
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: ktBvw/or9WZEG5r8DPLcyxUFgUeD21X2kFDu8a4mCAA=
Subject key identifier: 65:79:A7:8D:36:23:FF:FD:55:62:8C:A0:3F:1E:EA:5E:90:FE:C4:BD
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 01988656132B09ED2875B30765A42ECBBF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 21:00:44 +0000
Manifest this update: Thu 07 Aug 2025 21:00:44 +0000
Manifest next update: Fri 08 Aug 2025 21:00:44 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: ZvtBfvD4Bd0IeB6HAkL+QESRRtZ0TClswZY3/Esn+D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:13:2b:09:ed:28:75:b3:07:65:a4:2e:cb:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Aug 7 21:00:44 2025 GMT
Not After : Aug 8 21:00:44 2025 GMT
Subject: CN=6579a78d3623fffd55628ca03f1eea5e90fec4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:e7:39:07:ec:83:56:4c:1b:74:62:33:dc:
ad:ba:39:d5:4f:27:ff:0d:ab:ac:f1:8b:bc:2d:63:
1b:45:cf:e4:47:c0:87:93:a1:27:35:7a:cc:d0:59:
d2:87:14:0c:db:d7:d3:a2:a3:ff:0e:37:b3:2d:ff:
4c:8c:2f:52:d3:00:ee:f5:e7:d8:99:28:0d:8e:49:
51:73:bc:2f:35:08:1b:32:f9:3b:b2:da:bc:dd:f1:
6f:67:5e:02:12:d8:38:68:b9:60:22:5a:33:88:c0:
86:1f:e7:dd:b7:7f:65:fb:e0:5c:3d:80:b3:42:87:
cd:51:da:1b:23:4e:fc:07:c9:c5:92:0d:f7:5d:67:
6c:8b:57:31:df:b7:66:f6:1e:d9:d5:ad:eb:8e:be:
1e:79:8b:59:f2:5f:45:a7:f2:f1:6f:14:5d:05:8c:
2c:e9:51:e9:30:3b:54:e4:41:6d:37:d2:f6:fc:c9:
3b:89:0d:24:a7:06:e8:f7:55:21:e4:e6:1f:22:db:
2d:7c:2f:c2:19:ec:64:49:ea:fe:37:51:98:ad:7d:
cb:db:ed:78:48:c7:f1:05:cf:f4:b0:2c:b2:c0:ea:
3c:19:13:e0:e7:2b:5b:f5:33:9b:57:a7:7c:96:62:
a1:57:b4:3b:ac:8d:4b:08:76:ee:49:e3:23:ff:0a:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:A7:8D:36:23:FF:FD:55:62:8C:A0:3F:1E:EA:5E:90:FE:C4:BD
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:13:25:36:1e:6d:82:f9:2f:a5:ba:6a:2b:19:9a:32:60:4e:
ba:0d:dd:ed:8e:0b:09:0a:94:77:31:ef:f7:fa:52:b9:42:41:
a6:2c:3f:74:4e:1e:85:b9:d9:e8:99:cd:64:46:37:d6:5f:26:
d1:9a:a5:14:46:01:37:46:df:c0:1e:41:4d:25:96:bb:1e:ec:
fe:81:ed:95:d3:81:21:8f:e5:96:41:9b:b2:47:92:01:24:af:
e9:1a:0d:1c:56:d5:c2:0a:4c:91:4a:3b:32:80:9d:a2:40:60:
07:e5:bd:57:b6:e1:ae:2b:26:9b:7a:72:3f:a6:fb:17:6a:04:
32:40:94:2c:4f:80:97:b6:5c:5d:31:43:f2:f8:ed:a4:62:73:
9f:05:70:c6:cc:a2:11:c9:af:25:5d:2b:0b:1d:df:af:8a:cd:
10:cd:44:3f:88:77:aa:5c:54:49:d7:f8:df:ab:eb:2d:c8:d7:
75:c9:b7:66:c0:ac:ce:f9:2e:69:09:41:0f:94:53:08:ca:b8:
01:5d:8b:2e:3d:1a:3c:07:34:77:16:22:f8:8a:d9:9b:e0:b6:
d7:82:a8:54:f1:f9:f1:38:c3:5e:75:5a:2f:e1:9d:04:6a:e1:
01:9b:cc:85:2e:f6:5a:dc:fe:20:db:80:c5:2e:30:01:5b:b1:
77:8f:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:11 2025 by rpki-client