Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: pjanNTXriBG9X9zR8yrN+7zJRadSL73tMq9nhUy5dGQ=
Subject key identifier: 7A:12:93:D8:A6:2B:EC:08:B0:EB:5E:A7:8D:2D:38:5C:E9:19:C1:44
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019786C6F4939928A43372806FCC8BE881C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 06:01:15 +0000
Manifest this update: Thu 19 Jun 2025 06:01:15 +0000
Manifest next update: Fri 20 Jun 2025 06:01:15 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: WhebOu7SxDo18ROlBZZqoh5XXR+kKjFvMLW9f70W3Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:f4:93:99:28:a4:33:72:80:6f:cc:8b:e8:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jun 19 06:01:15 2025 GMT
Not After : Jun 20 06:01:15 2025 GMT
Subject: CN=7a1293d8a62bec08b0eb5ea78d2d385ce919c144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:fb:29:04:9a:8e:77:9a:d9:fb:7f:d3:b3:
a0:95:d0:d1:10:e9:af:31:ce:83:c4:fb:2a:10:df:
2a:c7:52:c2:b0:eb:18:27:c9:b0:c4:5a:9f:66:d0:
60:1e:5c:df:10:62:3e:99:d0:da:bc:b8:a5:f8:4c:
97:d0:62:89:99:6c:a4:39:ca:ce:6c:a8:75:5c:7a:
6f:79:77:c1:2b:d7:29:d9:3d:85:4c:47:17:26:3d:
fd:f4:23:5b:54:71:54:25:1f:c5:f3:25:c0:d4:ea:
c2:b9:c7:2f:65:9f:78:87:7d:80:ff:bd:01:96:82:
2f:c7:74:60:c1:97:da:06:14:19:ce:fc:6c:c8:f1:
d3:a4:45:76:d0:10:a8:41:8e:91:c1:d6:d6:25:ec:
ce:ab:58:a3:79:34:60:71:7c:1c:0f:43:3d:ea:6a:
2b:64:a7:e7:56:98:94:9a:17:2b:40:be:06:66:44:
e8:ea:a6:84:7e:25:45:54:da:28:6f:e7:68:4a:70:
a0:d2:3b:4c:e3:23:cb:60:8c:f4:5f:3e:c3:88:97:
9f:0b:49:82:d2:4c:35:05:41:48:4b:d8:3d:7a:54:
87:84:c3:65:fd:27:36:b3:21:8e:fe:ea:10:e6:e1:
90:92:48:c3:a5:0e:72:a0:55:a0:49:ce:3d:6a:6b:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:93:D8:A6:2B:EC:08:B0:EB:5E:A7:8D:2D:38:5C:E9:19:C1:44
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:56:88:00:25:60:23:0e:05:82:1a:f2:a2:e2:01:83:8a:fc:
42:95:5a:6a:63:ec:5a:5f:d3:6a:33:a7:3a:13:7a:b1:b2:e2:
50:42:46:e5:06:ce:d4:ca:73:13:0c:77:4a:f6:78:ca:b5:ac:
d4:a6:c9:b6:45:4d:e5:b8:17:e2:a8:fb:6b:38:49:af:a3:ac:
04:cd:d5:99:9d:12:cc:14:c0:72:c0:95:96:23:89:83:1b:39:
b1:92:21:80:20:ac:a0:ac:53:d6:a6:4b:1a:ee:f1:79:dd:a5:
a6:98:a4:1a:2c:a9:04:d2:ac:79:ef:e4:22:ac:02:64:a0:c0:
28:1a:47:6d:3d:25:d2:64:b2:e2:6a:33:1c:00:ce:d6:a6:f1:
76:ee:d1:52:2a:12:3e:4b:46:9b:ab:a9:d1:a5:b9:9d:f5:4f:
a7:bf:bb:5d:bf:d6:fa:ff:fd:b7:fc:ef:56:71:d3:bd:ed:a8:
d3:ac:f2:c3:61:49:ef:9d:bb:fe:e2:f8:17:3c:ce:35:bb:bd:
00:32:9c:3e:9f:60:7f:2a:a6:2f:e3:f9:3e:5c:a2:8c:35:27:
2e:10:1a:38:e1:d0:52:6a:e3:66:43:e7:12:fd:8e:fc:b1:ad:
41:80:99:22:98:3b:0d:1e:63:63:e8:cc:de:1d:f3:d3:84:e2:
ef:e6:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:16:09 2025 by rpki-client