Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: sQDY7QRMOWgT519AK5V6cBNwbzPLLm1zoffHe90Lhxo=
Subject key identifier: 22:3A:6B:6A:F2:29:5D:32:2B:53:97:C6:36:02:A6:07:DD:84:6B:BB
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 01987374695C85879BC827AD7B84E31AC0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 0305
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: 8ZSA1K3QsMDo7Trg0UNAiu+aStbzKwoOchvgR7LGZpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:69:5c:85:87:9b:c8:27:ad:7b:84:e3:1a:c0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=223a6b6af2295d322b5397c63602a607dd846bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:8f:85:a4:97:62:c2:64:51:af:ba:2f:c2:
4f:91:a3:cd:f7:3c:b7:f9:32:b0:8e:b8:40:a1:d5:
bb:be:da:ce:08:8a:d9:e4:69:5d:2d:a5:dd:2f:82:
67:53:79:38:57:54:72:5f:b1:a2:e8:52:e2:6e:31:
19:17:99:f9:49:33:f8:d6:f5:8f:a6:87:ab:d5:82:
c3:ae:3e:02:97:1a:b1:a0:35:13:59:e4:71:2d:13:
fb:e8:35:16:ff:82:93:cc:7d:6c:ea:12:f7:35:eb:
2b:c2:62:74:cb:d2:0a:ca:27:fe:4b:14:5e:5f:44:
8a:ae:e0:59:b6:c4:39:cf:12:68:03:e5:22:44:f7:
67:32:17:de:6d:f6:1f:0f:43:a6:73:b3:59:ae:e2:
a3:50:82:0b:ee:96:eb:c9:ce:77:93:17:66:b5:ca:
5d:ce:ff:66:7c:4e:63:c9:0a:1a:09:19:3c:29:ea:
f1:2d:ec:6c:f6:95:97:2e:57:79:5e:17:32:79:05:
98:b0:c6:1b:6a:b4:cc:36:69:f3:36:11:b7:1e:a2:
29:64:8a:4c:39:cd:aa:25:c9:cc:82:50:4a:af:08:
2b:b4:37:7d:fa:49:f8:36:ff:d3:5e:b9:e7:ca:cd:
9a:e6:b4:50:ac:5a:13:9b:3b:f1:48:13:09:0c:bd:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:6B:6A:F2:29:5D:32:2B:53:97:C6:36:02:A6:07:DD:84:6B:BB
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:60:b6:b0:77:45:87:25:1d:b3:9a:11:52:53:4b:0e:a5:
16:b0:a9:1a:1f:8c:17:40:27:06:80:a7:11:1d:7a:f0:de:0e:
cc:0c:02:28:80:e0:11:d1:30:85:11:b4:bc:ca:7b:44:ac:bb:
83:f7:88:19:63:7d:ae:2e:ad:3a:4f:c0:dc:85:a0:8a:9a:a4:
f9:82:37:21:2c:f3:e9:a5:28:8a:a0:f4:2c:2c:15:7a:64:6c:
e5:30:6c:fb:11:a5:1a:cc:70:c6:8b:0e:47:26:be:6a:ae:b8:
12:54:70:73:f3:12:ab:80:f6:58:06:5b:f3:ae:23:6e:0a:7b:
01:4e:e2:43:db:28:6f:ab:69:a3:98:15:5c:e9:dc:9c:58:d2:
27:eb:df:6d:98:6c:75:5e:6d:96:ae:fe:f7:22:8f:7e:49:d6:
72:e0:7c:a2:8b:10:95:91:14:92:96:69:7c:51:c6:58:43:66:
0a:0c:ab:a7:ff:41:77:00:2e:9a:21:be:62:cc:a2:3c:92:82:
c4:c3:46:7b:fb:10:f3:b9:d3:0a:77:1a:37:e5:e2:d3:d0:cb:
0d:ec:85:02:a3:85:34:f0:7e:72:8f:a3:df:2f:cb:8d:dc:15:
59:38:af:e9:8c:4b:68:53:a4:74:d7:21:b1:cc:22:72:3f:91:
fe:b2:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:01 2025 by rpki-client