
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: svxC1aAS/bA0xAIautC/PT+rsdZnFCw1IO3whnSihVY=
Subject key identifier: F6:94:AE:1C:6C:F2:3D:9B:3C:36:79:C2:01:F8:07:93:E1:62:30:0C
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 019922C3AFFCDD56E8C793A1A80F51455CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: 0F
Signing time: Sun 07 Sep 2025 06:01:13 +0000
Manifest this update: Sun 07 Sep 2025 06:01:13 +0000
Manifest next update: Mon 08 Sep 2025 06:01:13 +0000
Files and hashes: 1: 3OCyfd9-b0yR0abVJP1F9gKnVqM.roa (hash: /G4JQWC4tt8/O3EYdqfvI2PzBBGKVWMhd1Rq8kOs3ds=)
2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: 23+sAj8Si3EGwe+q8493czn4Ukcq5fK8Gphd98fMQGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:af:fc:dd:56:e8:c7:93:a1:a8:0f:51:45:5c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Sep 7 06:01:13 2025 GMT
Not After : Sep 8 06:01:13 2025 GMT
Subject: CN=f694ae1c6cf23d9b3c3679c201f80793e162300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:3a:35:d4:24:24:14:b1:bc:53:02:ca:8e:
5d:56:2e:5c:9a:87:8b:5b:82:87:37:04:47:bc:5c:
23:b7:cf:32:ab:1d:16:df:1f:c2:29:c2:8f:76:42:
e0:5a:43:33:d8:74:89:12:d1:4c:07:71:b6:97:75:
27:3b:5b:b2:6e:82:65:3a:d7:db:74:d7:bc:9d:61:
0a:c1:16:e8:94:f0:c8:9c:f7:26:8e:11:71:6f:c1:
2b:48:df:04:ee:00:b1:30:af:34:e3:8c:b1:c8:3d:
df:a0:2a:b7:0b:f2:b6:21:f0:29:03:d6:76:16:09:
af:b6:63:b0:74:c7:60:95:27:2c:10:20:7c:cc:f9:
8a:53:e6:c6:4f:9d:ee:ff:b9:ee:75:c2:1c:29:f2:
fc:d5:f4:7f:40:59:7c:3c:c2:e2:57:05:d8:df:ce:
b1:86:59:ee:82:dc:ed:00:11:c2:45:12:c9:c3:66:
fb:47:45:1f:1b:4b:13:ca:df:a8:b5:40:71:08:87:
6b:39:fd:b0:37:91:1f:af:20:f7:cf:03:83:18:43:
c9:fb:bc:4b:05:89:23:05:53:52:c8:7d:9a:83:53:
45:f9:f3:13:3e:35:0a:7d:ec:7b:62:4a:c8:da:f1:
38:9c:c2:d6:a0:2b:e2:a3:28:65:54:7e:d5:6f:bb:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:AE:1C:6C:F2:3D:9B:3C:36:79:C2:01:F8:07:93:E1:62:30:0C
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:32:3c:05:a9:fb:0a:65:99:15:bc:84:9f:78:8f:f2:9e:
56:8f:54:1c:96:5e:88:dd:81:f6:0f:0a:f1:75:1a:ef:a2:b1:
fd:36:a7:9d:06:46:4a:e8:96:19:0a:f3:6a:79:a6:58:5f:05:
d9:c3:18:dd:13:d1:75:78:21:a1:26:c6:38:e1:ff:d5:e4:8b:
10:23:98:e0:35:b9:17:23:7e:86:89:fe:1f:8c:6f:4a:6a:0b:
c4:61:9a:f9:46:7a:a5:66:3d:c7:ce:a9:27:a8:4f:72:6d:c4:
4f:86:83:85:66:9c:50:9c:52:28:0f:8c:31:2e:6c:85:99:df:
7b:7f:2a:82:9c:64:a9:73:23:fd:b0:22:c6:01:ce:f1:cd:4a:
4b:30:90:7b:1f:e1:17:7e:f9:f9:de:4c:4b:68:35:2d:ff:35:
61:3e:0f:7e:01:47:d3:66:ae:ef:d0:2a:29:8e:d7:e2:0c:4a:
50:93:8b:53:42:eb:e3:74:5f:89:23:96:45:b6:82:c7:a3:4b:
82:78:bc:e5:d2:c8:1d:e0:79:d6:44:89:01:cc:8b:f1:f2:bb:
8c:36:91:c7:a0:2c:00:d8:d8:d7:a6:cd:fa:a7:69:48:de:f0:
c9:5e:1a:8d:bd:16:0e:d5:68:1d:7b:75:51:ed:bb:b4:48:9f:
e8:cc:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:38 2025 by rpki-client