Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: Q3xc7CCsXK8j6qRnwr7I1e7WIpDCacRSrSZtMQYhEww=
Subject key identifier: 99:2D:92:A3:2F:EA:9C:4B:E8:3D:D5:42:21:33:E7:B2:63:A4:31:BE
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 019874BDF6FD823187A646A2E34E3941A94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: BA
Signing time: Mon 04 Aug 2025 11:01:03 +0000
Manifest this update: Mon 04 Aug 2025 11:01:03 +0000
Manifest next update: Tue 05 Aug 2025 11:01:03 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: XIzLxCM/bSa/I7PVIgxcfezF35kgAzdaAWMeImjEx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:f6:fd:82:31:87:a6:46:a2:e3:4e:39:41:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Aug 4 11:01:03 2025 GMT
Not After : Aug 5 11:01:03 2025 GMT
Subject: CN=992d92a32fea9c4be83dd5422133e7b263a431be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:9e:70:7c:81:f5:6c:2e:76:3f:9f:ec:f7:
ad:f7:62:4c:c9:a1:5b:d6:f3:dc:df:c9:8f:93:8a:
5a:45:7c:54:97:56:4a:5c:b9:ad:00:09:30:40:8f:
50:37:39:26:9e:72:63:cb:6a:3d:7d:f3:f8:4c:93:
20:21:88:28:67:24:c9:6b:1d:71:d6:75:8e:c4:5c:
c4:0a:90:29:cd:94:0e:84:7e:c2:b0:80:64:bb:58:
8e:82:5c:4f:28:9b:3a:e3:0a:d8:7e:04:77:2e:d4:
b5:16:8a:b3:ce:f1:8e:82:56:5d:6c:76:c7:8b:fe:
d6:75:a8:9c:00:b3:99:aa:b1:b7:e7:47:e4:75:aa:
42:7c:fb:4b:60:86:70:3f:f8:1f:63:2f:e7:36:ec:
e0:32:f4:1c:5e:1f:d5:b5:22:5d:f6:90:8b:12:2a:
c6:fd:16:d5:9f:e4:9f:f5:a9:b0:36:4d:b8:b4:f5:
7e:59:51:18:dc:60:77:78:a4:06:e1:d2:51:58:d6:
f5:06:bb:9f:3b:ad:ab:ee:b3:9a:1a:1f:be:2e:7a:
30:5d:f2:4e:4c:26:a3:1b:0c:97:9b:db:5b:9d:af:
22:81:a8:f5:4a:ca:94:db:32:9f:44:68:f8:ba:0d:
ad:e0:9c:92:fa:e4:0d:2f:7c:20:0b:61:31:bb:6b:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:92:A3:2F:EA:9C:4B:E8:3D:D5:42:21:33:E7:B2:63:A4:31:BE
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:12:03:6d:38:fc:2d:b7:41:d6:bd:50:34:31:67:dc:70:
6e:03:eb:a4:11:cf:46:7f:28:18:53:0c:27:8b:e9:b2:32:b4:
d1:69:5e:f9:72:57:a9:a9:ab:41:9e:ca:80:41:5f:a6:a5:b6:
a0:1d:f3:b6:b4:7c:d8:96:93:8b:f6:a1:24:62:2b:19:e7:7c:
89:fb:7c:98:98:45:dc:35:83:d6:93:95:dc:0f:13:5a:36:aa:
c5:e4:13:b2:4f:b9:b3:b2:81:8f:57:fa:a3:1a:e0:86:65:0d:
47:49:29:2e:ba:84:f3:39:35:da:00:98:20:50:1b:17:61:9a:
e6:a7:3c:9f:d8:f6:62:87:ef:05:90:f6:9b:63:ec:73:3c:81:
0b:fb:77:05:17:3e:04:c7:3f:1f:97:54:cb:3f:af:ba:dd:c6:
b5:9e:7d:19:60:c8:2b:ba:6e:65:14:7e:ef:a4:7f:b9:27:19:
f2:7d:9a:8e:c2:d1:01:84:c6:a2:2a:b8:02:42:96:8d:0b:86:
e3:3c:c6:2a:d0:0c:99:f7:c4:34:9c:b9:94:55:98:8e:23:26:
4b:87:b7:aa:b4:17:b5:f6:22:c2:2a:0e:ef:2f:6f:f5:c8:20:
7d:41:a0:f6:83:d1:cd:90:2e:5b:3b:99:02:26:72:ef:a5:9c:
71:d3:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:27 2025 by rpki-client