Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: sWcOwbOALT1yxjyjk7xahTE2y7XkmYOBb0sciIhJSps=
Subject key identifier: 29:B0:DF:22:DB:69:9A:5D:19:4C:81:5E:56:4D:FD:3E:23:C5:33:E5
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01977865CF3E9F62815BE4E93F912A2D2715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1271
Signing time: Mon 16 Jun 2025 11:00:27 +0000
Manifest this update: Mon 16 Jun 2025 11:00:27 +0000
Manifest next update: Tue 17 Jun 2025 11:00:27 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: IMjm5Q4c4aWWAoIQP3MEPkW4hoIuLFZO6jvx+GTYK9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:cf:3e:9f:62:81:5b:e4:e9:3f:91:2a:2d:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Jun 16 11:00:27 2025 GMT
Not After : Jun 17 11:00:27 2025 GMT
Subject: CN=29b0df22db699a5d194c815e564dfd3e23c533e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:81:41:a7:c0:3b:ff:42:4d:94:b4:f8:06:
9b:8f:38:a7:47:b5:89:62:f9:4d:25:c0:c7:a2:a3:
8b:d6:51:44:98:7c:a6:2e:e7:05:44:fd:e5:d1:a5:
82:f3:df:51:71:4d:00:bc:e4:eb:62:17:f5:73:3e:
f3:82:86:89:09:1f:be:a2:f1:f4:ee:4f:0d:1e:12:
0a:54:57:f9:f9:6d:e0:d5:5b:61:45:76:11:aa:2f:
6d:e8:33:8f:f4:44:74:32:14:55:56:99:af:59:84:
45:cc:cf:8f:3a:4c:99:c8:d1:57:32:f0:77:07:36:
cf:e2:9d:a0:28:b3:a2:05:94:57:60:5e:a8:b5:de:
cd:6c:fa:cd:d4:ae:02:ce:b3:ec:d5:b4:16:ed:6c:
38:c0:c8:f3:e2:80:63:6b:32:04:0f:19:b4:eb:51:
c1:15:32:fc:40:f3:fe:d6:05:67:69:b6:32:3b:97:
b9:6e:35:81:ff:00:b7:f4:97:a8:0e:b5:17:28:82:
74:69:84:fb:11:12:d1:3a:7f:47:9c:a8:db:dd:89:
73:31:d3:fb:36:37:81:ba:c4:57:e9:8e:e0:0b:95:
38:cd:8d:55:1f:b7:0f:a5:3d:17:21:85:de:23:1e:
13:90:11:b8:85:2f:19:71:9a:00:f6:25:cb:89:8f:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:DF:22:DB:69:9A:5D:19:4C:81:5E:56:4D:FD:3E:23:C5:33:E5
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:22:eb:6d:13:83:a3:bd:20:88:cd:88:de:80:2b:54:59:03:
68:9f:ba:76:49:da:f9:93:cd:26:75:fd:76:70:9b:8e:fd:4e:
25:2b:7d:98:38:66:4b:78:8b:3b:73:46:db:e7:3d:ea:93:c8:
ce:28:9d:e8:d5:58:da:c0:64:8e:6d:15:5a:1a:79:d4:06:56:
19:3b:79:03:29:fb:50:43:21:7a:77:bf:54:7d:a6:24:7d:b0:
90:7a:f6:8c:d3:3c:d4:0d:4a:1c:e8:a0:58:fa:91:10:cb:59:
13:64:d7:bc:2d:48:14:71:82:5a:58:2b:27:e7:f2:fd:29:92:
8e:96:09:0e:0f:d2:e8:82:45:88:eb:51:3c:a0:5d:13:fc:d4:
60:a3:4b:ab:0c:d4:1b:0e:67:17:ae:f4:dd:72:80:3b:5e:c6:
9f:03:c1:ea:bd:5b:6b:ba:9e:1c:de:6e:f7:2f:f6:93:8f:65:
62:7c:7d:1a:61:f8:32:e2:7a:85:4a:b3:bd:3a:79:11:17:1c:
3a:01:b2:8d:97:19:3a:e8:0b:56:a9:dc:b6:a6:98:76:a9:30:
f0:80:45:a6:a0:ee:ca:57:d6:79:19:13:cf:8d:e0:c9:ea:51:
9b:45:63:ac:c3:e8:47:45:49:41:57:4c:a7:8a:be:35:e4:a7:
d4:38:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:41 2025 by rpki-client