Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: VvNz/cLa7L4rbZ7Vhe6TodHjVvMzbecVwj2Zd1bCEuI=
Subject key identifier: 92:E5:B3:14:31:F0:FD:B7:AF:9F:DD:AC:6D:41:66:06:7D:E3:18:E0
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019872CF3C97789DE012A5B4DC0A2BDF027E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 07DE
Signing time: Mon 04 Aug 2025 02:00:40 +0000
Manifest this update: Mon 04 Aug 2025 02:00:40 +0000
Manifest next update: Tue 05 Aug 2025 02:00:40 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: Q2viACVA21cAESrC5JrlY/QvdtJKvNhI9M+ZyViDyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3c:97:78:9d:e0:12:a5:b4:dc:0a:2b:df:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Aug 4 02:00:40 2025 GMT
Not After : Aug 5 02:00:40 2025 GMT
Subject: CN=92e5b31431f0fdb7af9fddac6d4166067de318e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:5c:0d:a2:6f:e0:37:47:12:5c:fc:12:6e:
a3:b3:c9:27:99:11:34:89:b1:54:d1:e3:0f:40:65:
84:29:25:4c:93:ee:70:01:3d:09:4c:58:e1:9e:14:
c0:1e:7d:39:cf:b1:c7:5e:b1:c0:90:b1:af:18:98:
96:91:26:e4:5e:64:43:35:c8:e9:31:74:1e:a4:45:
8d:d2:d5:ef:70:79:51:f9:c6:ed:61:ae:34:ac:85:
cc:90:d8:9a:b4:b2:5f:54:4a:3d:80:5a:73:b1:df:
12:55:5f:1f:d7:7b:d4:9e:d3:30:ac:ce:b9:70:6d:
03:5c:f3:67:64:02:27:1e:7f:c5:e0:89:37:9e:00:
65:0c:e0:ce:94:f5:a7:b6:00:f0:15:4c:83:cf:94:
56:5b:2b:12:b9:ba:ff:30:af:dd:d1:ea:6b:e0:a3:
ae:f1:d9:88:8c:33:6f:d4:8b:0f:8a:d1:7a:b7:a9:
50:a6:b4:3c:e7:35:f0:03:b2:9a:a0:93:1d:21:97:
34:58:45:14:5d:03:dd:43:10:c1:8a:46:10:26:74:
f4:e7:42:04:2e:bf:91:94:b0:9c:4e:75:35:b5:f4:
f1:83:ec:cf:0b:93:32:4d:f3:18:06:5a:5e:a0:35:
f3:99:48:52:13:e6:40:ae:21:c6:0c:13:8f:ba:f6:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:B3:14:31:F0:FD:B7:AF:9F:DD:AC:6D:41:66:06:7D:E3:18:E0
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:5d:28:c3:87:c8:52:21:88:25:c1:6e:40:22:27:a9:fc:
97:3a:2f:5d:3d:8c:88:b5:8b:d9:37:0f:9f:90:f1:d2:0b:54:
a1:02:e9:e5:06:11:82:cc:7a:e5:e2:78:d7:7b:3b:8c:22:56:
d2:ab:68:98:57:e3:95:7b:e0:cb:c3:e7:96:f3:0f:bb:cc:13:
d7:43:25:c0:12:4e:70:55:09:68:c3:6b:46:02:0d:8a:56:de:
92:b9:e6:f2:d3:84:18:73:ef:00:76:2d:36:83:b5:23:38:95:
b1:1e:b6:a1:68:65:98:0c:52:c3:6a:f9:d4:d9:3c:d4:59:18:
c3:f4:ba:cb:cd:12:fd:60:d4:e0:ce:68:bd:28:cf:22:95:2f:
57:8f:33:d7:4f:d9:c6:38:f6:6f:c6:1b:93:26:b8:ce:f6:fe:
2f:95:e4:34:0c:a1:13:46:44:50:f4:b0:5e:62:f6:e5:81:10:
ec:42:6f:37:29:f7:fd:9c:c6:c5:66:61:cf:32:a1:d4:1a:9c:
2a:26:81:d3:c0:71:7b:e6:44:21:9e:05:67:3f:10:1e:35:1d:
73:bd:de:7b:c0:6d:1b:23:79:d7:7d:17:6f:87:37:1b:11:44:
82:66:b7:7a:48:50:51:87:c8:33:ad:08:ce:3b:1a:00:e4:8a:
e7:5a:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:51 2025 by rpki-client