Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: N7jwWDwK1H0vvVs+e7s2vcAmsF5PkVj3Jw0JNRLD/kk=
Subject key identifier: 16:9E:62:1E:9C:23:6A:7E:EB:70:6B:C5:FA:94:1E:A1:6D:AF:61:15
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019873E1BE2201F11D5A3AC87B5FD13A9262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0AB8
Signing time: Mon 04 Aug 2025 07:00:30 +0000
Manifest this update: Mon 04 Aug 2025 07:00:30 +0000
Manifest next update: Tue 05 Aug 2025 07:00:30 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: JkMTp3d2gDf0ewOoI/Sm7+oHfNlxu5s/90IQ3MebEPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:be:22:01:f1:1d:5a:3a:c8:7b:5f:d1:3a:92:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Aug 4 07:00:30 2025 GMT
Not After : Aug 5 07:00:30 2025 GMT
Subject: CN=169e621e9c236a7eeb706bc5fa941ea16daf6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:bf:f6:8e:c7:24:f7:a3:82:be:35:ca:2b:
bb:8e:d8:53:a4:23:92:fe:ea:10:b6:19:da:35:3b:
5d:86:4e:12:af:31:4c:0d:04:5d:d6:f3:f9:9e:92:
c3:09:37:5a:4c:ab:6a:c8:03:57:9f:3f:39:6e:32:
c1:0f:6d:b0:3c:a3:be:82:39:c0:da:6f:40:f7:fe:
3b:d8:c1:83:7c:9e:38:4e:ca:53:55:95:40:64:d6:
6e:d9:ea:89:32:f0:78:ef:8e:c8:92:dc:84:ca:0f:
e3:68:9f:c8:65:cf:5d:3d:3a:1d:1c:2a:7d:df:74:
f1:84:61:ca:31:e2:1a:68:0a:1d:42:4a:7b:1a:72:
de:4a:4e:96:76:7c:f9:04:bb:3f:24:df:7b:ff:ac:
6f:70:aa:f4:6a:9a:5b:fd:2c:3f:57:83:96:11:66:
b9:d9:a2:6a:f7:41:2d:d1:be:f7:34:21:2d:d1:4a:
78:a5:51:8c:59:4f:fc:40:a0:93:ce:b0:4b:51:ab:
33:29:de:51:dd:ee:d2:b0:57:ea:9b:6f:5e:63:cb:
91:24:5f:d8:e5:76:6d:f6:6a:28:63:d4:c6:d5:fe:
8a:04:dd:f7:69:ad:b4:2b:9e:6c:bf:e7:5e:e6:be:
f5:1f:77:b0:78:cd:f0:b7:12:f0:f6:42:0a:10:39:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9E:62:1E:9C:23:6A:7E:EB:70:6B:C5:FA:94:1E:A1:6D:AF:61:15
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:8a:96:5e:d8:6c:fa:6d:5d:f9:38:2c:eb:c6:61:4b:20:
37:d3:c4:fe:a8:76:95:5b:68:b3:6d:3c:1b:8b:c7:02:b4:32:
d3:fa:ad:e5:b8:7d:b9:a8:24:25:ab:a6:2a:6a:df:68:a9:56:
ba:80:35:60:b8:6e:2b:e1:ed:37:86:08:10:04:74:0c:f4:05:
9a:4f:ab:57:c6:ed:0f:f2:87:50:66:4c:30:d5:73:b3:7a:3f:
d5:45:da:d2:ca:72:aa:83:86:d4:74:7b:4f:11:6d:25:95:33:
8d:d4:df:d8:ac:d9:0f:51:9a:e9:52:cc:a1:dc:43:42:41:b7:
53:8b:b5:84:0d:72:3e:61:2a:3c:2c:2d:a2:a3:58:26:c3:f8:
6e:c2:42:e0:2b:0f:51:fe:11:5e:c7:6e:0e:b0:3a:c6:f0:ae:
53:42:98:2d:94:a0:dd:31:10:7c:4d:82:e6:f9:5c:5d:90:e3:
d8:41:d6:0a:b9:7e:cd:9d:5e:c6:73:7a:8c:4c:1f:e8:ae:df:
38:b4:6e:69:d1:77:0c:25:79:95:3c:11:06:ed:a0:08:f7:3e:
60:a3:9c:0a:d7:e9:1e:e9:94:6f:4c:13:83:17:da:26:43:83:
27:27:e5:c7:82:cc:4c:c0:9c:22:cb:89:d1:3a:62:f1:33:c8:
94:86:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:43 2025 by rpki-client