Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: lkvIwcIjNbERrdY0VZklQiF0wRmYUjq2egRnTL9ehTo=
Subject key identifier: 36:05:68:3D:21:9F:60:7C:77:31:2E:A8:D5:88:47:6D:F8:38:14:05
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 0197488C169E7F0F73B73C0588BE3D2BA7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 0613
Signing time: Sat 07 Jun 2025 04:00:29 +0000
Manifest this update: Sat 07 Jun 2025 04:00:29 +0000
Manifest next update: Sun 08 Jun 2025 04:00:29 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: zTJ00/v0UQ+qA/b9LdGL2M1Q7WueUKEdZHNmZvPNNAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:16:9e:7f:0f:73:b7:3c:05:88:be:3d:2b:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Jun 7 04:00:29 2025 GMT
Not After : Jun 8 04:00:29 2025 GMT
Subject: CN=3605683d219f607c77312ea8d588476df8381405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:63:ff:ce:f0:0e:8a:e1:f3:60:c0:1a:f2:
7b:69:ec:0b:41:37:61:42:86:6b:10:74:01:1e:d8:
0b:d2:2c:3c:7d:08:8b:10:c9:bf:32:a4:bf:5f:3d:
71:19:aa:0c:f0:a2:04:0b:2a:9b:21:32:dd:a3:52:
5d:d9:d8:4c:d9:e0:46:fa:b0:43:54:98:35:95:a4:
d4:57:18:09:95:4d:a2:a0:b8:df:0f:5a:05:67:e8:
dd:7a:11:f2:08:ec:02:d5:e4:5e:ac:f2:17:6a:5f:
14:02:55:7c:e8:c0:a6:d3:c8:8c:c8:72:f4:4b:e2:
c5:d1:f4:b1:62:cd:a0:46:03:e7:97:c1:bb:af:93:
2f:c0:4f:f8:6a:a1:4b:e1:65:64:a0:e3:a4:f5:57:
04:d2:ef:a7:19:c4:09:69:fa:37:09:4b:0d:86:3f:
a0:d0:ab:5d:2f:4a:ec:ae:9d:0e:e8:6c:06:27:b0:
23:8a:8b:24:22:84:99:41:d3:59:dc:25:66:20:ab:
19:23:4f:61:95:2d:e4:39:fe:53:7b:78:26:2b:40:
3d:3e:6e:94:6a:91:71:c8:95:aa:20:b2:2c:12:44:
e9:65:0f:ee:b9:6f:57:09:c9:5b:f0:88:90:55:b8:
4d:2b:85:7c:23:70:5e:d5:fa:a2:40:f1:33:01:ef:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:68:3D:21:9F:60:7C:77:31:2E:A8:D5:88:47:6D:F8:38:14:05
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:06:52:75:29:48:46:e0:ef:24:ef:1a:23:08:16:5f:35:6d:
52:ae:96:c6:b0:36:fd:59:98:f4:44:ee:35:22:84:5c:f0:1e:
f3:a3:28:00:b9:55:91:c4:46:15:04:98:46:44:2f:be:c3:2c:
d4:95:02:00:f8:a2:94:38:52:d6:ea:86:ac:b2:da:da:f3:58:
42:03:18:fb:86:f6:25:8e:6c:5e:74:03:c0:14:81:ee:5c:82:
03:bd:33:41:bc:f4:d8:13:3f:44:70:03:df:f6:ad:3c:2c:fd:
0c:e8:31:8e:ae:39:16:5b:68:66:ae:9b:78:66:3b:6d:11:68:
b1:16:86:88:b6:74:87:7c:b1:ba:a8:1e:5f:5d:3a:db:b6:4b:
23:d7:ea:8a:66:fb:5f:c7:b2:ee:51:2d:a0:c8:45:fc:18:93:
db:39:be:5e:93:a6:9c:ec:bd:42:91:93:92:69:ff:68:e1:e3:
41:b6:e9:b2:ba:0f:4d:42:dc:a5:1f:3a:aa:ca:51:d9:50:09:
8e:49:fe:53:a1:a0:99:63:0b:af:cf:6b:79:ec:b4:d9:98:8e:
8b:2d:0d:04:d0:26:2d:a5:a9:c1:99:3e:3d:c8:3a:be:21:ff:
d7:2c:f8:44:d4:01:27:fe:27:5a:51:57:c6:51:53:89:8e:7e:
1a:2e:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:15:56 2025 by rpki-client