Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 7pamczCL3APNbPsP1SGDIVHH8RLANJcS5GblpjgMnUA=
Subject key identifier: D7:FF:19:D7:16:CA:09:FD:8B:47:D8:6A:46:2C:BB:66:50:5A:53:67
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 0197470B79F01CEB3E52358972134E939C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 21:00:23 +0000
Manifest this update: Fri 06 Jun 2025 21:00:23 +0000
Manifest next update: Sat 07 Jun 2025 21:00:23 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: 6RKR/BV3laY0NWb2cjlLLZVzcK6qFtWSQpHqNr6BavY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:79:f0:1c:eb:3e:52:35:89:72:13:4e:93:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Jun 6 21:00:23 2025 GMT
Not After : Jun 7 21:00:23 2025 GMT
Subject: CN=d7ff19d716ca09fd8b47d86a462cbb66505a5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:04:68:25:4b:4f:59:e4:87:27:7e:af:5f:
03:a8:f7:70:63:d4:fb:0d:87:bb:cd:71:ab:fb:38:
30:46:1e:66:9c:b2:2f:7a:fb:07:fe:8a:c8:f6:0e:
c2:e5:73:03:a8:67:87:b5:97:8f:e8:64:84:36:c8:
9d:1f:44:91:ed:d2:cd:e7:93:35:82:17:62:18:01:
79:03:8d:34:e1:29:25:23:48:48:2e:81:b4:c9:72:
b2:12:06:0b:31:7a:44:1a:e5:48:18:f4:e1:58:97:
f6:ce:4e:82:bf:13:39:ef:44:58:0a:dd:c3:36:83:
97:46:91:51:03:72:ed:df:7a:04:3e:63:59:6d:76:
d7:18:0a:53:7e:cd:ad:23:fd:99:cc:3c:a2:7f:71:
d0:39:1a:ed:30:85:a6:f5:5b:30:64:fb:af:00:f3:
6f:e5:66:76:41:ee:df:a1:65:c2:3f:44:83:00:d7:
bf:71:94:74:f5:d6:8c:db:be:aa:2d:54:ac:73:d9:
5c:88:2c:df:38:84:9c:eb:4b:52:cb:91:ff:2b:5d:
1f:ec:6c:c5:1e:71:ae:54:1f:ba:c0:60:9a:cd:6c:
33:03:88:26:c1:7a:b2:b2:c2:86:09:6e:23:aa:8b:
ea:3d:81:bc:14:5c:61:01:e6:d6:a9:b0:5d:50:39:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:19:D7:16:CA:09:FD:8B:47:D8:6A:46:2C:BB:66:50:5A:53:67
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:4b:1f:ac:be:40:d3:21:f5:b5:5e:3c:99:5d:f3:1d:71:
c6:e9:11:0c:99:7d:32:0e:45:8f:26:dd:d9:bd:3d:d3:58:45:
70:b7:ae:d5:e2:61:9e:e1:eb:e3:78:ed:e2:7d:e7:fa:9e:81:
b2:12:7c:23:3d:ca:79:ce:ba:8b:81:4f:09:be:6a:f5:63:17:
ae:dd:29:03:be:d9:0b:e9:b3:68:34:31:b2:ec:16:14:6e:82:
ba:a3:9e:9d:ca:c6:e6:e2:f1:ba:b4:34:aa:91:70:b1:4f:b2:
01:eb:85:55:9f:51:f1:0e:b8:3c:9d:c7:6c:f6:27:49:24:01:
3b:11:0e:c8:72:eb:17:a8:6e:27:63:32:6e:2b:22:65:00:54:
6a:a1:a2:18:53:26:6e:d9:82:38:a8:18:10:9a:f4:53:26:78:
3f:88:5a:d8:17:3b:cd:c6:29:ce:08:c8:13:b5:8a:d3:11:ec:
2f:fe:63:ee:c9:e1:ee:d4:f3:eb:66:6a:46:3d:ee:93:dc:0a:
d9:d8:93:3e:ac:17:2f:ec:e8:60:ee:e2:a5:37:47:40:01:73:
d6:e4:8b:13:fe:7d:ca:96:58:17:cc:20:ea:74:9a:fa:3b:fd:
33:ab:b4:08:18:46:40:05:a7:11:ee:bc:73:62:e8:00:37:13:
0e:23:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:50 2025 by rpki-client