Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: e4PqmbmuFLFEenoORaYgOvlfJJph0IX6IbVtXNyO6HE=
Subject key identifier: 2D:98:6E:22:BA:5C:7A:0C:4C:E0:0D:F6:20:13:B1:83:F8:AC:79:C8
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 01976D3D94A0E6EEDF1AB8EB762DBF0131A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:00:41 +0000
Manifest this update: Sat 14 Jun 2025 07:00:41 +0000
Manifest next update: Sun 15 Jun 2025 07:00:41 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: kddUdTOTIZr34ehDNwOLl8JGQveiLMcfiZBU2coR5kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:94:a0:e6:ee:df:1a:b8:eb:76:2d:bf:01:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Jun 14 07:00:41 2025 GMT
Not After : Jun 15 07:00:41 2025 GMT
Subject: CN=2d986e22ba5c7a0c4ce00df62013b183f8ac79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:4d:9c:30:c7:70:52:8b:a0:5d:90:d2:95:
c9:93:e5:db:d0:fb:35:db:60:ce:16:ed:70:60:95:
72:76:95:a4:31:c3:ec:ac:23:fa:1a:db:e7:42:80:
09:ac:0d:6b:4e:15:c4:60:5d:a4:6b:16:c4:ab:42:
1c:78:30:18:64:24:1a:90:e1:01:db:03:40:a6:4e:
57:37:8f:ae:ec:c4:35:bd:88:2c:18:f3:7b:dd:64:
0a:02:8e:be:03:0b:09:7b:d0:31:ce:df:bd:10:41:
ad:f2:a3:38:80:f9:68:bd:a8:b9:41:79:de:b7:b2:
74:c7:62:c4:8c:d4:11:fe:58:59:fc:49:16:a5:7d:
1e:ff:93:93:49:7d:56:da:4f:3f:52:5f:17:6c:25:
1a:4c:7d:87:9c:ef:81:0f:4a:5a:5e:af:0a:5b:e2:
a6:9d:81:35:41:2d:89:fd:2a:bb:a8:2a:45:64:0f:
26:59:3b:63:da:08:23:c2:a7:a4:f3:94:c1:2d:0c:
bb:08:6e:67:cd:22:83:77:8b:7a:c9:89:d0:f6:6d:
48:35:d5:3c:91:e5:ce:b2:20:25:d4:e0:5f:8d:4d:
58:17:96:6c:b7:af:dd:ae:82:35:ad:a0:c7:63:f2:
d9:5e:9e:38:b9:d6:ff:c0:7b:da:19:68:2d:a5:67:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:6E:22:BA:5C:7A:0C:4C:E0:0D:F6:20:13:B1:83:F8:AC:79:C8
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b5:bd:d3:5c:e7:24:61:a4:6d:6f:4a:cc:86:a0:82:a2:c5:
92:14:fb:eb:f4:36:ad:51:f3:e2:2b:50:80:5a:38:d6:c6:a1:
74:19:7f:db:60:f3:bb:2a:d0:b1:5f:fb:3b:5b:b9:07:45:60:
56:a2:f8:fa:d0:2a:3d:1d:d1:5c:05:22:be:a5:59:e9:b5:ef:
74:a9:82:2c:0b:df:fd:bd:4d:f9:37:92:f9:66:f3:63:ad:3a:
60:fd:4b:74:cf:0f:8d:a5:f5:c4:9d:18:4f:b8:ec:e6:31:29:
e6:58:a8:aa:49:c8:77:a7:47:0c:79:35:f7:89:44:ac:a3:45:
36:d8:3e:f8:63:b5:f4:df:46:ac:d8:7f:97:50:ec:8f:93:d4:
01:05:01:45:c7:a5:b0:38:2b:2c:e9:55:2a:bb:75:ba:6a:7d:
f0:8f:cc:9f:ec:b8:a8:84:5f:1e:c8:6c:83:a3:48:4f:c8:4c:
13:7c:77:62:46:ec:fc:3d:eb:d0:3d:e7:43:c2:7d:13:4a:40:
47:ad:13:e1:0a:69:c3:24:8a:fa:ee:e2:e8:98:7e:e6:ce:0d:
ca:16:ef:19:ca:f5:db:ed:41:0d:74:a1:9f:f8:6c:09:e3:cf:
23:48:a8:7b:16:40:e4:bd:44:68:38:d7:62:ca:8a:61:c6:03:
d0:d8:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:24 2025 by rpki-client