Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: HDtXESmPepuM6qlEfohQ4jdxguCppq9lesfbqO560z4=
Subject key identifier: B9:09:66:68:B2:39:5F:20:B4:DF:CB:A9:56:0B:40:76:40:FE:ED:CF
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 01987DF7FD2BA9EBB413E7403A021B14B725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 1076
Signing time: Wed 06 Aug 2025 06:01:00 +0000
Manifest this update: Wed 06 Aug 2025 06:01:00 +0000
Manifest next update: Thu 07 Aug 2025 06:01:00 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: s8XOtj0UF291g8BB6IXJyDjaTyl/g81VhPbFjQAnHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:fd:2b:a9:eb:b4:13:e7:40:3a:02:1b:14:b7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Aug 6 06:01:00 2025 GMT
Not After : Aug 7 06:01:00 2025 GMT
Subject: CN=b9096668b2395f20b4dfcba9560b407640feedcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:48:a1:e6:5a:60:87:31:be:c3:00:ff:19:
e7:cd:93:d2:9d:81:b8:e3:4d:82:59:ce:52:bb:56:
76:88:7e:8d:51:7a:0c:c3:a3:09:f1:0f:bf:db:1e:
63:1e:25:46:f3:a6:50:ad:1a:58:03:1e:d7:e4:d9:
b0:bb:51:d4:b6:51:26:d4:d7:83:b4:0f:67:06:d5:
24:e0:fc:73:08:8c:3d:df:f9:98:77:58:ac:9f:f3:
af:a9:30:f7:df:60:72:65:71:6f:6d:35:c5:67:70:
97:a3:67:1c:61:e4:1b:cd:50:d8:96:49:df:7b:ff:
6e:d9:08:d1:26:93:7b:ce:5c:ae:1a:7a:e5:0c:80:
cc:1a:5e:14:e8:21:d6:53:ee:3d:f4:ce:75:1a:07:
d0:7e:fd:a5:bd:40:60:76:5e:b6:d2:a9:03:69:bf:
8e:0d:57:1d:2f:45:cf:20:55:ed:2b:a8:d9:ec:5e:
91:36:47:da:c2:e8:23:fc:75:7a:28:47:0c:1e:3a:
d3:9e:55:08:80:4f:66:e2:85:3d:5b:61:93:f3:70:
a7:cd:6a:6a:0d:0f:a8:ae:0b:89:59:3e:25:82:97:
27:3d:8e:14:4a:49:7e:47:98:1b:6a:c7:b2:5e:2f:
95:46:e0:64:03:9b:92:3a:8c:5d:f0:c4:26:45:c4:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:66:68:B2:39:5F:20:B4:DF:CB:A9:56:0B:40:76:40:FE:ED:CF
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:ec:92:e2:32:5a:1a:68:a4:44:09:58:d3:80:52:0d:7b:
b4:d5:a5:0b:61:e7:6e:d3:eb:ff:7d:ae:12:2b:4d:71:52:ee:
b3:1b:6d:b8:33:b7:bc:9f:67:43:b2:25:21:32:e9:a8:e9:a5:
bf:01:4a:e7:6c:38:b3:2d:68:cc:44:06:be:f8:28:63:69:96:
db:7a:fd:fa:2a:91:29:02:26:f1:61:a7:f9:52:45:62:14:6e:
cf:1f:a4:6c:6e:c6:19:1e:b5:4f:7e:11:3c:ce:5c:27:ab:24:
79:13:74:c6:fa:60:f0:04:49:b2:ea:7a:ec:07:16:4e:58:6f:
66:31:ae:1e:74:31:09:39:9c:37:40:0e:0f:37:88:a7:28:ea:
6d:a1:b0:6f:b7:62:8f:ba:10:af:60:7e:75:da:f1:94:46:f6:
ed:6f:ad:d9:c2:bb:5d:9d:9f:1a:56:cb:e6:a0:1d:2a:5c:b0:
39:fd:94:bf:79:c5:69:89:da:54:03:90:7a:74:15:0e:0a:c3:
71:75:96:0e:d1:20:04:f1:e1:a9:23:e6:26:da:88:03:bc:1d:
b1:e4:63:ed:28:49:fd:26:8c:38:f8:ce:eb:fe:7d:50:68:20:
48:4d:f6:6e:5b:65:06:3f:69:f8:a7:b4:4c:88:dd:bd:e6:69:
73:1e:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:20:12 2025 by rpki-client