Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: GQgnbEcVsFvREr3lpGv6Y+Jd9E4Ege5UAXKf+KqeLRE=
Subject key identifier: 08:C2:A9:78:1C:CF:B4:02:FA:79:DA:49:C8:23:1C:45:1E:F9:20:C6
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 0198898DE7AE079888AA45B69652CFD8F224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 12:00:35 +0000
Manifest this update: Fri 08 Aug 2025 12:00:35 +0000
Manifest next update: Sat 09 Aug 2025 12:00:35 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: gfwOgq1arTP7sCkizVYpRnS8UyOhNy9uRVq7x2uj0Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8d:e7:ae:07:98:88:aa:45:b6:96:52:cf:d8:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Aug 8 12:00:35 2025 GMT
Not After : Aug 9 12:00:35 2025 GMT
Subject: CN=08c2a9781ccfb402fa79da49c8231c451ef920c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:98:95:c5:e3:06:e6:39:26:c0:21:65:a9:
48:91:2e:9a:40:9d:ed:3c:a5:f2:9b:fb:b3:2b:9b:
41:f3:ab:bf:29:42:d3:6e:c1:d9:7b:7a:1c:cf:e8:
64:4e:ff:d7:1f:1f:19:d0:46:e9:23:72:ef:13:eb:
af:bf:37:fd:70:a7:1f:7f:6c:7d:9e:29:4c:10:74:
b5:64:50:af:86:c3:53:7a:ec:9b:94:7a:47:c2:20:
70:08:49:f3:90:af:fc:c9:8d:07:67:7b:54:de:5c:
b7:ea:77:01:9c:6f:84:f1:6f:f0:8f:4c:34:0a:de:
ab:d1:38:9f:ef:15:be:0e:e5:37:34:20:31:11:59:
6f:b3:d2:1d:d4:5a:2e:77:58:11:46:d6:f9:6a:64:
76:92:ed:4d:6b:61:10:85:4d:92:4f:d6:a3:c1:c6:
0b:8a:8c:c6:1f:ff:6a:bf:6f:47:44:4c:5d:0e:8d:
e7:a7:89:eb:95:5e:3e:21:25:d9:bd:0f:87:79:e7:
f1:b0:f4:e1:ad:a7:8e:0a:b3:ee:f8:41:6c:fd:b9:
d1:e5:f9:1c:58:f5:13:7c:89:cf:ab:76:90:75:f3:
43:8d:68:ca:13:c6:34:c1:1a:58:14:a6:d1:b8:a9:
9e:22:92:90:f9:85:13:5b:ad:39:4b:75:f2:dd:b6:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:A9:78:1C:CF:B4:02:FA:79:DA:49:C8:23:1C:45:1E:F9:20:C6
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:29:fb:4b:b6:1d:bd:0a:71:a4:74:d2:72:13:f2:52:fb:f0:
cf:4b:ac:bd:48:1c:47:40:54:0a:49:a0:57:f3:e6:40:94:4d:
2d:af:1d:f4:16:63:08:67:b5:5e:e9:1b:af:e4:db:18:90:96:
a9:ec:f2:00:22:6b:83:83:7d:91:1a:ea:56:9c:ec:67:70:ab:
40:ed:96:19:38:92:1a:68:88:8e:ad:1b:d8:97:1e:e8:da:b2:
7f:36:9f:94:95:02:15:09:4b:1c:9b:78:5a:bd:d1:5d:81:f7:
57:e0:a0:b1:0f:08:02:f8:c4:cc:79:14:0d:b2:00:a4:de:00:
7e:9d:e8:d3:9f:b7:34:c8:ef:a9:f6:b4:52:a3:69:47:63:5a:
6e:7b:e3:93:b7:b3:0f:43:77:0a:98:51:00:33:17:23:ee:9b:
cb:b4:0f:b0:92:a9:c9:a7:be:44:ca:3a:f9:0c:a5:34:8f:67:
f3:9e:0f:09:21:3a:bd:ef:e3:54:e1:73:c9:2f:14:dd:89:de:
5c:c2:ae:0e:28:5d:94:be:f1:89:38:30:ef:71:20:b0:bd:90:
44:e9:b3:a1:0c:60:fa:ea:cc:ed:21:7a:bf:4a:69:05:dc:c3:
af:b7:1c:16:7a:65:e6:c4:07:71:c0:09:bb:1f:a2:a0:a3:b4:
38:66:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:04 2025 by rpki-client