Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: SMSSZIFD6QZ88R2NCYM9Zpobr9xgYcWKc9yduJs8pSo=
Subject key identifier: BF:A6:8A:73:F3:E8:FC:9A:CA:98:99:50:A0:90:5B:EF:E3:F8:92:D4
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019770E38342BCB86D3103AB585127CD906C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0A32
Signing time: Sun 15 Jun 2025 00:00:47 +0000
Manifest this update: Sun 15 Jun 2025 00:00:47 +0000
Manifest next update: Mon 16 Jun 2025 00:00:47 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: +2JfTHuv9XMugiD8Ti5vHniAuXJTMt8TAdqKz7x9hb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:83:42:bc:b8:6d:31:03:ab:58:51:27:cd:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jun 15 00:00:47 2025 GMT
Not After : Jun 16 00:00:47 2025 GMT
Subject: CN=bfa68a73f3e8fc9aca989950a0905befe3f892d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:6b:fa:c0:67:d2:1b:68:27:cf:43:23:42:
56:2f:0d:5a:8e:fe:77:dc:c4:a6:be:13:12:fa:b7:
01:c2:48:e7:0d:8b:40:3d:0c:3c:ca:f0:99:f1:9a:
78:df:c1:9c:00:df:dd:a4:a6:7f:5b:9e:c5:af:bf:
9b:45:b9:8b:d2:a9:1f:c9:ea:ab:4a:97:27:69:80:
24:d8:16:8f:e5:78:60:1c:68:7f:21:ed:ad:88:6f:
f6:40:84:6c:7d:61:b1:dc:2f:f8:16:66:4e:5d:ef:
d8:cd:72:95:7c:88:8c:a0:b9:05:e4:38:79:66:f5:
6c:c2:f8:70:a5:66:04:61:c8:10:39:1b:6b:17:10:
33:3a:66:f0:0a:9d:b0:60:53:39:f2:42:e5:14:58:
03:8e:a3:b9:c1:c3:c4:03:7e:79:12:dc:6f:6d:32:
a7:6c:34:4c:88:4e:66:d8:ae:d2:ba:31:8f:25:00:
75:2e:c6:06:a5:1a:76:82:ea:e0:38:8f:d2:ec:26:
29:12:65:62:aa:0f:22:4b:23:e4:66:2d:68:10:59:
08:07:03:cb:92:16:9f:c4:5f:e5:1f:e8:e5:11:95:
11:e0:52:b3:c7:dc:e8:6e:35:d5:45:3f:97:a4:cd:
f1:08:a5:3f:c4:37:43:65:3b:f0:88:a4:c8:b9:70:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:8A:73:F3:E8:FC:9A:CA:98:99:50:A0:90:5B:EF:E3:F8:92:D4
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:49:2b:7a:32:a2:74:c5:29:f7:99:14:e9:25:46:45:7d:
11:18:9c:d8:9c:0d:f4:d4:94:b4:3e:e0:07:ac:72:1c:6c:a0:
ef:50:a3:55:93:f1:0d:55:dd:bb:da:52:9e:17:41:89:13:65:
7c:a1:91:ef:89:0b:f8:5e:67:a0:b5:1b:b7:9c:05:14:5b:5b:
f5:2b:61:cf:9d:0f:be:cc:93:72:3e:4a:cd:d6:a5:cc:0c:d0:
de:b1:49:65:d0:70:9f:e1:b4:46:4e:4a:4e:ac:79:a8:ce:ac:
7b:02:a1:39:5c:29:0f:4b:4e:87:1e:16:fd:e3:c4:64:fe:6d:
fe:14:7e:f6:91:14:6e:0f:ed:ef:b3:4d:47:3d:78:50:e7:25:
6c:c9:79:91:71:61:2c:a7:ec:21:93:29:68:84:e2:64:65:21:
43:44:49:07:f1:ad:a8:a0:8e:9b:c8:57:ec:af:d9:5c:47:06:
79:66:b5:6a:e3:b7:8b:2f:05:c8:8e:6e:2e:85:bd:37:e3:40:
73:28:05:e0:9d:fb:e1:86:c4:24:cf:7e:e4:22:b3:d7:14:c3:
ca:49:8d:f9:f8:4b:82:7f:d2:36:1d:10:ea:06:48:18:43:43:
5e:71:62:61:64:1e:c8:5a:76:6c:07:b0:bd:dc:32:96:e3:6d:
7d:72:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:10 2025 by rpki-client