Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: MvV2j4BJebA5DWhh1W+wQ3mSswRSZU5n3so6Az1FrZc=
Subject key identifier: B3:63:D5:BD:E7:A1:AE:D7:A1:8B:5E:DF:E6:5E:5C:0D:64:EE:CC:05
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0197C914CC39A737D98E50B3DF9CE8B74CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 03:01:12 +0000
Manifest this update: Wed 02 Jul 2025 03:01:12 +0000
Manifest next update: Thu 03 Jul 2025 03:01:12 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: eogIiFwCbcOM8tfG41kQFi/6umv1Mmf5HRYfZJwKuTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:cc:39:a7:37:d9:8e:50:b3:df:9c:e8:b7:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Jul 2 03:01:12 2025 GMT
Not After : Jul 3 03:01:12 2025 GMT
Subject: CN=b363d5bde7a1aed7a18b5edfe65e5c0d64eecc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:0f:a8:0f:66:ac:e6:da:11:bc:17:44:db:
76:75:24:ff:ed:0b:e2:b2:97:97:1d:db:7e:1c:6b:
f1:8c:29:09:00:dd:1e:39:1c:51:b4:fc:18:3d:01:
b3:18:a2:b5:f2:34:15:d0:25:5c:7f:1b:0a:be:73:
f7:91:74:b9:f8:0e:4f:5f:3d:7b:19:fe:dc:6d:2b:
eb:13:b6:70:90:5d:33:ee:cd:84:cc:5b:be:7e:0a:
fe:2a:aa:87:e5:1c:8d:3c:ad:f3:1e:9f:3b:ed:43:
70:0c:9e:15:51:7a:b6:c1:5d:13:fe:6e:86:38:df:
a0:1c:09:ac:e8:fb:df:91:c9:ba:65:25:26:d7:14:
a8:fd:06:65:be:b7:60:3a:a3:58:e6:f8:b0:08:aa:
14:e6:24:38:42:6a:f9:a7:98:06:68:05:1e:81:d0:
f3:a9:04:b6:87:52:ec:27:5a:89:19:f5:13:50:bd:
a5:f2:01:69:99:d4:0c:9a:b7:e9:d0:2b:36:cf:17:
5a:cf:29:d3:84:f6:67:e6:fb:9c:11:c2:15:bd:6b:
90:35:11:fd:87:84:4f:f4:b8:7a:79:f4:4d:77:cb:
6a:64:ed:b9:21:24:f2:a1:5a:8c:4e:95:dc:4f:21:
1a:c4:d2:2b:e0:f4:8c:77:93:ee:ff:3d:fd:e4:41:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:D5:BD:E7:A1:AE:D7:A1:8B:5E:DF:E6:5E:5C:0D:64:EE:CC:05
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:b2:37:c8:02:0f:7c:f5:65:54:60:5e:47:70:e9:e1:db:
0e:2c:98:e5:c5:be:3d:5b:b4:cb:42:df:65:a3:0b:55:8f:57:
cd:f5:31:69:4c:b2:5f:49:be:26:d6:c8:64:33:66:68:9f:fb:
58:dc:cf:d1:12:c3:61:2b:96:93:ea:4c:0c:e4:3a:4e:77:4f:
bf:65:6d:f0:f9:e9:22:5b:c7:22:74:0f:32:79:7f:bc:f4:5b:
98:0b:da:d6:6f:03:1e:ef:9e:28:ba:18:99:11:05:e4:f6:5d:
bf:2c:bc:12:8d:dc:99:c4:34:b2:ac:a1:a5:15:13:8f:a9:88:
49:6b:40:9b:a2:89:bc:3b:ba:aa:8c:bc:21:85:b4:de:de:94:
d0:6c:98:83:42:b6:5e:e5:fd:7f:3b:6d:38:f2:20:08:7f:0c:
da:ac:15:75:ea:36:21:5f:01:8e:05:b1:57:26:a0:d0:52:24:
e8:2b:f4:54:85:ef:b1:a1:45:3c:0d:c8:4c:7e:0e:65:a1:24:
dc:88:b4:2e:69:ce:75:67:dd:67:5e:76:96:c5:23:7c:30:e0:
64:6c:4b:30:83:cb:fc:4d:3b:78:a5:de:38:09:8c:95:e5:e5:
48:20:70:05:c3:e9:87:90:1a:ba:ca:aa:36:41:84:e2:c5:f3:
e7:c2:8c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:03:58 2025 by rpki-client