Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: 9t9FTvVxgk19J8q3Wud6kDqDzFAlZ2b9cTBN7d0Zw9I=
Subject key identifier: A2:06:F7:C7:BB:CB:D5:99:1A:F1:DC:67:79:2D:7A:97:01:B4:52:F5
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 01977FB15849B8438049A7FC8E4E4F183370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 13DA
Signing time: Tue 17 Jun 2025 21:00:18 +0000
Manifest this update: Tue 17 Jun 2025 21:00:18 +0000
Manifest next update: Wed 18 Jun 2025 21:00:18 +0000
Files and hashes: 1: ChY1pYRmqo4gHf3bQwXo87kO4Nw.roa (hash: b4fVB4MFOUGQYpV3kbDWZEsf3wE2N+b11phHSCf2ye8=)
2: q8M-3H6OVUVUn0YqzRiI0Q19ug8.roa (hash: Q+O8sJG70iEmUv3N4ZQyhgP/0dxD8doXw0L8mjUAc5c=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: wKrxS+B39wYSInQ5pCQEu/d9lVQz+d8cRm5H5vZTWgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:58:49:b8:43:80:49:a7:fc:8e:4e:4f:18:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jun 17 21:00:18 2025 GMT
Not After : Jun 18 21:00:18 2025 GMT
Subject: CN=a206f7c7bbcbd5991af1dc67792d7a9701b452f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:34:96:01:bb:b6:d3:c1:70:5c:4d:83:20:
17:e9:ba:90:be:80:7e:e7:da:7c:58:c1:90:b2:0b:
59:0a:1b:94:31:1b:4f:9c:f1:07:72:ca:18:f3:f0:
6c:77:a2:78:fa:b4:e5:f2:fb:e8:bb:be:e3:b6:25:
88:2d:77:f0:b3:5a:c1:5d:21:53:b1:fa:1b:44:8b:
b7:6f:8b:5a:01:60:85:1f:f5:26:50:cd:6c:d2:df:
a8:ca:2d:6b:35:13:d1:b1:01:3b:fd:67:43:d5:7e:
d2:ad:a8:9f:5e:2e:90:ce:cc:c8:7c:b1:fa:97:09:
f1:98:56:2e:58:12:a6:e8:04:04:09:ff:11:0a:e9:
e7:bc:ca:d7:28:73:29:2a:a2:99:24:d1:31:b1:1c:
e7:eb:fc:1a:7e:a7:33:e3:09:fd:eb:2d:72:dc:e8:
fc:b4:f6:de:f0:ec:75:df:cb:55:8b:23:95:8a:ca:
de:dc:52:b6:53:8e:43:cf:f3:9c:1b:2d:ed:20:44:
ad:1a:9c:f3:50:d1:d9:ec:0f:b7:ee:f7:c5:5d:fe:
72:e0:80:d3:3d:d1:67:42:e2:b0:06:b4:e3:54:de:
45:20:9a:f6:bb:94:17:52:7d:4c:55:f2:92:cf:50:
ed:cf:93:91:5a:f1:b8:41:c5:ac:19:cd:1c:93:3b:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:F7:C7:BB:CB:D5:99:1A:F1:DC:67:79:2D:7A:97:01:B4:52:F5
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:0f:a6:47:de:76:4e:61:b3:cc:9b:01:ec:7a:d6:81:a1:
cd:c0:21:b2:e1:40:29:b9:c4:86:61:dc:60:58:29:55:98:20:
af:b2:0e:54:56:7a:57:ab:ca:53:1d:6c:4f:10:55:ee:a4:f9:
62:a0:7c:75:03:cd:de:04:bf:de:16:82:ef:ef:dd:bc:7c:71:
5b:50:bd:7d:1c:39:ca:ef:a7:2b:16:81:65:e8:51:a7:0f:f8:
c4:f4:d4:3b:95:ab:46:13:e5:fc:96:d1:d4:60:1b:a8:70:3b:
11:cd:14:00:47:1c:8f:65:ef:4f:39:9a:f8:0e:cd:29:55:78:
74:1c:22:18:97:20:73:91:0a:ed:e0:7a:0c:2e:ba:d5:ac:7a:
6a:6b:fb:5b:ba:d0:52:f6:4e:65:68:a3:db:04:82:d4:3e:06:
ad:ff:86:a1:76:ff:2d:f0:e8:73:91:20:ce:fd:d1:40:fa:8f:
74:14:18:cb:c5:a6:21:02:16:2e:94:ae:90:d6:c2:7b:5d:c4:
2d:11:42:09:fe:57:5a:90:7c:8a:09:e1:3d:3a:fa:f9:f4:75:
c1:47:1d:dd:e2:71:7b:cb:44:0e:cf:db:ca:07:88:c1:b9:67:
14:18:75:45:f6:16:a2:46:0e:48:e7:57:3b:21:e9:6b:fc:fe:
e3:15:5d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/sVhJuEOASaf8jk5PGDNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwNjE3MjEwMDE4WhcNMjUwNjE4MjEwMDE4WjAzMTEwLwYDVQQD
EyhhMjA2ZjdjN2JiY2JkNTk5MWFmMWRjNjc3OTJkN2E5NzAxYjQ1MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR00lgG7ttPBcFxNgyAX6bqQvoB+
59p8WMGQsgtZChuUMRtPnPEHcsoY8/Bsd6J4+rTl8vvou77jtiWILXfws1rBXSFT
sfobRIu3b4taAWCFH/UmUM1s0t+oyi1rNRPRsQE7/WdD1X7SraifXi6QzszIfLH6
lwnxmFYuWBKm6AQECf8RCunnvMrXKHMpKqKZJNExsRzn6/wafqcz4wn96y1y3Oj8
tPbe8Ox138tViyOVisre3FK2U45Dz/OcGy3tIEStGpzzUNHZ7A+37vfFXf5y4IDT
PdFnQuKwBrTjVN5FIJr2u5QXUn1MVfKSz1Dtz5ORWvG4QcWsGc0ckzsikQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIG98e7y9WZGvHcZ3ktepcBtFL1MB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOacPpkfe
dk5hs8ybAex61oGhzcAhsuFAKbnEhmHcYFgpVZggr7IOVFZ6V6vKUx1sTxBV7qT5
YqB8dQPN3gS/3haC7+/dvHxxW1C9fRw5yu+nKxaBZehRpw/4xPTUO5WrRhPl/JbR
1GAbqHA7Ec0UAEccj2XvTzma+A7NKVV4dBwiGJcgc5EK7eB6DC661ax6amv7W7rQ
UvZOZWij2wSC1D4Grf+GoXb/LfDoc5Egzv3RQPqPdBQYy8WmIQIWLpSukNbCe13E
LRFCCf5XWpB8ignhPTr6+fR1wUcd3eJxe8tEDs/bygeIwblnFBh1RfYWokYOSOdX
OyHpa/z+4xVdqw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:49 2025 by rpki-client