Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: Sc0BwVqvQu/7n3mEBBcny4s/b4WMUe1MNcrimN2vTxI=
Subject key identifier: D1:3B:7C:06:B0:0D:38:5C:7C:5B:CF:EC:35:CE:4B:EB:64:CB:86:A0
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 0198CBDDE103EFB1E5E230FCCAF7AADB97E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 12CB
Signing time: Thu 21 Aug 2025 09:02:52 +0000
Manifest this update: Thu 21 Aug 2025 09:02:52 +0000
Manifest next update: Fri 22 Aug 2025 09:02:52 +0000
Files and hashes: 1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 8ObrGo7ql+QEvOJ1c7fy4WXjedsotqv+8dtY6h6Zdug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:dd:e1:03:ef:b1:e5:e2:30:fc:ca:f7:aa:db:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Aug 21 09:02:52 2025 GMT
Not After : Aug 22 09:02:52 2025 GMT
Subject: CN=d13b7c06b00d385c7c5bcfec35ce4beb64cb86a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:ff:91:4e:0c:86:cf:bf:25:e4:8a:74:36:
a4:70:03:63:ed:ab:8e:96:0a:9b:7a:1f:5b:af:56:
76:48:0f:a4:82:96:68:41:14:1f:b0:34:e0:c5:b6:
d2:36:98:62:5b:af:bd:8d:e1:dd:c8:0c:f5:bd:e3:
51:30:bf:42:8c:fe:c5:21:5a:2c:62:6c:c0:ac:c1:
ab:df:4a:0d:c8:45:5c:22:68:07:62:fb:17:50:8e:
8b:76:07:b5:96:54:c1:7b:4e:db:58:02:06:fa:bf:
1f:6f:52:61:be:65:0f:04:b3:5f:cf:d6:a4:be:be:
a7:d5:b1:a2:bb:b0:90:af:fa:85:56:f8:8d:68:d8:
72:ee:5f:e4:c4:76:be:7b:79:93:fe:b2:65:93:33:
62:11:e6:d1:8a:61:cd:01:73:6d:47:83:dc:d9:18:
b7:b7:33:4e:3a:69:3f:c1:70:43:2b:97:c9:09:f7:
54:5f:24:a4:8b:13:75:cc:98:ae:94:5d:39:36:cc:
88:f2:42:8f:37:40:58:ab:a6:7d:8c:bf:89:eb:32:
04:e5:47:48:d3:cd:e5:d4:67:69:99:f5:4a:61:44:
f5:c3:ec:93:d7:b9:da:7d:c2:43:9f:3a:8b:27:97:
3e:29:71:13:ba:98:b5:1a:f4:8c:ca:11:18:05:a0:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:7C:06:B0:0D:38:5C:7C:5B:CF:EC:35:CE:4B:EB:64:CB:86:A0
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:e6:5a:84:14:10:7b:e9:29:fc:89:cd:13:2d:01:13:e6:
b0:e0:ed:b7:78:9c:d2:41:40:c7:29:2a:59:2e:d3:24:c1:72:
26:ae:b0:ee:86:0b:d1:f9:7f:26:b4:59:f5:20:eb:ab:7e:cd:
d3:2a:7d:31:ca:ce:3a:f6:d1:fe:78:6f:05:16:c3:83:0e:89:
db:62:e6:41:33:87:c8:84:fc:e5:60:79:d1:40:4c:43:a5:ce:
46:9e:4b:a2:a5:f7:0a:6c:62:15:51:db:07:83:e0:2b:9d:02:
c5:b6:93:a2:63:f5:fe:1b:d7:2c:c4:1a:cf:a8:8b:6b:ac:3d:
d4:55:85:ee:5f:63:c3:79:05:5c:68:a8:8b:8d:44:13:d8:b9:
63:a3:c5:c5:c2:cc:98:0b:40:50:af:cc:fd:2d:57:3d:e3:d9:
8f:45:bd:a6:03:ad:9d:e3:20:60:49:ab:a6:d6:c5:7e:98:c8:
8c:43:29:5e:21:cf:12:9f:54:24:bc:cc:33:e9:f9:a1:b9:da:
53:69:c6:9f:fd:aa:db:6a:d3:40:59:de:56:75:af:27:47:2c:
57:cf:3f:a9:7f:18:58:1e:14:79:4e:ce:14:72:48:0d:05:43:
b4:7e:e3:6d:37:05:58:de:b6:40:e3:a6:75:e5:4a:b4:25:5b:
39:64:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:01:36 2025 by rpki-client