Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: cvxD2a1CAf2hzwYPPmo0YCkMf14s1OVnQqsr2nyPDNY=
Subject key identifier: D8:C5:58:06:65:B3:E7:C9:3B:69:94:06:05:27:3F:B0:7A:25:61:F3
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 019921B296A3556A4A292F83A78CE7CF6AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:02:55 +0000
Manifest this update: Sun 07 Sep 2025 01:02:55 +0000
Manifest next update: Mon 08 Sep 2025 01:02:55 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: tpdgJ9oF2QS2+iwpV/NlwOsf+0d27bG8lk47H8t4JVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:96:a3:55:6a:4a:29:2f:83:a7:8c:e7:cf:6a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Sep 7 01:02:55 2025 GMT
Not After : Sep 8 01:02:55 2025 GMT
Subject: CN=d8c5580665b3e7c93b69940605273fb07a2561f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:34:42:25:d3:25:a3:95:9b:4d:e3:dc:e4:
6f:e5:27:49:fa:68:a9:1e:cf:f4:0f:ad:17:93:50:
1f:c9:69:b7:2d:98:32:e2:15:f8:b6:ed:43:9a:e0:
51:d3:35:df:68:63:82:10:54:21:a8:22:90:6c:e9:
f4:b6:8e:40:26:1c:df:1a:85:4a:1c:0f:0a:c8:3d:
e2:f6:45:82:6b:e7:60:15:0c:56:c7:f3:cd:07:9c:
27:69:34:a8:0a:2e:f4:70:b7:ed:09:df:66:e0:73:
6e:44:fa:2f:0d:e6:1b:15:7a:f6:9b:94:a3:97:35:
6c:a5:9c:1a:43:86:eb:e2:01:7c:32:fa:d1:ce:d8:
23:7b:36:d4:2b:4f:fd:d7:83:bd:7d:3b:3f:3c:85:
9d:e1:0c:dd:a4:bf:54:fa:59:0c:17:71:6a:17:f5:
ef:d5:af:d4:8f:f6:5c:a4:56:48:95:b5:f7:f3:8c:
3d:50:d5:96:8a:c6:4d:fb:0a:2a:bf:53:a4:a6:9f:
a5:65:0e:17:33:13:7f:c1:03:c7:8c:c1:22:86:5c:
a5:35:bb:02:d4:72:a0:d9:d9:af:01:63:03:dd:8c:
d6:b8:a1:39:29:9d:a2:a3:31:83:10:65:84:e3:5f:
32:c3:a7:45:f8:40:81:56:c1:4a:cb:35:a6:e8:cb:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:58:06:65:B3:E7:C9:3B:69:94:06:05:27:3F:B0:7A:25:61:F3
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:1b:80:66:82:74:c4:a2:05:67:60:6f:94:ff:f7:1a:14:
9e:57:57:a1:ea:76:bb:ee:e1:86:f4:50:da:02:4d:d9:97:9d:
8c:37:b3:ad:12:5a:0c:78:b4:03:b7:8b:fb:8b:f0:19:f4:95:
4e:a1:0c:99:d7:86:f7:04:1d:13:28:36:94:73:c0:85:ae:23:
88:fe:41:40:56:42:f2:d7:23:d9:cf:fb:56:43:3d:b2:89:77:
98:76:c1:02:c6:c0:5c:06:30:87:51:bb:c7:4f:47:e3:b1:93:
b6:8f:49:b8:f7:1c:dc:2c:89:fa:ac:95:8d:c1:14:09:99:91:
7d:d4:4e:2b:84:2f:ea:08:cb:d8:86:d2:b7:be:9d:10:e2:12:
f3:df:71:47:21:33:87:ba:ed:c8:aa:c9:f4:ae:c2:b7:5d:5d:
55:e0:1e:32:cf:dc:67:df:40:02:47:a8:ac:8b:6c:d7:78:31:
b9:c9:1f:00:83:db:48:b5:61:df:d6:b1:49:f7:64:96:3d:1d:
e2:f6:f0:32:0b:c9:b5:2f:b5:19:b0:0a:42:fb:fd:40:9d:30:
95:59:04:71:3a:aa:da:54:68:68:95:f5:3f:50:8b:f8:3a:ca:
10:61:99:9a:45:2f:ed:49:d6:8b:bf:cd:06:47:cd:8f:38:25:
a5:7e:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:41 2025 by rpki-client