Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: OTX3KGnXLMv6jR2KT9QzRnZcquamQKCTSXrKU/359k8=
Subject key identifier: 2C:FB:63:D4:99:8B:25:55:DD:F0:76:86:4F:28:08:10:33:94:CB:4B
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019882B0FE04AD598C931A162BA8FE62A309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1628
Signing time: Thu 07 Aug 2025 04:01:34 +0000
Manifest this update: Thu 07 Aug 2025 04:01:34 +0000
Manifest next update: Fri 08 Aug 2025 04:01:34 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: Ni1z9DAdOarrGwG9v2PHteqjHM0GzY9/8XTsFHh54iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:fe:04:ad:59:8c:93:1a:16:2b:a8:fe:62:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Aug 7 04:01:34 2025 GMT
Not After : Aug 8 04:01:34 2025 GMT
Subject: CN=2cfb63d4998b2555ddf076864f2808103394cb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:5b:e1:b2:d7:b5:12:ef:15:5f:f8:51:08:
80:3a:6e:85:51:29:23:28:bd:b1:bf:7d:ae:1f:24:
2f:4f:fd:fd:ff:03:c4:0b:f8:22:38:f7:d0:77:3b:
25:b9:86:03:d8:5f:75:ec:3e:29:51:e5:b4:9b:1a:
f6:1f:ec:1c:13:d2:e7:81:97:46:1d:d4:41:e4:ab:
93:7b:ae:85:f0:85:8b:b8:e4:01:10:ac:cc:4d:3b:
59:7b:45:7d:96:5c:86:7f:f1:0b:bb:32:11:48:bb:
2f:52:02:3b:2b:70:88:82:67:4b:7a:50:ed:a5:4a:
16:29:96:56:fa:12:88:02:35:f8:c2:72:b7:1e:49:
6a:40:83:6f:eb:48:bc:95:4b:44:13:df:04:44:7a:
e7:ee:4d:a0:0f:ca:26:c4:6f:2b:ad:79:2e:db:3d:
74:97:a0:c6:5e:cb:bf:c5:ca:b5:29:04:03:c8:f0:
fc:b4:d8:bb:96:29:eb:dd:b4:6c:94:df:e3:2e:c5:
c2:c8:2b:4a:4b:09:e1:e3:93:3e:4c:66:f4:17:c3:
1b:47:dc:d4:46:32:19:9b:60:21:b2:22:ec:f9:34:
c8:98:45:7b:01:40:8b:cd:e1:d6:88:67:ae:a2:32:
54:e7:1b:69:04:f5:63:68:dd:14:c8:6a:8b:38:85:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:63:D4:99:8B:25:55:DD:F0:76:86:4F:28:08:10:33:94:CB:4B
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:ba:2b:61:1f:c2:75:6d:9b:24:7c:4c:97:c5:30:b1:4a:
8e:ba:bc:27:b5:b4:39:cb:7b:36:40:b9:1b:95:88:a4:3d:df:
26:4f:0f:3a:a0:2d:2e:37:05:1d:b9:90:a2:40:98:53:c0:88:
fe:0c:19:21:f9:97:7a:c6:85:a0:2e:ae:ed:5f:e3:d3:ee:c3:
17:a0:b7:ca:09:3e:64:c3:47:fc:42:3f:ed:3d:05:57:72:aa:
5c:18:b4:4a:03:a6:ed:25:a4:fd:fa:a6:64:23:7e:43:bf:d8:
39:42:0a:6f:48:05:24:10:59:8f:42:aa:29:4d:90:da:85:8e:
21:5f:c7:10:4f:04:9b:d3:f5:35:60:69:75:40:cb:13:f4:a2:
08:08:17:0d:29:7a:bb:a2:62:fd:44:85:f9:df:80:6d:41:5b:
3b:2a:d1:45:65:c5:4a:5d:e8:29:6c:ab:6d:41:13:6c:be:35:
07:e6:35:38:c2:fe:ea:bf:f9:bc:02:f9:3a:21:03:28:82:59:
7c:c2:96:bf:31:8c:d4:2f:bc:09:c1:19:4e:23:4f:4b:02:05:
bc:c6:2e:47:f6:51:e0:12:fd:61:89:45:0d:fa:81:d9:35:60:
82:64:6e:5d:22:63:fe:d9:01:ec:c9:05:5e:a2:40:75:0c:9f:
31:22:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:05 2025 by rpki-client