Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: fJowaA70CRvqcnSGtE/Q5MTQPALbs2udTBddCEzC1ZE=
Subject key identifier: E3:1D:6F:42:E5:E7:B5:D7:EA:71:2C:89:B3:34:9A:2A:EB:CE:4B:F3
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019872CF50E8853A00A0F07314C75AB2F3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0948
Signing time: Mon 04 Aug 2025 02:00:45 +0000
Manifest this update: Mon 04 Aug 2025 02:00:45 +0000
Manifest next update: Tue 05 Aug 2025 02:00:45 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: ivka4Q0yo5kiTHCFO0L5S3NqoH1BBmMqUj6KDEGFt3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:50:e8:85:3a:00:a0:f0:73:14:c7:5a:b2:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Aug 4 02:00:45 2025 GMT
Not After : Aug 5 02:00:45 2025 GMT
Subject: CN=e31d6f42e5e7b5d7ea712c89b3349a2aebce4bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:1a:4d:52:90:d3:d4:01:0c:ed:81:75:fb:
91:7f:27:56:ab:23:22:0e:d8:e1:b9:65:77:7a:1f:
ce:e5:f6:34:ae:a5:ae:3f:e9:b8:35:74:3a:4f:4d:
96:87:8d:a8:43:57:22:12:3f:86:98:dd:72:a9:1d:
08:90:ba:b6:8b:d8:dc:fe:c4:06:bf:6c:de:14:7a:
c3:dd:71:b0:7e:5e:ad:91:9b:ca:c9:73:3b:b7:f3:
dc:e5:66:cc:0f:95:66:62:e2:d9:ce:d6:0e:69:10:
68:ca:83:5f:62:d0:45:37:6f:48:72:b3:35:51:aa:
c2:14:d2:e7:14:fd:bc:a3:72:7b:06:0f:b5:29:6f:
98:86:df:76:b9:ef:7f:9b:62:8e:99:8c:c6:91:ff:
6e:63:10:3a:5a:3a:c7:bd:7d:8a:2f:9c:c2:e9:75:
1a:3c:ab:44:cd:97:74:d8:01:f2:66:27:de:24:09:
82:22:01:19:8d:3f:1a:d7:36:c0:7e:4c:f4:6d:f7:
80:bb:b5:ff:36:59:13:a3:7f:6c:6e:d1:78:e8:6c:
2f:74:1b:87:6b:69:c9:79:b7:da:a5:42:17:c5:18:
b0:8c:7a:a6:c6:4a:c1:81:f2:64:d2:fd:8e:03:07:
bf:35:c4:a2:d1:00:8a:29:2a:38:16:d8:cf:12:cf:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:6F:42:E5:E7:B5:D7:EA:71:2C:89:B3:34:9A:2A:EB:CE:4B:F3
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d7:41:57:b4:d4:5c:58:42:c8:e0:9c:d1:2c:a6:3d:74:e4:
81:e9:0c:76:05:5f:17:ec:e4:6d:79:2f:77:cf:e8:ba:e3:3b:
c0:59:f1:bc:09:6e:4d:48:70:d9:ba:b1:5f:be:a4:38:5e:57:
e4:61:82:d6:d9:71:17:78:ab:42:a9:b1:99:da:87:f1:b5:fd:
aa:66:64:62:80:5c:96:89:44:e8:fe:e3:b9:02:de:1a:c7:3d:
f9:c0:27:cc:02:3a:93:03:7b:3c:71:3a:43:98:f4:4f:60:ba:
5a:4f:d6:85:31:bc:de:ad:a7:05:f5:28:4f:01:ba:de:00:68:
e5:b7:92:ea:1d:9e:8a:cf:bd:1a:ed:33:02:75:12:7a:b5:a7:
a2:fd:c4:0e:ba:92:b3:ac:27:60:41:fd:a1:cd:df:f5:33:09:
b3:89:19:f1:29:56:31:c7:93:de:48:79:dc:35:28:0b:9b:e8:
46:d8:bb:af:99:6d:3f:19:29:61:78:45:3a:21:b2:c5:ff:ae:
d7:28:fc:83:69:65:6a:84:4e:6b:47:42:08:a2:e8:19:0c:60:
06:fc:a7:c7:2a:be:a0:df:30:de:9d:a4:d0:9a:c6:0e:78:b6:
e3:53:58:2e:cc:c5:2c:8b:99:e1:63:4d:34:7a:36:b6:df:67:
a7:bc:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:10 2025 by rpki-client