Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: FwrSCI1cDeazHPBtHlP+f8OJmFXE2Ui20bNBmk45WD8=
Subject key identifier: 3F:58:D0:F4:6D:3D:90:C5:D8:CE:8D:79:18:06:E9:C5:F5:3C:48:87
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 01987D1C3362C864840E5258E299891FE739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:00:56 +0000
Manifest this update: Wed 06 Aug 2025 02:00:56 +0000
Manifest next update: Thu 07 Aug 2025 02:00:56 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: PqdJdlhX5POSh+OnpTvrAz8/ddaDzajij5bioCNfLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:33:62:c8:64:84:0e:52:58:e2:99:89:1f:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Aug 6 02:00:56 2025 GMT
Not After : Aug 7 02:00:56 2025 GMT
Subject: CN=3f58d0f46d3d90c5d8ce8d791806e9c5f53c4887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:75:36:98:9d:33:7f:42:18:c7:31:6f:bc:
81:5c:da:ba:33:09:49:a6:ce:e4:16:09:ff:53:e7:
16:71:cc:04:24:c2:3b:cc:65:c1:ec:49:c5:bd:52:
d9:03:64:35:4e:54:cb:be:52:42:e2:6a:ae:b7:08:
74:f0:fb:68:04:5b:d6:23:da:02:d6:d7:76:d2:bf:
e4:56:57:a4:db:4c:88:28:af:ad:e9:7c:b3:21:b8:
76:dd:73:63:cf:6f:9d:75:2e:5d:e0:c0:1a:0e:36:
60:16:37:82:4f:30:2f:be:b4:09:d3:ee:1e:26:b8:
ac:82:2d:ad:74:a8:15:98:77:fa:b7:e4:22:29:c4:
a1:b5:fe:01:1c:a0:40:c2:61:32:62:5d:4e:1e:dd:
60:50:ee:b4:80:92:76:db:64:12:9b:3a:be:77:0a:
f3:e9:ba:cb:88:a6:0f:22:d9:ea:9c:03:9d:dd:00:
3b:45:6a:bd:e0:7f:e2:a1:7f:34:48:b5:e4:7f:5e:
26:41:3c:e6:db:2c:83:12:eb:7b:d5:99:0c:3f:17:
8f:a4:a5:ae:44:de:98:be:9c:b2:1a:81:8a:46:14:
55:12:7d:19:b3:47:de:fd:14:e7:4f:3f:c3:2e:14:
f1:a8:df:75:97:e9:3e:90:9c:9d:8e:c1:12:9c:18:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:D0:F4:6D:3D:90:C5:D8:CE:8D:79:18:06:E9:C5:F5:3C:48:87
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e5:39:0a:82:e1:c8:49:85:27:ce:11:4c:05:e8:33:6f:2e:
f8:b0:e8:64:6a:96:e2:ac:e5:20:6d:4a:c0:91:9a:46:4d:01:
1d:e2:f8:2c:6f:ea:e5:f8:27:a9:eb:bf:07:8b:9a:4f:df:7e:
f9:9b:b0:02:38:d6:17:97:99:b2:99:64:e6:f1:65:a3:f8:44:
df:fd:d5:14:39:51:c2:be:5b:2a:6b:34:a1:be:77:99:40:ff:
09:39:f2:23:17:c3:ed:b4:91:19:dd:b9:9d:09:22:71:10:b4:
9e:a0:b5:de:87:f5:18:21:c4:7b:85:19:a6:70:68:9c:d5:31:
1e:83:f5:80:10:24:8c:c7:fc:6c:61:f6:ea:4e:5e:65:9f:dd:
87:c0:87:29:1c:7a:89:5f:4a:d3:9f:07:74:e4:f1:67:39:e9:
c3:54:35:a6:d5:3b:5d:07:ea:56:ba:9d:c4:d6:68:6e:30:31:
28:f4:a1:d4:57:11:ec:86:e3:4c:74:56:9c:ce:94:1b:e4:94:
a0:3e:0c:30:a1:21:76:17:cd:f9:e5:17:0b:f4:0d:20:05:86:
a5:a4:50:a8:e2:29:ec:63:a6:16:99:9d:26:d5:b6:5b:00:f0:
7b:e4:bc:f9:ba:85:40:ce:4e:59:49:38:8c:b1:91:b4:5f:f2:
f9:8e:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:07 2025 by rpki-client