Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: Z6j4O4mg8HT7s5YsVLnzOwtv3XoreSS/QrEMSE66oEQ=
Subject key identifier: C9:F9:80:27:BA:60:97:B3:B4:8B:9F:E7:84:40:7C:E4:1D:CE:40:88
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 0198744F9FBDA75722F40A81FE3752111ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0C32
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: fLVA/Q5o0RcAqgIpJ2KK35yV1JCNmWMNT2l+RmlJNnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9f:bd:a7:57:22:f4:0a:81:fe:37:52:11:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=c9f98027ba6097b3b48b9fe784407ce41dce4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:dd:6a:de:e0:c9:de:29:cb:fc:31:3a:15:
b2:8f:30:9c:0e:cb:33:56:8c:48:dd:40:69:04:f5:
4e:31:43:b1:80:6f:8c:1e:eb:7e:ca:87:b2:6d:f0:
99:ad:09:d0:a6:ed:24:70:12:7f:c5:81:9d:73:d8:
99:2b:c4:08:5d:32:77:7c:7a:84:92:43:37:6e:eb:
76:3f:c7:7f:f5:87:62:46:3f:d7:79:fa:44:7d:32:
82:37:03:b0:91:0c:02:05:0d:d3:a1:9e:50:7f:1d:
f4:70:e6:37:82:e3:56:65:13:db:92:5e:a8:e4:27:
0e:34:10:0d:be:46:dc:8f:5c:7d:59:53:17:64:dc:
8e:93:cf:fc:5c:ed:17:8e:23:e7:3e:66:06:e1:70:
7d:30:69:b0:05:31:b6:ba:07:c0:ba:68:d4:cf:42:
f0:b8:e0:67:7c:a4:44:0e:ee:05:5e:51:cf:91:18:
43:48:f0:cf:c2:7c:08:9e:9e:1b:8e:13:4a:94:38:
c5:94:6e:9e:a6:5a:c3:5c:fc:92:79:c8:ca:99:63:
48:15:fb:fa:58:42:4f:c7:6d:da:b1:53:71:47:ee:
fe:7f:09:57:10:48:02:87:1a:eb:51:1b:3e:5e:fe:
61:08:3c:a3:85:ea:38:51:f4:03:d6:e4:59:f5:4e:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:80:27:BA:60:97:B3:B4:8B:9F:E7:84:40:7C:E4:1D:CE:40:88
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:b7:b7:7b:42:85:ad:c5:e9:4e:b7:60:25:1f:71:41:a8:
36:38:cd:5d:e2:e2:db:a8:28:b4:97:4a:35:4e:5c:5b:94:41:
dd:e1:e7:6e:58:2c:1f:cb:f1:be:6b:0e:0a:0f:43:d7:35:d7:
28:40:a9:10:d8:6c:52:40:0f:7b:ab:86:29:0d:1b:fb:af:09:
5c:32:0a:f8:9c:51:27:55:61:90:8c:f7:d0:8e:c4:b2:11:16:
45:31:f3:5e:55:4e:bd:eb:f1:45:c7:69:4b:41:e4:12:c9:26:
a3:f6:e8:7d:05:ad:ac:46:13:8b:64:45:1a:45:b0:77:e5:96:
94:7d:9f:c3:ff:fa:d6:88:c1:ba:a2:aa:87:0f:3a:58:04:ac:
35:31:15:2d:02:ef:8f:73:c2:40:20:19:d0:84:a8:0f:a2:15:
bd:22:10:d2:f5:cf:50:d4:95:fb:f4:3f:b4:96:dd:16:67:d6:
ed:53:cd:a0:6c:7a:43:e9:61:72:dd:cc:55:62:1c:94:d2:5c:
06:99:f7:01:d8:98:fe:63:83:88:f1:d9:94:22:a6:dc:30:05:
b4:2c:75:d6:b8:0e:18:81:fe:fa:07:f2:de:80:42:47:a6:a6:
b5:70:dc:0a:e6:bd:ff:6a:a9:78:ff:4d:b7:7a:83:d5:7a:09:
ea:01:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:29 2025 by rpki-client