Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: zUcmV35DjtaaG6tdLRxBO1VK2udPtsU//yHcRn6McSk=
Subject key identifier: 95:E5:4A:EA:C8:A4:3C:C2:D5:63:58:03:7F:09:5A:73:97:24:26:5C
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0197458B17ADE446B8AF095B92B76F33A816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 1051
Signing time: Fri 06 Jun 2025 14:00:32 +0000
Manifest this update: Fri 06 Jun 2025 14:00:32 +0000
Manifest next update: Sat 07 Jun 2025 14:00:32 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: MfPpYssxasFT6pTUbCYJkR56TP4/kO0yNMCybok9feg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:17:ad:e4:46:b8:af:09:5b:92:b7:6f:33:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jun 6 14:00:32 2025 GMT
Not After : Jun 7 14:00:32 2025 GMT
Subject: CN=95e54aeac8a43cc2d56358037f095a739724265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:e0:69:08:4d:42:b3:66:64:55:4b:17:e2:
8a:12:96:19:06:7c:23:da:fa:d1:43:67:35:1e:49:
31:b1:7a:94:cd:7e:b1:b1:32:ee:1f:ee:90:c3:89:
c3:34:20:82:91:6e:9e:8a:aa:3e:86:c2:cf:69:a0:
da:3b:55:35:39:3f:2c:dd:31:62:9c:9d:35:dd:ad:
57:96:d5:44:c4:e4:1e:75:1d:47:81:ce:ac:9a:93:
3b:07:71:00:23:59:eb:ea:c1:1c:60:0d:06:8f:62:
ce:e4:c5:9f:2d:27:02:e1:5d:89:f9:b8:d7:b4:79:
61:ea:4b:de:d8:eb:68:03:5d:be:bc:cf:2f:1d:ca:
28:38:97:58:ec:7b:bf:f3:4c:00:06:9c:f0:22:8b:
3f:0a:88:07:32:40:c7:87:e0:e7:85:fe:ab:77:c8:
df:59:f6:82:2e:64:9a:0d:ff:93:fc:6d:b3:b7:97:
51:1a:e8:19:15:a7:e2:55:4d:2c:2d:b3:95:79:a5:
59:12:85:80:7f:05:85:fa:49:58:d9:36:fb:07:ff:
ca:71:0a:64:67:5e:64:bd:03:79:95:cc:9d:4c:d3:
70:04:c3:44:86:5b:95:e6:93:9d:cf:47:2c:53:c6:
a2:7e:8e:ce:99:b2:dd:0c:9d:29:a0:3f:1d:68:7c:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:4A:EA:C8:A4:3C:C2:D5:63:58:03:7F:09:5A:73:97:24:26:5C
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4b:e9:9f:57:31:4b:fc:08:69:f9:65:80:00:b3:5a:b9:84:
18:a3:ca:4c:80:a6:6e:dc:3d:0d:db:e7:d2:97:fc:ee:1f:2d:
1c:ae:bb:cc:92:6f:8b:c4:0e:10:a2:36:92:1e:be:8e:68:b6:
9e:4b:a9:9e:8d:36:56:a4:78:8d:78:a4:90:db:e9:a1:7e:72:
1c:b6:f3:ba:06:87:5e:3a:e0:71:8f:3e:fd:55:90:07:e3:44:
09:61:90:81:e9:75:8e:22:48:80:88:31:91:12:68:b6:2c:fb:
c9:c6:a7:b9:3a:1d:a7:be:bf:26:10:a4:14:ce:d5:63:a0:ed:
9e:1b:33:fe:27:07:9d:e3:43:90:78:0d:55:76:92:21:d2:a9:
58:16:8f:5e:b4:93:4a:a4:3e:3d:95:99:d9:b2:83:5c:1c:1b:
0f:2a:e2:14:40:c5:40:9e:83:e6:76:af:e2:89:1b:4f:53:3f:
d3:90:77:e5:45:c2:da:9e:92:35:07:a5:ac:a1:53:66:dc:ba:
51:12:22:6e:a6:e5:0e:3a:87:9a:7b:12:b2:2b:a6:e0:b7:0f:
3d:37:bd:da:46:37:84:f5:2f:44:10:f5:d5:92:c1:4d:f6:b6:
04:83:d2:53:7a:98:6c:8b:34:18:0e:91:03:4e:dc:d0:c2:f7:
e1:21:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:19 2025 by rpki-client