Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: aIMdpatraCA9f+rCgiu+cNMLmz6yMotAsv+erSt46tw=
Subject key identifier: D0:74:AA:EB:56:FD:CA:A0:4E:41:5A:8F:C1:2E:E6:10:21:9D:D8:87
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 019923A0D438594002E035309747F5F1B6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:46 +0000
Manifest this update: Sun 07 Sep 2025 10:02:46 +0000
Manifest next update: Mon 08 Sep 2025 10:02:46 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: heerquOjMxOQTxLTY3SQItp5amPrNy53tCWU47mEneM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d4:38:59:40:02:e0:35:30:97:47:f5:f1:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Sep 7 10:02:46 2025 GMT
Not After : Sep 8 10:02:46 2025 GMT
Subject: CN=d074aaeb56fdcaa04e415a8fc12ee610219dd887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:90:bb:cb:ab:a1:cd:34:57:8d:c1:e4:a5:
af:8e:5a:bb:d5:bd:8a:ff:a5:f5:39:3b:47:38:71:
93:0a:7f:85:75:a7:02:2a:72:6a:49:cd:55:a7:d1:
d0:2e:a9:61:f4:e0:c7:07:71:2c:2a:cb:20:73:77:
c5:ec:0b:0f:a8:c4:d7:11:d0:c7:62:1c:6a:d6:31:
82:d7:0b:3a:00:e8:98:bb:6f:0b:a1:ad:90:34:a5:
29:3e:4b:a5:5d:26:c5:a7:0f:aa:5c:af:ef:45:25:
8b:a9:00:22:36:a3:72:f5:88:d4:76:fb:c0:1f:17:
c0:8f:29:64:e8:fd:7c:0b:cf:28:bb:76:23:09:cf:
b9:8d:7a:79:b6:f1:60:a3:bf:34:4f:cf:dd:01:90:
0d:f1:e3:79:df:42:3d:6e:01:7e:4a:ce:96:71:9a:
2a:f9:90:6e:82:6a:4e:83:48:3c:de:6b:96:a5:23:
61:71:75:ba:83:4d:7e:82:29:10:c3:4d:0d:50:bd:
3a:6d:df:b9:1f:60:3b:15:5d:0c:46:58:cd:db:55:
c7:8d:7d:fe:70:e4:02:d0:a7:4c:e3:91:00:43:2e:
01:17:1c:20:26:ab:6e:f5:d8:ce:ce:21:cb:60:ca:
9b:74:5c:cd:41:06:a5:c6:82:56:7e:d9:0b:56:15:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:AA:EB:56:FD:CA:A0:4E:41:5A:8F:C1:2E:E6:10:21:9D:D8:87
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:9d:f4:0f:69:07:dc:27:58:db:6f:f8:8b:96:09:1d:28:
d7:88:50:bf:18:99:0d:12:4e:ee:af:50:6b:84:43:71:d5:21:
f8:0d:9a:f5:7a:33:7b:ff:39:99:d9:39:e0:95:e3:5d:cd:83:
b8:20:fd:c8:c0:42:6c:c9:20:52:44:81:e6:9a:aa:1d:d0:b0:
8f:73:27:47:ce:93:9d:47:73:23:7b:8d:89:bf:9c:2e:c8:3d:
b2:15:61:2c:bc:9d:49:5b:72:16:2e:24:ca:71:af:ce:91:32:
65:fe:08:49:15:03:f4:c1:f9:80:2e:2e:78:20:d1:9e:64:c1:
f9:61:22:aa:b7:d1:87:37:c1:5b:54:56:d4:ee:9f:cb:99:a3:
34:0c:82:1d:20:ad:3a:7c:5e:48:d4:2d:a1:60:d0:e5:61:f3:
6f:e7:5e:f3:5e:8d:07:42:94:e9:c9:50:51:39:ec:33:9c:7a:
07:c9:cf:1c:43:cf:02:49:b6:69:0d:3b:c4:05:5b:99:8f:e0:
8c:50:11:87:71:70:76:57:1a:b1:bc:1b:09:d2:16:d9:db:55:
75:bf:3a:db:a9:59:31:1e:45:32:87:3b:b0:59:93:b0:3d:0a:
cc:ce:15:8a:82:82:d2:9b:b8:56:02:4b:4a:b0:55:b4:b1:d6:
61:b0:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client