Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: nhcpipy0Ta05fHEoPs9h838y8tF2lAI7ZOUxWEDmNeg=
Subject key identifier: 40:E4:E6:AB:16:30:FF:60:E1:7F:05:2C:BA:1C:A5:EE:AA:1A:DB:27
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01987B2DEE588446166FF1E279E125C492CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 119C
Signing time: Tue 05 Aug 2025 17:01:04 +0000
Manifest this update: Tue 05 Aug 2025 17:01:04 +0000
Manifest next update: Wed 06 Aug 2025 17:01:04 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: uVjEGlObesN1fp76+MHxBY4CrZJNqdvuMGryKvB7uho=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:ee:58:84:46:16:6f:f1:e2:79:e1:25:c4:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Aug 5 17:01:04 2025 GMT
Not After : Aug 6 17:01:04 2025 GMT
Subject: CN=40e4e6ab1630ff60e17f052cba1ca5eeaa1adb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:72:f6:6d:7a:10:46:3b:c7:cd:51:a5:ae:
ef:78:69:d9:6e:99:2e:e2:43:a1:97:2f:34:e9:a7:
b9:3d:68:69:96:0a:f4:3d:99:0e:55:83:fd:b9:b7:
9d:6b:3d:6e:ef:12:80:29:e2:ff:7f:1b:6c:b6:3b:
58:59:ea:9c:63:52:ff:d9:da:54:0e:73:21:f2:03:
84:30:7d:aa:a6:56:d2:64:2b:db:5b:a5:c8:cc:9b:
2b:6d:d9:bc:85:43:b3:7c:05:66:3b:51:c5:b9:4c:
53:25:5b:76:0e:f4:5d:48:b7:1e:ea:7f:d7:76:6e:
09:52:a9:08:9f:23:9d:f6:da:8d:c7:52:84:93:9b:
4d:e2:07:82:1f:6a:2a:2d:f2:56:46:36:63:c4:8d:
73:6b:35:b0:60:86:b3:5c:d9:72:d3:56:f3:f5:ca:
58:13:78:a2:9a:fe:d1:72:b2:d2:04:ac:6f:36:61:
22:80:ec:5c:86:96:06:c0:42:18:f9:0f:b3:0f:71:
04:42:9b:6a:0a:e2:cf:3a:22:6d:fe:50:b4:5e:2c:
94:8a:7b:cb:d4:1f:fa:90:d1:a8:11:89:4d:38:a9:
fd:bf:69:70:bc:a5:ac:ed:1a:5e:7f:1c:61:5f:fe:
49:0d:c0:dc:01:57:20:e7:d5:bc:5e:70:6a:1a:e4:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:E6:AB:16:30:FF:60:E1:7F:05:2C:BA:1C:A5:EE:AA:1A:DB:27
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:46:f2:5c:2c:d0:08:64:b5:87:d6:bb:41:dd:8b:ba:c9:29:
d0:80:db:95:29:49:4b:39:dc:1b:85:8d:16:62:0f:da:8c:86:
42:83:f6:ba:6b:92:df:e3:0c:1d:c8:26:8c:e3:cc:3d:19:fc:
32:e0:0d:98:8d:f5:3f:5a:99:b2:23:0f:fa:44:03:62:94:07:
fe:d1:19:75:14:f5:e7:eb:0f:ac:d3:d6:5a:45:58:a6:b3:ae:
b6:14:1c:83:68:70:42:fd:4f:05:c7:26:62:8d:52:a5:92:2a:
98:c0:b7:bc:85:ea:d6:e5:7a:2d:6b:43:f8:d7:dd:21:e4:49:
3f:50:c5:64:33:f9:0a:77:85:f0:76:10:44:50:3e:ad:54:16:
2b:44:e1:a5:8e:e6:99:5c:26:6c:8c:ae:3b:3e:01:ef:65:63:
b2:d5:7b:97:81:51:07:b5:5e:00:1a:51:0b:42:9b:bd:86:59:
0c:f7:69:aa:0d:04:d1:4f:df:82:ee:54:b3:4c:ab:a2:99:6f:
d7:1f:5e:fa:50:b6:ac:66:d5:05:e7:26:86:98:5f:83:c7:05:
a1:b3:d8:28:8a:8a:60:b9:f6:78:f2:61:8c:2e:65:51:c5:89:
87:23:f1:af:7f:58:b4:1e:e4:43:52:41:48:86:2c:8d:25:61:
dd:c9:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:25 2025 by rpki-client