Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: qrjoQdHXroBz9huJhioZZsOCTN28s1Kjhl4UwcLZL6A=
Subject key identifier: A3:8C:F5:D2:74:A5:9A:1F:39:0A:45:71:46:AB:4C:68:5F:4D:C9:A3
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01974BFB7B1E80040B97027C2170F7AD7C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 125A
Signing time: Sat 07 Jun 2025 20:01:01 +0000
Manifest this update: Sat 07 Jun 2025 20:01:01 +0000
Manifest next update: Sun 08 Jun 2025 20:01:01 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: xBton+LNY1nRATwDLjbHcJcYThtQMXgKjS76MHfJjFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:7b:1e:80:04:0b:97:02:7c:21:70:f7:ad:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Jun 7 20:01:01 2025 GMT
Not After : Jun 8 20:01:01 2025 GMT
Subject: CN=a38cf5d274a59a1f390a457146ab4c685f4dc9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:b5:3c:8e:3c:4e:d8:17:3d:63:db:ba:92:
95:dd:45:c0:74:90:a3:58:17:07:bc:0f:ca:17:a3:
97:64:0c:32:50:d9:6b:99:52:8f:b0:f3:1c:80:60:
12:90:3f:fa:23:0b:d7:51:ea:f4:95:2d:7e:7d:c8:
da:13:95:24:6a:0a:01:75:6b:c9:23:36:c8:f0:db:
08:1d:f1:74:6a:cd:3d:2b:0a:7f:bc:19:48:eb:d0:
ea:29:24:fd:b9:08:0b:4a:db:1c:ec:65:07:52:20:
3d:5f:21:95:70:12:d7:13:3f:00:9b:cc:f0:0b:87:
42:6e:f0:f1:47:8b:1a:4d:fc:d6:a0:dc:e5:91:a2:
a4:72:bd:a7:0e:dd:b3:17:2e:e8:35:88:4c:b7:f3:
00:5f:83:c5:0c:b1:b5:db:71:64:35:ca:d8:12:5d:
18:76:c4:a1:b5:47:65:82:53:83:10:d6:6e:c2:f4:
d3:e9:8a:74:3e:23:e9:e5:bb:07:30:b3:56:b0:49:
7b:82:a7:63:3c:d9:14:22:61:c2:a4:f0:f4:6a:1a:
a3:2d:21:68:df:f4:2f:ef:18:aa:bc:55:cf:2f:a0:
90:b1:25:c3:3a:1b:ef:2e:c9:76:b6:de:57:a4:eb:
3d:1e:75:4c:4f:1e:58:10:73:91:a9:71:9e:18:0a:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:F5:D2:74:A5:9A:1F:39:0A:45:71:46:AB:4C:68:5F:4D:C9:A3
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:4a:76:82:24:b3:e3:69:cb:99:1b:d9:e5:2e:4a:23:9f:
18:6b:4e:9d:38:02:46:da:f3:74:fc:e6:ae:30:14:02:c7:dd:
91:b5:33:9c:bb:f7:c8:e5:a9:b9:c6:cf:5d:6a:ed:8e:0e:df:
01:d7:7d:c3:52:d4:7a:38:d7:3c:8b:e6:32:d2:06:cf:86:6e:
70:bd:b8:a4:cc:12:ae:5b:44:c4:34:82:7d:c5:ed:23:f7:ba:
f6:d1:8c:12:e2:77:64:21:26:94:f6:b2:f0:11:45:ac:b6:e7:
e1:73:e5:a9:cb:b5:af:48:95:d0:f6:09:18:17:70:17:7f:05:
b2:54:85:39:5d:c6:d4:1c:aa:e5:55:ab:b0:76:75:d0:cf:e7:
81:7b:45:3e:fd:28:31:6f:f5:de:40:40:f3:0f:4f:2d:49:25:
5b:d9:7e:11:bc:3b:cd:c1:68:db:3f:cc:bc:33:df:de:9a:e8:
ca:ff:f4:b7:90:80:f8:57:76:3e:61:3f:eb:fb:13:17:d6:ff:
14:9c:c4:a0:5c:6d:d2:79:84:ee:d0:35:c5:9e:69:53:8a:bc:
31:f8:f7:48:89:c0:6d:08:3e:92:c9:55:7b:98:f3:cf:9a:51:
ce:11:ca:82:7d:09:f1:13:d4:8a:b8:c0:11:1c:63:23:30:9c:
ac:23:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:26 2025 by rpki-client