Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: DfamW0pc8cE8490rRG1h3Wosq1lt52oVd5lftPBfNns=
Subject key identifier: 2B:D3:2B:6B:17:F4:6C:24:7C:D1:09:10:13:69:B1:25:17:C7:6D:CE
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01976BF47CF87B66399F25D56A797B3D4520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:01:14 +0000
Manifest this update: Sat 14 Jun 2025 01:01:14 +0000
Manifest next update: Sun 15 Jun 2025 01:01:14 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: vO+ypgxSJjsaV5VBNGIjNk082eO04MI6RwuzXfRo4+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7c:f8:7b:66:39:9f:25:d5:6a:79:7b:3d:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Jun 14 01:01:14 2025 GMT
Not After : Jun 15 01:01:14 2025 GMT
Subject: CN=2bd32b6b17f46c247cd109101369b12517c76dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:d1:69:57:55:30:c5:e0:26:5b:7a:66:7a:
c5:d4:a2:e7:10:6a:63:94:c8:4c:0a:43:18:4e:f1:
57:a5:5e:91:a1:94:22:b2:1e:aa:92:d6:53:75:6c:
57:b4:b6:a6:23:c7:fc:f9:6a:39:a7:56:fe:26:ae:
fb:08:fa:5f:73:38:e8:ad:31:68:23:88:ab:e1:7e:
69:1b:d7:ed:94:bf:99:59:7a:12:f7:0e:9e:fb:17:
72:1c:dc:9f:46:9e:14:ae:67:8f:d5:83:ae:c4:21:
69:4e:dc:b7:c7:54:ad:2f:c4:1f:7a:8c:22:e0:c2:
bf:07:e8:bf:c9:65:bf:22:95:b3:d6:09:37:36:46:
8c:fa:da:55:44:3b:6a:e2:41:ec:ab:80:40:9d:40:
2e:2d:42:df:0b:4f:df:64:dd:a6:6c:81:7c:3d:02:
68:23:58:70:f9:8c:f4:c5:5a:19:7f:07:aa:ba:e7:
c6:98:88:97:b0:c2:02:ff:88:40:70:1e:7e:75:ab:
fb:f4:73:30:5b:75:d9:71:2e:47:ba:cd:4c:c3:84:
e1:0e:8b:5a:1d:8d:18:17:78:2b:1a:8a:11:fe:9c:
00:60:c9:b2:01:67:d1:d9:79:0b:36:bf:a4:45:4f:
46:a0:62:e8:ea:7c:eb:25:ba:31:c0:5c:0c:c8:6f:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:2B:6B:17:F4:6C:24:7C:D1:09:10:13:69:B1:25:17:C7:6D:CE
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ff:e1:93:df:da:d3:65:33:4b:65:2c:6a:39:f5:a3:d0:ab:
07:a4:72:dc:e1:bb:fa:35:f6:5f:9a:79:a0:22:33:a2:b7:9e:
20:d1:1d:38:df:d4:d7:51:e0:eb:3b:6e:10:e5:8c:9d:37:a0:
bf:a3:1a:23:dd:47:7d:5e:5f:2c:3a:28:e2:21:26:c6:9d:39:
47:03:95:ac:ef:93:cd:b0:5b:f2:2a:67:df:10:14:8b:cb:50:
16:91:fc:0b:a3:2e:94:4e:b8:d5:31:fe:93:76:69:e9:8f:80:
9c:b1:c6:8d:c1:2c:49:d4:a4:7d:8b:c8:de:b2:39:52:95:4c:
c6:11:fe:e8:c4:d1:83:b5:61:83:a4:1d:5f:86:8f:6f:28:43:
6f:54:74:be:8d:a4:d8:fe:3c:aa:d8:ba:4e:b6:2d:5c:89:db:
5d:ac:df:cd:18:bc:78:f0:54:4d:ba:9e:1f:b6:81:b3:60:b6:
c4:89:85:a4:b7:dc:65:94:a6:51:0d:1b:8e:c5:38:ad:64:e2:
c6:c5:4a:eb:b2:d9:ef:89:5a:ec:c1:9c:10:55:0a:1d:64:96:
07:f9:73:c0:01:45:58:5b:95:fe:88:d6:b1:d6:20:65:5f:14:
63:a7:d8:ea:9d:9d:89:48:9f:b3:d7:4b:20:a2:8f:98:0f:a1:
94:ab:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:28:58 2025 by rpki-client