Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: Tkj1tS+pG1CXyphdxTyh4q393Z68GWoxXF+U6rODEQY=
Subject key identifier: 04:7A:A5:33:FD:D4:6F:39:B0:F9:6B:CC:32:D8:AA:29:58:DB:F7:15
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019874BDF1DB2C169226D144D8F80C706079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 10EE
Signing time: Mon 04 Aug 2025 11:01:01 +0000
Manifest this update: Mon 04 Aug 2025 11:01:01 +0000
Manifest next update: Tue 05 Aug 2025 11:01:01 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: J5ZVc0gG1JnDNFoMCTp3dbJMh8KclWi9SYyJ+X6ntkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:f1:db:2c:16:92:26:d1:44:d8:f8:0c:70:60:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Aug 4 11:01:01 2025 GMT
Not After : Aug 5 11:01:01 2025 GMT
Subject: CN=047aa533fdd46f39b0f96bcc32d8aa2958dbf715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:d3:ac:67:14:b2:d9:1b:86:87:1f:ef:18:
b1:c3:ac:5a:ab:49:7a:77:fb:13:42:dc:5e:06:22:
85:cf:a1:48:4a:02:04:cf:89:86:93:d1:43:67:54:
75:5e:48:85:09:22:c3:ea:1e:ce:65:f5:c0:6b:01:
19:68:65:75:3b:c5:b6:45:e5:96:31:fc:9e:f5:2a:
c0:cb:a7:90:2d:f1:99:51:3e:60:43:06:b3:36:2f:
bb:d6:07:2c:6d:8b:55:84:2c:93:52:33:32:b8:ac:
01:bf:61:b4:8b:7b:2d:bb:13:3d:6f:b7:db:bd:3c:
fc:cb:d5:d9:3b:6a:33:d9:ec:4b:06:aa:41:59:50:
4c:54:13:48:99:cb:a0:a1:94:b9:10:3e:96:49:48:
be:60:2a:a9:c7:95:ae:b1:f8:28:e4:5a:ec:7b:d0:
c2:de:68:82:a2:e2:60:ca:a0:c4:ef:10:fb:58:c2:
27:bd:49:18:39:c2:0b:b3:7b:46:b2:4e:cd:14:5d:
87:79:8d:eb:69:65:db:bb:bb:f1:fc:59:5e:ac:18:
d6:83:c2:5c:13:3d:e1:22:20:6e:f0:fb:33:38:97:
32:59:09:81:10:5e:32:a2:60:11:2f:24:33:98:ea:
85:43:d2:c0:e5:db:67:a4:04:44:18:fb:b9:7f:6c:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:A5:33:FD:D4:6F:39:B0:F9:6B:CC:32:D8:AA:29:58:DB:F7:15
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c7:d3:27:76:25:00:31:90:d6:3f:8b:fd:99:76:7d:ae:06:
2a:e2:20:3c:57:3f:f2:e6:b5:ec:61:3b:b5:28:33:6f:b9:67:
ef:7e:6e:b5:5b:7f:18:e6:5e:8f:ed:29:61:cd:62:c3:ea:55:
a9:31:fd:a4:d2:de:4e:15:08:ed:aa:78:87:26:88:a1:4d:8b:
90:3d:cf:43:ab:8b:b2:e7:62:5a:68:7b:a8:f5:1a:c5:c7:9e:
0e:2a:d5:a1:2b:a5:e2:79:d5:71:72:9f:9c:6e:4e:27:26:b9:
66:75:98:75:fe:5d:35:ac:d2:12:d3:1a:25:24:8b:69:c8:86:
f2:8f:fc:0a:eb:13:72:1a:52:b6:d8:14:0c:53:d1:1b:2d:c1:
6e:d4:74:2a:d3:66:cf:fb:53:19:36:ac:91:28:c5:97:a3:e8:
1f:4a:dc:34:90:94:ce:2e:a2:10:13:2d:b6:b8:b0:c2:c2:dc:
84:5e:31:49:c4:1a:06:88:39:51:de:ea:b0:a9:61:ca:f9:16:
7b:af:ce:15:12:4b:9a:28:aa:b8:93:e6:63:30:4e:0a:20:d2:
01:48:fb:11:22:f3:f0:63:76:ec:91:3f:49:4f:ba:75:de:69:
ea:5b:89:08:dc:a1:d6:0f:c0:8d:b6:09:7e:fd:30:a7:cf:7a:
fc:fd:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:31:16 2025 by rpki-client