Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 2fYNr/sx4bv7RP1aWxlyS3ZkxmMykYTlIvqhvG7LV5E=
Subject key identifier: 21:AF:FE:D8:A0:B9:0F:01:54:C1:5F:8C:F8:78:D4:77:13:80:E8:21
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019769CEEA7D39C8652E177A9E7EC469FFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:00:57 +0000
Manifest this update: Fri 13 Jun 2025 15:00:57 +0000
Manifest next update: Sat 14 Jun 2025 15:00:57 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: +BUOsobPc3vEqmvni/01UXrBpI/MTNDDqGPRoDlaNf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ea:7d:39:c8:65:2e:17:7a:9e:7e:c4:69:ff:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Jun 13 15:00:57 2025 GMT
Not After : Jun 14 15:00:57 2025 GMT
Subject: CN=21affed8a0b90f0154c15f8cf878d4771380e821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:dc:3a:e2:d9:c7:03:24:28:f3:1b:33:ef:
06:fb:78:cc:2e:85:04:e9:0f:91:f1:89:39:00:c6:
f3:f7:e1:33:f2:3c:27:9a:dd:a0:ce:4c:75:cd:34:
6d:ec:51:85:92:7c:52:ba:6a:77:f1:b1:cc:ad:b8:
49:c1:4d:ff:ca:53:53:c6:2a:4d:50:f8:30:b7:94:
e6:06:5d:8a:0c:1e:a3:0b:88:72:44:1e:6a:db:8c:
75:52:06:66:48:5b:56:16:e8:bf:b1:b5:92:7b:f1:
8b:fc:15:f0:3c:bc:2e:26:a4:07:23:16:02:95:5b:
68:c4:2c:42:62:f6:91:f5:e5:78:32:db:55:48:93:
47:55:d3:79:bd:a2:29:c1:2d:39:24:fb:dd:b2:4d:
73:6b:1f:77:5f:8e:8e:3a:23:33:37:62:9c:43:a0:
d7:d1:01:56:f7:6b:fd:8d:2e:a4:58:38:4a:4a:b1:
60:50:d9:5e:41:19:04:37:93:b7:6b:35:12:7b:b4:
ae:e3:7f:d2:b8:2a:b7:9f:15:c8:31:ff:c0:92:aa:
2a:51:d9:2a:f3:f9:eb:98:44:0e:96:2c:50:37:2b:
01:3a:0a:84:17:cc:d7:93:f0:0c:94:c1:81:a1:83:
5e:77:68:da:06:de:58:14:a1:15:cf:05:cb:5e:cb:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:FE:D8:A0:B9:0F:01:54:C1:5F:8C:F8:78:D4:77:13:80:E8:21
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:f9:71:41:4e:28:e5:7d:1c:37:85:d2:f4:10:a9:24:cf:
9f:50:d4:3f:aa:81:0e:2e:3e:5a:0e:38:b6:77:47:f1:83:ba:
fd:9e:1c:0b:dc:bd:e0:56:5d:ae:fe:e4:be:37:69:fb:ef:06:
1d:2b:c1:4e:3d:a0:81:c6:40:ca:80:c0:ac:7d:43:5c:81:df:
28:1e:e2:07:72:f3:f3:c5:ff:0d:a6:c0:10:a7:39:c7:09:1b:
1f:89:55:1d:21:bf:4a:cd:84:1d:03:c4:03:dd:10:3b:01:a7:
53:ed:65:14:85:69:20:84:e4:22:2d:02:c9:b6:da:dc:87:90:
aa:66:20:a0:96:2b:3a:e1:64:0c:2a:52:46:aa:6d:d6:6c:2d:
e3:53:e0:19:8e:31:9b:81:ba:bf:81:86:87:0b:eb:e7:30:7e:
63:4b:37:ab:b0:33:5c:94:48:69:72:0c:9a:2e:3c:02:31:d6:
46:96:66:6a:6f:55:e6:33:ed:f4:eb:2f:b6:1f:8b:96:ef:8c:
64:d0:7a:5d:7c:4c:d3:a9:ca:f1:da:0c:dd:4e:31:80:4e:bb:
8f:3e:ef:d1:9a:13:7a:40:b8:85:80:93:57:4b:11:fa:55:14:
3d:7f:6b:24:7d:e7:42:f2:f5:64:28:25:03:51:e1:48:3e:bb:
27:00:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:12 2025 by rpki-client