Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: hzh299tJ+fIAe5Bz6XiwsypZZhxglqrwBJVI2CKYXmw=
Subject key identifier: 6C:8A:AF:BE:66:E2:65:FC:90:19:F5:33:78:DB:21:6F:A3:38:0B:31
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0197470C067A5CECA18BA1551C99917E48D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0FD5
Signing time: Fri 06 Jun 2025 21:00:59 +0000
Manifest this update: Fri 06 Jun 2025 21:00:59 +0000
Manifest next update: Sat 07 Jun 2025 21:00:59 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: yo5ROwcz9x3wZJM6cDySgFUA9xIwUJU0Y1ab9cXibw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:06:7a:5c:ec:a1:8b:a1:55:1c:99:91:7e:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jun 6 21:00:59 2025 GMT
Not After : Jun 7 21:00:59 2025 GMT
Subject: CN=6c8aafbe66e265fc9019f53378db216fa3380b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:96:1f:93:09:d5:2b:5f:c7:24:51:4a:63:
7a:b4:d6:0e:65:df:d0:70:08:7a:a6:36:ca:9c:81:
96:77:6b:2b:e5:99:c6:f7:e0:d2:e7:26:b6:72:65:
43:80:1d:43:ee:43:af:81:49:f5:fb:e5:55:6f:33:
3f:45:af:57:8c:52:82:89:82:7a:aa:dd:7d:5a:53:
c1:c5:03:52:5b:48:97:4b:6b:86:f2:4c:97:4a:62:
06:43:fc:eb:bf:31:59:12:81:a5:4e:5b:ef:d4:bc:
b9:df:26:32:66:1d:5f:3b:4e:a9:d6:4a:b1:aa:cf:
f6:64:dd:91:9c:89:62:ef:9a:30:b8:3f:19:ff:8b:
c0:21:9a:d5:bc:3c:c1:61:29:90:63:36:49:0a:cb:
78:e5:e6:0b:75:67:15:9c:03:db:ad:6e:07:5e:69:
a4:71:7b:32:ef:c7:50:ee:f1:3e:1b:27:95:17:c0:
67:8b:93:91:11:b1:0c:24:ff:d1:91:b3:a1:8d:12:
56:98:d3:5a:ea:1b:a3:90:a5:dc:ae:b7:0f:3d:28:
0f:20:c8:a7:b5:bd:8d:1f:71:d1:4f:de:65:ae:d8:
88:ed:6a:78:c0:88:e0:cb:e0:af:58:55:61:ba:12:
7c:2a:1a:0b:50:68:d2:ce:e9:19:bf:35:3d:3f:33:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:AF:BE:66:E2:65:FC:90:19:F5:33:78:DB:21:6F:A3:38:0B:31
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:92:34:7a:95:80:87:82:9c:5f:86:df:7e:7c:d7:ea:63:
01:63:7a:0b:fd:b0:17:18:0d:33:83:fa:af:2a:55:d0:ef:23:
ff:a8:d7:e5:da:e8:cc:2d:79:36:2f:dd:a5:a3:d3:8c:64:5f:
19:3d:0a:85:67:95:93:1b:a8:00:52:d2:29:23:5f:ec:66:8f:
02:c5:c1:06:09:1a:61:08:e1:ff:3e:23:8e:ee:74:1e:07:31:
37:cf:d0:75:6f:d8:70:9e:64:5a:5f:ca:9d:e8:09:19:10:0a:
fd:82:f2:02:59:59:1b:1f:02:53:aa:f6:dd:3d:a3:65:b9:9b:
2b:d1:3e:db:c5:8d:3d:e2:d6:54:70:c8:be:36:9c:a3:1a:7c:
1a:2c:93:e8:f5:9e:db:f4:03:81:41:5b:0f:90:11:57:b3:16:
23:b4:93:c0:87:d1:e2:7d:9b:78:7b:e9:03:00:19:62:19:98:
55:c3:c8:eb:76:8a:be:50:36:05:40:81:4c:a0:07:03:83:0d:
c0:25:d3:e5:18:b2:fe:26:50:3f:ea:15:45:6a:e8:88:af:b4:
fe:c5:04:c4:5c:06:4c:10:a5:81:81:92:f5:6a:99:90:a5:00:
29:67:4d:38:6e:51:82:a1:28:22:c7:46:06:06:88:5c:63:5e:
f1:f0:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:54 2025 by rpki-client