Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: RpE7/z7ZbWiyQ3I0iH1kLlATEmODFamdHibC1eYhYbQ=
Subject key identifier: 86:00:F4:D2:29:B5:35:A5:C3:30:BE:BF:85:90:E2:79:85:94:FB:44
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01988B45DF50634313AC3B8E797A0F961212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1342
Signing time: Fri 08 Aug 2025 20:01:08 +0000
Manifest this update: Fri 08 Aug 2025 20:01:08 +0000
Manifest next update: Sat 09 Aug 2025 20:01:08 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: /EVntSKBHT+VNQm1YxH8sJIBpFn6eDRMXqOlcKC3JVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:df:50:63:43:13:ac:3b:8e:79:7a:0f:96:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Aug 8 20:01:08 2025 GMT
Not After : Aug 9 20:01:08 2025 GMT
Subject: CN=8600f4d229b535a5c330bebf8590e2798594fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:33:cb:0d:a5:c5:65:2b:4c:e0:89:87:ee:
a9:d8:ea:aa:fe:97:74:24:e4:af:85:86:5f:c0:70:
8b:86:45:70:1c:9e:4b:b9:2f:e5:ca:1c:97:82:5b:
a5:a4:9f:fc:8f:26:eb:e9:1c:5a:28:b1:cd:7b:96:
f8:ee:42:79:43:07:6e:a0:a7:6c:02:b5:0d:82:ef:
df:6e:73:89:08:72:dc:b8:99:c9:24:22:c5:71:14:
4a:6f:7b:ee:3c:ba:f8:2b:90:0e:f2:80:25:ae:3a:
17:b4:53:58:12:14:3d:76:9c:a0:bf:aa:a1:e6:ff:
c6:2f:39:5f:04:1d:d6:69:ad:a1:23:ab:b4:b0:d8:
d6:09:f8:9f:7e:4a:da:f8:d6:4a:d2:c2:76:6a:ab:
a1:8c:37:83:e6:de:35:bf:3f:67:85:4f:86:1a:41:
d1:5f:52:3d:da:c8:e7:e1:fa:37:bd:bd:7f:8b:47:
ed:9f:22:d3:54:d7:08:d9:51:62:15:0f:69:b1:4b:
c5:ab:6f:94:93:5f:f0:ad:6e:ea:ca:7e:b5:f6:da:
ad:14:51:29:3f:99:5c:8f:28:0f:20:1c:56:67:c2:
a7:1c:b7:e5:cc:d8:c0:57:5b:79:f9:17:d3:da:e8:
e2:29:17:2e:9d:ab:5a:2a:58:3f:a9:c8:9d:f3:05:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:F4:D2:29:B5:35:A5:C3:30:BE:BF:85:90:E2:79:85:94:FB:44
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:89:21:55:82:3a:d1:80:db:63:66:4a:33:a8:1f:0b:b2:
4c:a8:a6:3e:b1:18:88:80:2b:5b:6d:f3:6a:69:57:b6:1e:46:
93:8a:23:71:93:a9:1c:d8:9c:3e:87:4b:91:c1:08:fa:26:4f:
a1:28:4a:71:98:bb:b6:4a:c4:c0:83:3d:f1:9a:34:eb:b8:5d:
b2:67:c6:0a:08:04:28:3c:e2:32:68:2b:d8:27:5b:72:65:63:
35:f5:2a:a1:2a:64:33:4f:f0:e9:f3:c1:04:ec:ad:f6:f5:a1:
34:d4:15:83:bb:8c:73:ea:e9:98:8b:fd:b3:90:0a:ee:79:9d:
9d:32:89:06:53:a2:45:ff:59:51:d7:2e:d9:b5:d1:72:09:4b:
b1:7e:01:0c:38:4e:9b:c6:25:05:98:1e:9e:03:68:c9:73:74:
14:b3:47:aa:72:77:40:74:cb:be:fe:37:27:33:79:e0:6e:f9:
06:73:f5:60:85:8e:02:f9:98:a8:5d:63:b3:81:d9:f9:9d:cb:
4d:40:d5:5e:03:72:a6:ef:a1:2e:be:fb:6f:2d:c9:f9:0c:7f:
3c:67:52:16:e3:9c:24:6e:d3:e8:b7:72:7d:10:d8:98:aa:6f:
f3:31:27:07:be:a5:44:11:c7:a6:65:ca:3b:34:37:ed:f7:f7:
68:b0:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:36 2025 by rpki-client