Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: qB63EVapq7pk20htiJcLdZMbGLJUosFDO2H8mW/iP0w=
Subject key identifier: DF:2B:F8:88:16:79:2B:35:99:F0:C2:4E:B0:63:7E:AC:2E:A7:68:59
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01974B56482E4EE3D337551F2919036C7D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0745
Signing time: Sat 07 Jun 2025 17:00:35 +0000
Manifest this update: Sat 07 Jun 2025 17:00:35 +0000
Manifest next update: Sun 08 Jun 2025 17:00:35 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: GL1Y2gUUqhx8u64lKmwF1dZKqw5ewoROGPwclTBDL48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:48:2e:4e:e3:d3:37:55:1f:29:19:03:6c:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jun 7 17:00:35 2025 GMT
Not After : Jun 8 17:00:35 2025 GMT
Subject: CN=df2bf88816792b3599f0c24eb0637eac2ea76859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:8f:11:60:c9:b3:11:4b:e4:4f:4f:8d:06:
29:1a:14:72:47:62:fd:28:b7:b6:6a:c1:9e:18:be:
04:86:c1:fd:8b:85:02:9d:92:13:1a:1d:fe:e0:e7:
86:37:d5:55:62:24:a4:c1:cd:5c:1a:4b:8c:0b:99:
94:ef:f2:7f:b6:ae:69:51:df:e6:88:fa:c4:40:95:
1c:6b:68:21:9e:60:00:15:9d:e9:9b:23:f4:e4:8f:
e9:ce:f2:f7:20:f9:a7:c3:40:19:29:5f:b6:e1:83:
c0:d7:b8:7c:b6:d2:1f:80:8a:4f:3e:8e:81:a8:5b:
27:4d:fc:48:04:e5:e9:06:2b:c2:a1:57:40:0e:8a:
ff:f4:37:a9:f6:0b:ed:22:c4:1d:91:e3:ec:26:65:
76:e7:11:8b:c7:af:54:08:9c:5f:f1:51:3f:98:c2:
17:2a:18:55:ca:3f:73:5c:b2:b8:f6:5e:a2:a2:c6:
01:8d:bd:87:41:54:f8:b0:ad:e7:77:60:c0:da:4d:
80:09:71:1a:cb:26:ea:1e:0c:94:1e:d4:23:9b:4d:
36:fe:64:b6:52:66:cd:1c:56:06:70:4b:2e:ca:45:
c5:18:92:43:dd:11:19:42:7b:86:18:2f:68:9d:10:
ad:d2:55:67:14:ce:d0:a2:e2:33:89:61:ac:b5:c4:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:F8:88:16:79:2B:35:99:F0:C2:4E:B0:63:7E:AC:2E:A7:68:59
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:44:78:de:79:48:96:93:2b:3d:a1:85:93:d5:6e:1c:31:9b:
26:d9:3e:eb:b2:a8:94:c1:78:f8:af:0c:a1:d8:10:01:1d:a4:
4e:41:01:09:77:d8:bc:60:16:a5:87:e5:8b:39:67:6d:82:eb:
d8:3a:f0:98:50:95:e9:95:11:1c:e7:35:71:04:45:1f:ff:70:
63:6f:db:e5:83:72:63:b1:7e:08:6b:55:43:38:e1:00:da:82:
22:d6:b8:0e:22:ec:7d:67:e3:a7:2f:a9:9a:58:c5:b0:24:21:
10:08:4d:04:52:dc:94:92:f1:88:62:74:e5:1e:37:83:f5:f5:
25:40:f6:f7:97:c3:6e:40:c5:6a:89:27:c8:5f:99:3d:f4:0d:
e7:01:6b:a3:7f:9b:a3:64:25:e9:1e:82:9c:3e:15:8f:6e:a1:
37:40:74:30:6e:c3:b9:17:b6:aa:08:0c:b9:57:00:67:a1:c9:
1a:bf:ff:45:22:98:2e:f5:bb:5c:be:45:d4:d7:ba:92:ab:4f:
07:cc:99:c3:34:75:a6:ac:80:37:05:3e:cd:2b:69:9e:78:57:
7b:1e:2d:03:94:d6:45:bf:97:98:f2:2c:73:a6:4b:95:9a:3b:
1d:3d:f0:7d:59:05:c8:74:05:5e:36:71:7e:bc:27:51:ee:25:
32:52:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:58:52 2025 by rpki-client