Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: c7qT066xfhX1p82uAqOjB7RA04OW/Q+oB0p27aXOwgA=
Subject key identifier: 2B:9D:F8:D7:C8:89:58:A0:87:76:49:90:2A:34:21:36:BB:45:F5:44
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01975C1353D3C903017FADA656108BF1C1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 12A5
Signing time: Tue 10 Jun 2025 23:00:59 +0000
Manifest this update: Tue 10 Jun 2025 23:00:59 +0000
Manifest next update: Wed 11 Jun 2025 23:00:59 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: 0RMVoMuF938T36b5fUYejsbwXSOsovg9/29Yf5Z2Igs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:53:d3:c9:03:01:7f:ad:a6:56:10:8b:f1:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jun 10 23:00:59 2025 GMT
Not After : Jun 11 23:00:59 2025 GMT
Subject: CN=2b9df8d7c88958a0877649902a342136bb45f544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:38:be:22:8f:d8:b4:62:aa:58:87:38:d2:
86:91:ce:be:c8:14:59:a1:82:18:cd:6f:19:17:c3:
99:3b:a6:eb:8e:a8:f3:54:ef:73:c7:49:5b:87:d5:
1c:fc:a0:ea:90:43:3d:77:68:7e:c7:5e:2b:47:74:
c5:a2:b5:f4:5c:ec:70:99:c4:64:a1:54:52:db:b2:
20:de:d3:16:9b:17:b5:a1:fc:50:47:ec:ad:fc:56:
2d:21:4c:f7:b1:1c:da:d8:27:0e:12:3a:04:2e:c6:
02:6c:07:6c:36:26:29:2a:8a:ef:e4:58:f1:ee:15:
b6:7e:18:db:25:fe:8e:17:03:61:32:ce:9f:4c:f8:
0b:55:35:d4:43:8f:89:43:0d:b7:12:ea:02:4e:7a:
fe:87:ae:2e:ec:d1:77:e8:eb:bf:55:9c:fc:9f:b9:
fe:e6:92:5e:bf:6c:c1:0c:a1:fb:7b:eb:b3:34:97:
0b:2a:d5:a1:af:fe:df:98:79:b2:45:0d:b1:1b:bc:
81:1b:75:f0:9d:0e:1d:d6:8a:e8:23:b4:a5:0b:b4:
2e:eb:ce:66:d0:3a:ce:04:fe:e3:e2:7a:0e:5f:6b:
f1:9d:11:dc:ff:d8:10:25:ff:15:a5:69:92:57:14:
c6:85:67:ff:84:c9:61:94:fe:36:82:60:0b:cd:0e:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:F8:D7:C8:89:58:A0:87:76:49:90:2A:34:21:36:BB:45:F5:44
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:09:cf:d8:56:12:83:49:25:b1:ec:11:7b:a9:87:29:38:
82:65:e5:ad:76:5a:2e:97:4f:5c:1d:7e:b8:c4:0e:82:e0:02:
b1:42:c3:97:1b:d3:63:0c:80:83:bc:5f:ae:f7:e3:d1:86:b2:
8f:f3:ca:77:e2:77:19:7e:e6:92:01:7e:36:0d:e2:a9:72:2e:
be:a8:36:72:89:a5:00:bd:62:56:d4:af:4e:96:37:1c:a4:1d:
61:02:47:b4:3e:9b:83:3e:11:20:6e:2d:0a:b9:d1:1c:b7:db:
a6:44:51:96:46:93:98:0f:ba:e4:82:fc:c4:7e:fb:a5:e7:e9:
c1:04:c3:b6:ca:33:bf:08:10:4b:87:bd:9b:d7:1b:9c:48:d4:
2d:0b:de:ed:76:c0:a1:f0:66:cb:1c:5d:bd:5a:9c:d4:4f:ec:
31:64:6a:97:1d:d9:ba:19:25:bf:89:e0:db:e4:bf:e9:b5:03:
19:e7:f9:42:f3:85:63:15:44:7e:7b:3f:28:f0:87:76:1a:02:
2a:dc:cd:62:2f:46:d0:84:82:07:81:a9:c5:8f:a0:17:e3:4f:
ff:33:d5:da:2b:36:17:ef:36:50:de:17:69:1e:0d:7b:5f:67:
5e:8d:66:0e:83:3f:bb:90:8a:c2:fe:cb:a7:2d:8c:0e:d4:b3:
14:a2:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:38:08 2025 by rpki-client