Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: pv0Wqs0Rke27hp5G6nSJqLH7QxOvzqKz4NJeFPyeOj0=
Subject key identifier: A2:6F:E0:16:61:FD:C1:FC:10:A4:5C:BB:15:A0:EA:9A:07:C8:EF:F3
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 019922C342854636E683542E9070B07041E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:45 +0000
Manifest this update: Sun 07 Sep 2025 06:00:45 +0000
Manifest next update: Mon 08 Sep 2025 06:00:45 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: oQDVuyevfbbeD25LQP5IaERpaKEUQjivDZ1e7/kvWeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:42:85:46:36:e6:83:54:2e:90:70:b0:70:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Sep 7 06:00:45 2025 GMT
Not After : Sep 8 06:00:45 2025 GMT
Subject: CN=a26fe01661fdc1fc10a45cbb15a0ea9a07c8eff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:de:25:c0:90:2a:57:d0:9b:ad:6f:4e:d8:
04:82:ee:c7:38:d2:9c:f4:c5:16:d6:b7:2a:68:89:
18:66:65:1f:62:0b:4d:29:75:a4:68:f4:45:8b:ae:
d3:3f:08:30:9f:a3:8d:b5:07:cf:12:54:7c:74:51:
40:b4:e4:1b:65:e4:ba:38:5b:2a:56:e3:57:7f:68:
52:53:02:df:17:65:3e:cd:42:58:8b:1a:05:3b:5b:
35:05:41:0d:4d:65:c8:3a:b0:1d:07:53:d6:54:62:
15:d5:a1:ce:1e:74:ea:7b:33:95:20:ec:df:5e:6f:
c5:50:80:64:0b:58:94:10:a1:f5:a2:05:90:10:3b:
e5:66:23:0a:56:32:f1:70:6c:29:4e:7a:6b:65:c5:
f6:7e:39:da:86:42:c6:04:d1:63:70:d7:35:d4:26:
5d:af:77:b4:24:67:7c:96:15:39:89:03:ea:e6:fa:
2e:4f:68:23:b1:4d:d9:1f:42:d2:e4:95:a3:58:d8:
bb:95:9e:f1:43:05:2a:68:a8:26:ea:e1:df:73:26:
b3:27:6c:e9:ee:f9:1b:e6:f1:6a:ec:30:ad:7d:eb:
2e:9c:8c:e3:cb:29:ab:eb:31:cc:a7:23:d1:f3:e0:
6b:06:cb:b5:a0:c5:52:62:ca:75:46:8a:20:fe:a9:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:E0:16:61:FD:C1:FC:10:A4:5C:BB:15:A0:EA:9A:07:C8:EF:F3
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:52:f3:1c:83:bb:67:5d:58:ec:a1:2d:5f:03:15:63:9d:
19:10:24:28:b9:b7:48:d6:da:92:c2:71:7e:88:96:ee:22:1a:
f9:3b:83:f8:ef:7c:5b:50:34:54:0d:b8:22:21:6b:18:dd:0d:
4d:6d:1b:01:c8:f3:f3:5a:42:63:77:3b:c1:e9:6b:fb:a6:9d:
7e:6d:94:3c:ca:9b:40:e2:49:06:10:e5:fa:86:58:02:f8:38:
5b:f1:ad:5d:46:09:47:47:ce:e5:66:14:12:bd:9b:fc:ac:e2:
c9:d6:de:fe:79:07:15:bf:cb:83:37:b3:0e:90:44:0f:3b:e5:
f7:83:c8:76:23:8d:b8:14:26:36:a6:7d:f7:4c:ef:04:24:2b:
87:cb:d4:de:24:2a:95:ef:f8:9d:c0:55:eb:6e:23:55:4e:99:
2c:81:ce:66:66:07:00:13:9a:45:ed:bb:1f:6b:a5:27:90:b6:
77:5b:25:98:d2:00:21:63:cb:b4:79:db:fb:0f:0a:7a:38:44:
0e:2a:e5:10:40:51:c4:c5:13:a9:61:15:c8:33:a9:41:72:53:
87:43:5c:74:23:f3:7a:e2:04:3e:52:74:b5:6d:2b:7b:c7:29:
7c:0f:97:f1:ac:5f:4e:60:94:af:ab:23:74:15:a7:40:50:b1:
dc:03:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client