53:bc:ca:4c:f4:ce:ee:f0:01:
eb:52:2e:52:9f:be:cd:56:b6:b2:9e:6b:6d:4e:20:8b:a8:b9:
94:93:ad:f5:b7:1e:9d:62:c7:a4:d6:1c:ab:ea:cc:e2:f1:9f:
5a:01:84:48:7a:4d:db:d0:a6:a6:0b:74:a3:1f:27:47:7c:b9:
02:d1:f5:89:df:f7:79:54:3d:51:6c:2e:96:96:bf:87:58:78:
28:22:fe:64:d8:29:ab:59:f9:9f:91:2f:c7:63:27:a2:dc:ac:
ee:1d:2e:47:7d:b0:fc:ec:12:d4:66:b2:fa:02:c4:c6:02:4f:
09:e1:13:7f:d7:81:c3:57:da:d6:5c:6e:a4:59:b6:09:50:16:
19:66:1e:08:30:68:0c:08:51:37:78:7a:53:09:95:0e:d2:8d:
29:50:ab:fd:4a:72:9e:b1:7f:6b:78:94:9f:1c:5d:c4:b8:20:
61:bd:4f:12:0e:f7:0b:fc:b2:c7:c5:29:51:e9:d1:c6:29:e1:
6a:44:e7:3d:d4:94:69:99:a9:3d:6f:10:3d:73:8e:84:fd:8c:
e1:b0:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:48:56 2025 by rpki-client