Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: 6iHo+xpD74CI868LlczoFHJ3aVLv6kAboTlnajC23ZE=
Subject key identifier: 72:A1:11:D3:B1:D1:01:83:E6:3F:E2:50:E2:A3:5D:C9:2A:7B:1D:D4
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0198906BC2AB71D0BC7ECF501B6E7FCC10E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1302
Signing time: Sat 09 Aug 2025 20:00:37 +0000
Manifest this update: Sat 09 Aug 2025 20:00:37 +0000
Manifest next update: Sun 10 Aug 2025 20:00:37 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: ivsn3mBX3ieqGmRU7oQ7Q05+Q2IdR2a95H/JDWLfQkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:c2:ab:71:d0:bc:7e:cf:50:1b:6e:7f:cc:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Aug 9 20:00:37 2025 GMT
Not After : Aug 10 20:00:37 2025 GMT
Subject: CN=72a111d3b1d10183e63fe250e2a35dc92a7b1dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:2c:a7:4e:34:33:57:b7:fb:0b:50:3f:c2:
9e:23:03:3b:20:26:ea:82:de:62:82:2b:1f:81:73:
50:67:7f:c1:0b:17:99:df:7d:cf:7d:56:0d:d1:07:
4b:39:ee:a8:98:f8:38:8c:87:a1:4d:5d:59:4a:40:
25:99:1f:58:5a:78:a5:c9:18:f8:e7:e8:f6:f9:e3:
c9:ee:2f:af:71:fd:af:c1:76:4a:63:cf:db:4b:f4:
e4:e4:49:75:38:5b:84:af:06:d8:88:4f:e9:9a:9a:
1e:0a:06:bc:f1:c4:f4:f0:18:b9:ad:35:b3:58:49:
f8:78:a8:32:87:e7:93:5e:9f:4e:85:b2:e9:30:87:
67:00:0e:27:1c:67:cd:eb:07:a9:26:41:63:ec:90:
34:8b:19:54:ca:25:49:c3:d6:2e:a3:bd:37:d1:6f:
d2:00:b6:ea:c7:5e:42:c7:bd:1c:33:34:04:53:37:
c6:bc:d5:b8:fc:1f:98:12:fa:23:3b:72:26:82:ab:
e1:c2:8a:5e:00:38:66:8d:0a:39:6e:92:d2:44:19:
dd:f0:b9:51:9f:df:9e:76:50:79:72:63:3e:51:48:
60:60:c8:a6:b3:19:6a:fe:79:34:61:7c:eb:fb:7f:
08:09:e5:fa:f2:6a:40:1a:f6:0e:96:25:29:3a:83:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:11:D3:B1:D1:01:83:E6:3F:E2:50:E2:A3:5D:C9:2A:7B:1D:D4
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f7:26:6d:25:78:7f:74:50:7d:f7:01:ef:71:cd:88:ff:63:
f5:e7:dd:7c:09:d9:ea:8c:2b:b2:99:04:4a:95:0b:42:e5:f3:
8c:5d:fe:3e:44:de:c2:4f:a0:5d:9e:ec:c8:d4:14:7e:19:b8:
b4:66:f6:26:10:20:9b:00:24:f4:73:09:00:01:b5:a2:69:7e:
41:8e:3e:b1:c6:aa:2d:3f:8b:68:e7:e5:f3:f1:14:34:0b:4b:
99:4b:9a:a0:d9:70:87:32:54:a6:40:11:e8:ff:ff:d5:58:18:
38:3d:8e:cd:77:05:9e:cf:48:43:a9:bd:6e:0a:ef:bb:63:45:
d8:de:66:42:95:92:fe:41:12:83:27:27:37:75:75:11:8a:07:
67:3d:9e:4e:c0:3f:5c:6f:c4:70:a7:e0:00:5c:85:54:5b:22:
6c:b3:61:ee:19:14:71:99:26:b0:eb:50:c1:dc:05:b7:70:7b:
97:38:1c:c0:58:10:d6:8e:4c:05:07:6a:ad:a6:f8:7b:e3:c0:
e6:94:f9:6b:2a:be:e4:b4:65:7b:c2:5e:5f:91:91:91:b1:3c:
f6:b9:18:a1:01:a4:27:f9:0b:61:cb:9c:ad:ce:6a:47:e5:5c:
4b:54:53:db:e3:dd:ec:fc:95:3e:8a:30:56:c1:bc:a3:fd:17:
92:46:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:21 2025 by rpki-client