Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: 6r5lRh95u8Uxz4WT5vJibJhtnwdbUXX7Ll/QFCJS68E=
Subject key identifier: 38:52:3E:73:55:D5:3C:CC:E3:F8:C1:B2:D9:6A:AE:27:AB:24:D5:15
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 01977A8B04F3386741AEBC30C9B568729557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 21:00:20 +0000
Manifest this update: Mon 16 Jun 2025 21:00:20 +0000
Manifest next update: Tue 17 Jun 2025 21:00:20 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: 0EmCRKqQzEymzJC0XmRfzZW5C8pwxspWTI2LJqP3NKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:04:f3:38:67:41:ae:bc:30:c9:b5:68:72:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Jun 16 21:00:20 2025 GMT
Not After : Jun 17 21:00:20 2025 GMT
Subject: CN=38523e7355d53ccce3f8c1b2d96aae27ab24d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:d1:60:8b:3e:5c:d0:65:f8:8b:6f:1d:d9:
80:90:8a:c6:15:94:d8:b2:91:36:95:ad:4d:12:d2:
a3:6a:fa:51:df:e7:12:34:fd:ca:41:74:f2:96:11:
6f:c4:0f:a9:b5:27:4f:51:04:c0:68:d0:2f:c0:c4:
5d:1c:ea:5d:a9:4e:6b:c6:e9:a4:58:e5:61:95:1e:
8c:eb:16:30:ff:39:c1:d1:40:96:e7:9b:dd:e9:ad:
70:80:2f:06:a2:62:1a:12:f5:7d:49:49:74:a3:0f:
98:da:b6:22:6a:95:7a:0d:f5:73:d5:8c:90:d0:00:
90:0f:a4:bc:4a:b7:ee:c3:87:1c:f2:2a:a0:8c:c0:
a4:d0:1e:1e:a1:10:0e:8e:db:7d:14:20:19:fa:7c:
6e:e4:42:ce:68:0a:18:ef:d5:e3:a5:2d:e0:eb:b5:
91:b1:cb:f4:a7:ce:cf:96:4a:b8:95:40:de:60:75:
b5:28:15:69:07:df:a6:5f:f4:f5:a2:03:45:38:63:
62:1b:dc:ef:88:9c:e8:d7:be:6d:10:19:bb:b5:8e:
c1:1a:be:da:c1:55:aa:52:d0:2e:28:75:cc:43:b0:
d0:f9:68:b3:d2:90:a8:d3:15:96:55:28:75:fe:df:
0b:c9:19:ba:7c:5e:be:a3:56:b0:7a:d2:a8:b6:c5:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:3E:73:55:D5:3C:CC:E3:F8:C1:B2:D9:6A:AE:27:AB:24:D5:15
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:31:4a:e9:36:ca:f3:83:44:a7:81:f6:52:92:41:8d:1d:32:
d0:6b:44:c5:89:8b:c8:88:dd:4e:92:74:7d:e3:be:d3:64:86:
70:ef:a9:bd:b1:9e:73:bd:e4:41:75:97:7d:7c:0c:b3:d4:17:
c2:5d:cf:b4:8b:fd:e4:00:4b:4d:3f:86:80:9b:e4:14:14:1e:
1d:88:1a:50:4f:40:8a:cc:f4:a2:bf:8d:6b:67:44:5e:ac:91:
b1:59:26:83:a0:2a:51:e5:5e:84:f6:55:61:79:0a:92:e3:51:
c0:73:33:17:37:70:56:9e:13:05:b7:8e:9e:3e:b0:09:0d:11:
e1:42:ac:9c:9a:e1:98:59:b1:e0:12:14:4c:37:60:94:6d:8b:
61:09:07:5b:91:61:51:fc:b9:e7:3d:c5:55:4d:02:dd:f7:dd:
af:22:c9:58:45:bf:87:88:f7:dc:84:84:78:f3:26:9d:a9:1a:
ca:78:6e:b7:a1:4c:84:dd:c5:78:f4:03:0b:d5:9c:30:da:af:
8a:ef:97:9e:8a:ea:cc:05:86:58:73:18:2c:0a:23:cc:21:8c:
b7:ab:dd:e4:03:c0:84:7b:d3:e3:46:18:7d:a6:2a:e9:b6:0e:
b0:df:56:d8:82:5b:0f:18:44:ca:53:94:36:39:ca:cb:f1:fc:
fd:1f:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:39:43 2025 by rpki-client