Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: giSlhzaoSaYU+ddR+fpLwsKD8sgK5mlsRCKFzV4tSqg=
Subject key identifier: 4B:AB:EA:83:C2:38:C5:F8:46:92:44:B9:46:B7:C3:C7:72:29:F3:EC
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01976997AEB74E0F9C1BAF2E12C88F611159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 12AC
Signing time: Fri 13 Jun 2025 14:00:37 +0000
Manifest this update: Fri 13 Jun 2025 14:00:37 +0000
Manifest next update: Sat 14 Jun 2025 14:00:37 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: Nt0yzNaxs9Q82WVEb/HfkHmI0axCD+XSYVGOHSfqmfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ae:b7:4e:0f:9c:1b:af:2e:12:c8:8f:61:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jun 13 14:00:37 2025 GMT
Not After : Jun 14 14:00:37 2025 GMT
Subject: CN=4babea83c238c5f8469244b946b7c3c77229f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:42:df:a5:28:4f:33:6f:12:6d:ad:ca:c2:
30:ba:31:92:50:39:9f:45:54:12:0c:62:64:71:21:
3c:6d:22:93:f9:92:90:63:a2:10:f9:69:1b:c0:24:
f0:e8:76:06:f8:96:6b:f7:23:c3:bf:a4:96:bb:70:
ab:2e:ed:a3:a2:60:4f:ba:30:1d:6f:7e:e4:a4:63:
cd:02:11:49:fc:cf:0f:cf:7e:43:75:8b:2d:1c:05:
19:9f:7a:2c:b8:d2:98:af:64:57:f4:f1:c6:30:cb:
fe:15:14:d6:59:cd:65:a8:a8:3e:64:d0:b5:16:0c:
44:f0:46:3e:43:a6:0f:f3:82:ef:07:ac:99:7b:8b:
ca:20:50:87:94:0d:1d:c9:43:42:29:f7:65:1b:90:
3e:e6:2e:bb:4d:b3:6d:5e:1e:2b:88:25:15:07:0a:
c2:87:7d:ff:da:24:80:57:eb:61:5c:55:e4:1c:60:
f1:63:81:c4:66:41:a6:36:a3:80:22:29:5b:f8:9a:
ea:31:0c:ea:13:a5:15:ca:ed:77:e4:dc:31:6f:d1:
3c:74:ca:67:67:f5:75:95:7d:c9:84:71:d8:91:34:
6e:22:b8:f5:25:f7:53:e9:19:16:1e:b9:e7:2a:cf:
7d:bd:44:56:b8:25:e5:fc:e1:c2:0b:b5:6a:97:79:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:EA:83:C2:38:C5:F8:46:92:44:B9:46:B7:C3:C7:72:29:F3:EC
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:43:ca:96:b3:2a:a3:39:a1:2b:79:9d:0e:ea:f9:20:67:
ed:8d:18:d7:3e:6f:0b:67:eb:59:9c:b5:fe:58:dd:57:f1:25:
45:68:13:fe:72:ab:34:3e:d5:56:ab:10:a0:9e:04:47:a4:d3:
59:8f:16:4a:6e:65:58:3f:c7:31:ba:6d:5b:cc:7e:31:df:b6:
13:44:05:eb:53:c7:3a:9f:32:f5:9a:75:5b:4e:22:96:e8:05:
3f:aa:47:af:c9:fb:ae:d2:f7:f4:fb:b9:25:54:76:b0:1c:10:
8b:95:8c:06:7d:99:22:30:46:fa:61:70:e1:53:ff:3e:3a:6c:
2c:bd:4e:1c:65:55:fa:ca:05:fb:22:66:fd:8c:3a:83:34:93:
7e:69:ac:91:6a:49:f1:d2:be:d0:5e:30:03:20:ea:a9:f0:5c:
73:fe:73:61:6e:71:99:33:5e:18:4a:4a:8e:3a:97:95:52:6f:
0b:d7:39:ae:1e:60:3e:9c:ce:5c:33:eb:12:6c:e1:bd:e3:87:
3a:38:66:cb:11:05:c6:08:39:22:e0:64:96:e2:d4:62:d4:8d:
c5:c0:a2:cc:69:7f:df:95:7d:7a:c5:5e:54:b9:16:ec:53:61:
95:93:ce:62:c6:c6:62:3e:65:a9:e3:3f:dd:bb:9c:00:b4:a5:
e4:d8:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:36:47 2025 by rpki-client