Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: /a+o87o9kZOhorQJJYr9bDsyMiybFLLGgxjuRiouQT0=
Subject key identifier: 0A:B2:60:A6:BF:88:32:9B:AB:3E:C3:46:63:65:04:9C:69:D0:45:E6
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 0199307F4B7BCD07EE5158DF850CD3F5C22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1682
Signing time: Tue 09 Sep 2025 22:01:12 +0000
Manifest this update: Tue 09 Sep 2025 22:01:12 +0000
Manifest next update: Wed 10 Sep 2025 22:01:12 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: pFWo80TEA5qodPQVGKgZ5TKpGFEfTBEFJAjLKihfurY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:4b:7b:cd:07:ee:51:58:df:85:0c:d3:f5:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Sep 9 22:01:12 2025 GMT
Not After : Sep 10 22:01:12 2025 GMT
Subject: CN=0ab260a6bf88329bab3ec3466365049c69d045e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:9e:25:61:13:05:fd:5a:4f:3e:ba:d8:82:
cc:fd:bb:d6:d4:92:50:77:11:ee:25:bd:66:04:d0:
ba:1d:52:4a:83:98:0a:c3:ac:b3:de:7a:17:ed:e6:
60:0f:fb:22:14:e2:80:06:c4:46:13:e8:de:8e:52:
bc:1f:37:f3:f9:47:13:28:d3:59:7b:a9:80:e7:70:
74:12:00:a8:5c:07:13:e2:2d:83:05:76:3b:40:da:
4c:13:e0:57:3a:f2:25:df:ee:53:4d:a6:0e:ae:ce:
15:02:a6:45:ad:57:d4:44:6a:f2:8e:24:34:9d:37:
d3:2f:e6:7e:28:b7:19:e6:e6:5d:a8:81:3f:02:39:
bd:08:9e:af:5b:3e:17:73:29:c5:45:61:7d:4c:0d:
f5:da:bf:b7:49:94:29:14:d9:91:06:be:59:7a:5a:
9e:aa:bf:74:2c:9e:ac:e2:1c:cc:86:cb:7c:22:be:
93:4f:23:ba:9e:29:ec:56:8b:b9:11:12:1e:c5:05:
eb:20:43:13:41:a2:89:95:d9:5a:8d:c5:ea:62:10:
bb:ce:bb:30:4e:3b:9b:00:bb:34:80:e6:e6:ed:3d:
3e:a4:a0:51:73:cb:98:67:6f:80:0a:a0:09:ea:c9:
14:e2:13:a5:06:79:f9:ea:02:0f:51:2e:54:30:0b:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:60:A6:BF:88:32:9B:AB:3E:C3:46:63:65:04:9C:69:D0:45:E6
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:f6:f9:df:15:32:64:72:68:87:a4:c0:3a:33:4b:b0:8e:
37:0c:8b:a2:02:ff:eb:95:d6:f7:0b:d8:fb:ec:b6:5f:b5:79:
8d:2a:fb:bd:85:9f:4e:84:b6:ff:d3:29:73:ec:37:c3:bd:73:
33:49:f3:b4:5e:05:b1:a6:42:82:06:c3:e4:c2:bc:91:db:38:
31:ca:1e:94:40:af:5e:e9:b0:85:4e:01:74:7a:61:44:05:02:
31:49:2d:07:e2:45:e5:1d:5a:d9:0a:bb:fc:a7:34:96:01:ff:
88:ef:e3:1a:c5:ee:c9:43:fe:79:78:c7:5c:3d:bd:5e:1e:0b:
56:d4:98:7e:0b:2c:3f:7a:00:d8:74:99:48:c7:e8:ae:3b:83:
11:0b:e8:87:47:c1:e3:2a:a6:39:b5:84:6a:05:8b:ce:c1:2e:
93:d1:dc:7a:da:d6:c9:f6:c9:80:41:bc:8f:92:13:f6:f1:9f:
5f:2d:ad:0d:23:e0:f2:4c:c7:d9:45:18:4d:e1:44:09:09:c9:
b5:e0:fe:87:64:15:84:ea:00:8c:b0:de:d4:1b:8b:d6:d1:f8:
53:aa:c7:3a:36:81:d1:8c:ac:71:d5:90:bb:0f:2e:f8:46:2a:
10:fb:71:b9:9b:33:7b:bf:14:e5:8f:b3:fc:42:db:e0:d2:9e:
b2:14:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:59:32 2025 by rpki-client