Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: qgbS7B8h78j0rnAUDuSN6CrJXrHaNSGABuyJae2f4FI=
Subject key identifier: 24:DE:40:07:8A:DB:32:92:A2:4F:61:BE:3F:07:35:34:E4:2B:79:73
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 019921B22490697DD643D3F27E609A09786D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 0708
Signing time: Sun 07 Sep 2025 01:02:26 +0000
Manifest this update: Sun 07 Sep 2025 01:02:26 +0000
Manifest next update: Mon 08 Sep 2025 01:02:26 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: ZGCiGMW66fmpl4UZI8g3RJLzsujWhn/ZzvsE/KV0bI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:24:90:69:7d:d6:43:d3:f2:7e:60:9a:09:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Sep 7 01:02:26 2025 GMT
Not After : Sep 8 01:02:26 2025 GMT
Subject: CN=24de40078adb3292a24f61be3f073534e42b7973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:f4:cb:1a:6d:a0:71:b7:02:01:39:5a:d5:
b2:fa:ba:df:42:48:73:67:2f:33:99:41:4e:74:ce:
d8:57:95:fe:93:0d:fe:75:1d:61:21:ba:21:eb:4c:
24:aa:ce:f2:0e:2b:4e:14:87:ba:66:de:a8:91:22:
2d:30:33:e4:65:72:b3:f2:e4:43:bf:25:99:e9:8b:
e9:06:1a:44:01:9d:df:32:0e:2a:58:1e:a4:47:73:
3e:6f:ac:e6:f1:c0:56:ef:37:84:e4:01:14:2c:3d:
6d:29:cb:82:cb:72:7a:01:67:78:27:b2:fa:e6:ae:
6e:b4:c3:87:24:6b:39:6d:3c:cb:4f:9f:b6:68:d1:
cf:69:80:81:8f:86:1f:eb:d7:50:8d:42:e5:e9:24:
19:75:31:21:0f:35:b9:13:be:1a:96:87:33:11:37:
83:a0:66:ab:c2:e9:42:cb:1a:94:a4:99:98:61:17:
99:97:e0:f3:9c:a1:05:12:bc:6b:2c:ed:fe:55:26:
0b:8f:15:f3:50:c6:7f:a5:1a:1b:74:78:43:3d:22:
18:37:0d:8e:6b:4f:82:95:fc:47:31:fc:64:69:d7:
1d:dc:8f:2a:13:e6:a0:87:6d:67:37:14:29:74:f2:
df:9f:90:40:b7:c7:bd:34:7e:96:79:e1:67:f7:6f:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:40:07:8A:DB:32:92:A2:4F:61:BE:3F:07:35:34:E4:2B:79:73
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:de:22:db:16:ec:54:cb:b8:1f:0b:2d:c8:90:c0:86:de:d9:
6c:cf:51:7b:4d:91:88:b7:54:02:b4:8d:25:f1:87:c2:78:96:
ef:98:50:28:6f:94:1d:95:60:8b:da:bf:c3:23:50:1e:15:8f:
5e:32:e7:42:3e:0e:08:65:76:e9:70:98:5a:cc:f1:41:b4:e0:
24:4d:95:dc:27:3e:86:98:9f:e4:39:aa:08:17:11:59:c5:9c:
cf:3e:34:38:99:79:e4:51:3c:07:26:c8:92:d6:e4:14:c3:1a:
77:5e:50:33:1d:fc:af:a6:72:3a:8f:b7:ba:18:76:1b:d9:7d:
1b:c9:4a:1b:73:18:fd:f2:4c:48:e2:41:ac:f3:25:5a:b9:59:
da:4c:5e:15:5c:71:55:e6:71:e4:2b:d2:4b:63:25:2c:a3:1a:
19:4a:db:fe:2f:c9:ad:9e:21:20:2a:80:2b:6d:1f:19:b9:07:
3c:cd:14:85:2c:2a:c0:b5:1c:f9:34:3b:ae:c4:7c:3a:b1:41:
a5:da:b5:96:b7:4c:44:50:36:96:f3:a9:10:8c:6e:c4:db:5b:
bd:12:3f:38:96:d0:cd:7c:cd:50:b4:5e:e0:72:9f:9d:19:ac:
fe:ea:58:77:83:cf:d0:19:7f:ce:e0:05:47:b0:2d:47:25:49:
41:18:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client