Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: UdMxtG//qdn1Vtif9PjJBUPWkCERu8denHAjExiVHec=
Subject key identifier: 5F:D8:2C:1B:70:87:8C:B5:C7:E7:32:C6:F8:F2:06:6A:24:FB:41:99
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01976E198A67EE9C0EE878A48994439CD5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 08C1
Signing time: Sat 14 Jun 2025 11:00:56 +0000
Manifest this update: Sat 14 Jun 2025 11:00:56 +0000
Manifest next update: Sun 15 Jun 2025 11:00:56 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: vZV8NgAM7l47poUeVgidPWXHASBCXQiCmWOUfq9nTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:8a:67:ee:9c:0e:e8:78:a4:89:94:43:9c:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Jun 14 11:00:56 2025 GMT
Not After : Jun 15 11:00:56 2025 GMT
Subject: CN=5fd82c1b70878cb5c7e732c6f8f2066a24fb4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:4b:e3:4f:00:b6:36:c5:78:3c:ea:e3:56:
49:c6:81:b0:82:ee:69:01:76:d6:ff:75:76:62:16:
39:3a:4d:e6:f1:e0:bf:5d:11:4e:1e:19:fe:b2:4d:
aa:94:c2:18:2f:99:37:45:1d:f2:02:9a:2f:ac:e6:
5a:73:98:20:64:01:da:01:35:14:cf:25:20:5a:93:
8f:ec:25:db:e9:98:b9:78:0d:e3:b7:32:fd:9d:5c:
68:db:fe:3b:20:83:2a:b2:04:fb:b5:97:d8:35:0b:
b7:43:5e:f4:26:a3:7e:f7:a5:fb:c9:b1:e6:1c:3a:
2b:6b:d2:4b:ee:0a:67:c8:8c:54:a8:44:dd:c0:27:
4a:79:2c:cf:b5:09:70:e6:39:65:3d:f7:a0:2a:4c:
de:75:6e:6f:76:6e:7b:f4:8d:c2:57:3a:ee:32:29:
b9:fa:5a:18:23:85:ae:42:cd:2d:c5:eb:2e:63:08:
a9:7c:33:28:99:af:f9:11:45:2e:12:12:72:01:bf:
fe:78:ae:46:88:a8:26:2b:d3:92:aa:f6:e2:b4:2d:
f7:a9:b0:f6:79:2a:3e:1a:7f:f4:8a:b5:1a:17:7d:
18:22:35:b9:44:f6:ae:dd:ae:d9:ae:6a:4d:cf:72:
2b:be:ea:c1:4c:96:43:e5:88:4f:41:35:d0:fe:ed:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:2C:1B:70:87:8C:B5:C7:E7:32:C6:F8:F2:06:6A:24:FB:41:99
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:ec:5f:64:29:c5:ff:94:b0:b0:f0:f7:8f:42:08:a5:33:
ba:14:b6:3f:ce:39:18:92:43:53:2a:8a:3d:5f:9f:26:c1:88:
48:75:57:0b:64:1c:7e:ca:3d:d3:85:b3:85:ad:93:76:17:b3:
81:60:38:57:da:65:25:55:52:0b:2f:6e:2b:2b:68:14:a6:54:
66:20:93:bf:62:96:06:cf:1b:78:c2:38:70:95:50:0b:4a:3c:
3f:6e:97:58:fa:e1:af:17:25:c9:dd:83:77:71:8e:ae:3e:05:
21:b1:15:5b:bc:60:31:64:d1:f1:30:91:2b:78:11:db:3b:f0:
b0:aa:a3:4b:fe:31:b7:32:1c:69:85:05:ef:f2:98:54:25:93:
3e:05:3f:e6:b0:4a:d2:64:26:47:9d:59:5a:c9:e4:c0:1a:c8:
c5:ac:ee:b3:2b:f0:e0:79:62:49:d6:e2:18:a0:b9:c7:69:99:
63:ef:12:9e:f6:ef:48:53:b6:d6:3d:24:00:9f:c9:9b:c5:37:
88:dd:0f:1a:2d:45:d5:f6:4a:13:67:ed:08:8d:4e:c8:33:b1:
cf:dc:26:90:c7:b3:80:30:38:08:84:11:47:83:41:6c:67:91:
eb:76:03:35:35:dd:bd:d4:7e:3e:5d:b9:8a:e8:13:98:f4:34:
f6:9d:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:36 2025 by rpki-client