Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 7xGUDSba/MfkSC4c2sWbxXpO7ZUu9F22jl+yFajIeiI=
Subject key identifier: 1F:A5:BB:D1:B2:EA:86:E5:C1:04:0E:5D:A7:52:80:C1:63:AC:AC:EE
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019874508D534C0CA7AE6683B7DC6DCA18D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:32 +0000
Manifest this update: Mon 04 Aug 2025 09:01:32 +0000
Manifest next update: Tue 05 Aug 2025 09:01:32 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: s/PYvCJ67NkgAis1yXnObK4/yVBfoAroCoAXf9/SiZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:8d:53:4c:0c:a7:ae:66:83:b7:dc:6d:ca:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Aug 4 09:01:32 2025 GMT
Not After : Aug 5 09:01:32 2025 GMT
Subject: CN=1fa5bbd1b2ea86e5c1040e5da75280c163acacee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:cf:af:58:20:2f:06:15:fb:ea:6e:d1:15:
37:68:d7:24:14:3f:de:6a:a1:db:40:6e:5b:44:72:
a9:23:c7:4c:8d:9f:9a:3f:12:35:eb:32:54:db:81:
77:bb:7f:d2:bc:60:de:bc:39:d6:29:0c:a2:20:55:
18:a4:1c:a4:61:14:ec:89:99:0d:66:58:4b:32:d6:
37:86:9a:0e:cd:0f:b2:99:35:64:5e:e1:a5:3a:12:
96:e1:63:83:a6:5b:36:1f:f2:e4:64:e4:3f:0f:96:
9d:92:68:92:90:ec:c7:b0:57:7e:08:44:bc:42:8c:
c5:f1:c0:68:70:39:04:ee:0a:b7:1d:2c:e8:99:16:
b6:25:f6:c3:1d:2c:b7:16:10:ec:96:1a:92:2f:54:
ab:fe:64:95:de:e5:e8:2a:8b:d2:b8:a5:35:40:9c:
cf:38:70:4f:64:70:d4:67:00:fb:cb:79:f9:58:c3:
df:64:19:be:43:3f:ce:55:74:4b:4b:fd:e3:83:ca:
ab:a5:bc:1d:2c:96:b6:f8:3b:2c:34:8f:44:a3:69:
3a:ed:59:8e:dd:ff:92:b3:c4:6c:4e:f9:b5:79:bb:
f5:f5:b0:98:da:4e:6a:49:dc:9f:46:92:26:ab:f1:
85:18:09:c5:ce:a9:3a:ad:d1:82:f3:55:e3:f1:35:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:BB:D1:B2:EA:86:E5:C1:04:0E:5D:A7:52:80:C1:63:AC:AC:EE
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:97:6f:50:e1:b8:ec:b3:34:77:88:f3:b7:c4:f1:78:c4:
1d:06:bd:3c:df:f6:91:9f:61:84:f5:95:37:15:fd:c3:e4:bd:
cc:21:29:5d:3e:f5:40:7b:df:8d:0c:1e:75:0c:b1:3e:f2:be:
e7:c1:9d:c2:2b:27:23:dd:c5:45:58:08:d0:d1:eb:aa:d6:22:
01:96:67:b6:03:9a:04:98:25:f9:52:cc:80:9d:48:a5:ac:5c:
25:7f:61:41:3f:d4:7f:a4:5e:8e:44:0b:7c:83:ba:cc:81:5d:
28:cc:a8:f3:40:77:4a:c1:ed:23:0c:81:35:65:55:88:25:71:
e5:ef:b8:70:7f:2a:ab:c5:35:aa:65:41:8c:1e:37:6a:74:b5:
00:f6:31:f0:d5:42:7c:0c:e2:13:18:64:22:79:73:51:c4:67:
ea:f3:6b:6b:f0:01:c3:3c:01:1e:06:81:d2:08:85:86:83:dc:
68:38:87:43:1b:d8:0c:57:94:56:a0:8b:47:45:b5:35:5f:04:
02:73:5b:a3:09:88:ef:ab:37:ad:a9:1c:63:7b:47:ae:8a:07:
90:e5:89:17:6b:ad:91:bf:97:ad:0f:30:50:45:b1:62:90:27:
cf:e5:fc:c7:2e:25:ac:f8:a4:42:02:4e:f9:bd:f1:12:3d:cd:
c1:30:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:24 2025 by rpki-client