Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: OBbqc6ln71IaSttaMtSlZvFe2AdTIDqjjMIokks7hnw=
Subject key identifier: D1:A1:3C:AA:22:7C:64:AD:35:4C:9D:4B:62:24:64:37:F7:15:95:A6
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 0198936D0950F87802C129F6F17128D53BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 0113
Signing time: Sun 10 Aug 2025 10:00:53 +0000
Manifest this update: Sun 10 Aug 2025 10:00:53 +0000
Manifest next update: Mon 11 Aug 2025 10:00:53 +0000
Files and hashes: 1: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: 5UvMi7AasTcqtFObeWGj+JVWh7PeIHQZEZlFgbhxfuc=)
2: xkzazz831mQOXNGmSz3uWho6Ohk.roa (hash: kcYkLf+1B2AuNTj7vUuf68FA8ProRpgWzdWOYFENYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:09:50:f8:78:02:c1:29:f6:f1:71:28:d5:3b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: Aug 10 10:00:53 2025 GMT
Not After : Aug 11 10:00:53 2025 GMT
Subject: CN=d1a13caa227c64ad354c9d4b62246437f71595a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:fb:02:3f:42:93:e9:05:bf:71:fa:d3:27:
fe:b8:29:a6:25:cb:78:4b:02:30:19:96:83:93:bc:
cb:b7:2a:54:d9:d7:4f:8e:44:ba:64:9e:c4:fb:af:
0a:e9:46:09:17:9b:93:b4:0e:61:d9:86:78:5b:0c:
7e:ec:1b:c1:e1:26:1c:af:3a:60:7b:31:ba:cb:af:
6b:60:cd:eb:57:9b:a6:64:d6:2f:19:7a:57:14:5a:
3d:f8:2d:18:b5:35:12:10:5a:4b:71:d2:2e:90:e4:
67:6a:3f:6a:59:2d:3a:56:86:87:ca:48:81:2a:63:
15:a2:59:7f:9c:ec:17:9f:db:a1:64:9a:f4:93:97:
ab:5f:b9:d6:4b:bd:9f:f5:ee:44:0c:84:d2:7c:f0:
cb:7c:11:a2:33:d7:17:8d:7a:79:35:e7:20:a0:a0:
c8:d8:8f:d0:70:8d:6d:b2:cc:87:fc:51:11:3e:dc:
24:f1:27:47:37:d7:9f:71:55:d2:e0:2d:e0:c7:ef:
3b:70:9d:5c:da:23:de:44:20:25:05:aa:f4:3d:ed:
cb:b5:ce:b4:23:28:9c:90:44:96:e2:da:58:27:d6:
f9:71:0a:13:f5:e8:65:7e:70:da:37:64:42:9b:c8:
42:18:e5:62:7e:80:3b:75:7b:4e:45:28:0d:36:7c:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:3C:AA:22:7C:64:AD:35:4C:9D:4B:62:24:64:37:F7:15:95:A6
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dc:fb:2e:e8:5d:c3:af:5b:19:73:85:2e:1f:e5:58:65:7f:
ff:2d:c1:9c:2e:b0:e7:53:ec:e0:ea:97:35:45:13:0a:25:ba:
a0:0b:f5:8a:2a:95:d1:a2:81:c7:33:5d:95:3f:37:b0:69:32:
da:d3:eb:de:3b:48:9a:3e:dd:a2:5e:00:dc:3a:6f:97:05:ae:
5c:d3:87:ec:72:ec:80:dd:72:3d:74:04:e2:e9:f0:10:17:0d:
1d:40:54:33:f3:28:61:05:48:0e:2c:f1:90:1c:7a:45:8d:c2:
88:f1:bc:2f:47:94:57:98:cc:d2:d4:3e:d2:7e:18:6b:a2:52:
81:b3:47:68:1c:b8:f4:cc:ee:62:e9:54:e2:aa:70:07:7f:5b:
b1:4c:2a:03:cd:45:01:f0:a1:d3:5e:c3:61:50:bd:8b:26:02:
55:2d:c9:e9:de:6f:46:4e:2f:bd:13:4f:bb:47:15:fa:fd:94:
a9:ff:c5:63:09:d1:52:63:9f:17:53:5a:0b:18:8a:68:57:7e:
a9:d7:10:8b:2a:c3:3d:65:fd:19:c4:02:4e:8a:d2:d9:03:c8:
08:a3:0d:bf:a1:0d:43:06:7e:d9:83:5b:69:22:73:f9:4d:dd:
f5:60:3b:7e:3a:de:92:26:7b:f8:66:c4:3c:99:2f:9a:68:76:
ca:6b:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:33 2025 by rpki-client