Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: rYBgMaGpaAXdsNvwuRWR0zFLr+Q3MTZpV0HFZQ8hWUs=
Subject key identifier: 9F:A4:65:3F:9C:78:8F:9D:ED:35:6F:CD:E7:EF:15:67:E0:6C:A3:60
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 019776776A2041F0F734C8AFB142576E828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 07E6
Signing time: Mon 16 Jun 2025 02:00:26 +0000
Manifest this update: Mon 16 Jun 2025 02:00:26 +0000
Manifest next update: Tue 17 Jun 2025 02:00:26 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: rydzNWIxeA0KUnAORg2WFcqUmBoLdzgTN+VWZOPVVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:6a:20:41:f0:f7:34:c8:af:b1:42:57:6e:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Jun 16 02:00:26 2025 GMT
Not After : Jun 17 02:00:26 2025 GMT
Subject: CN=9fa4653f9c788f9ded356fcde7ef1567e06ca360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:aa:bf:f5:2a:68:4a:0a:07:91:74:da:a5:
a9:c0:fb:cc:ba:e7:74:38:d2:1e:77:47:ed:5b:0d:
3c:d4:d3:76:cf:c8:ef:9c:5a:c0:f3:99:4c:6f:23:
81:2d:60:5a:5e:62:a6:b6:8a:8a:7a:8c:bb:10:c4:
07:08:e8:76:b9:08:57:21:dc:3f:11:9e:c8:57:6a:
f0:e1:ee:f6:17:1b:ae:f5:9c:5b:da:ee:70:bd:8e:
4f:33:ea:3a:78:f5:9f:bc:a6:35:c8:30:d4:a7:af:
5f:b3:e5:6d:35:ef:c2:06:86:09:82:c2:7b:da:4d:
a6:0d:b4:4c:6a:f2:e0:25:24:f2:83:5b:11:96:1c:
d4:11:fa:8f:87:d2:89:c7:4f:3d:04:83:6f:82:e2:
a6:79:17:c6:4c:bc:92:a7:55:08:b3:48:b0:7a:9d:
24:ea:57:f2:ac:81:91:ac:b1:a7:b6:b7:00:e4:c1:
67:30:4d:6e:7f:00:eb:c4:af:c8:28:21:ab:64:74:
3e:1c:4f:ca:89:50:fa:41:41:01:25:f6:fa:72:60:
44:05:bb:7c:71:b4:2c:c0:9a:fe:25:ea:4c:57:a4:
01:16:62:05:a2:85:9e:a7:0a:4e:5f:63:19:d3:76:
b3:02:6e:a8:f9:d4:d5:dc:ba:c4:d9:c1:4b:8f:03:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:65:3F:9C:78:8F:9D:ED:35:6F:CD:E7:EF:15:67:E0:6C:A3:60
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bc:14:23:0e:22:ad:86:f6:50:30:07:97:2f:30:c1:eb:aa:
7e:77:0d:9c:c9:62:90:19:cd:d4:b0:ac:12:9b:32:d2:fb:96:
e6:98:bb:c4:58:57:51:9e:19:13:82:c9:3a:3c:70:99:b0:5a:
56:b7:12:2d:a2:3d:32:f0:59:c4:b7:2c:e0:bb:07:65:a5:9f:
59:90:e7:4a:ae:13:2c:18:fc:58:2c:71:8b:e1:f9:ca:87:6d:
7d:64:ac:26:fd:4e:3d:f3:e2:6e:b5:e4:9d:4f:fa:53:dd:15:
62:1e:ac:40:0e:5c:fa:bb:c3:ba:ee:74:9c:2d:fc:02:a2:77:
10:06:7f:b5:bd:8f:09:1b:e7:47:3a:a3:0a:a7:1d:47:52:2b:
c8:37:e4:c8:cc:99:5a:03:ce:f9:db:c2:ce:6a:cb:5c:30:18:
bc:2a:78:9e:82:eb:00:23:9c:1b:ae:32:57:7d:f4:05:1a:cb:
62:8d:22:54:30:49:95:dc:e1:0c:b5:54:8c:1a:0e:a4:17:29:
6a:d7:e2:bf:b2:ac:3b:14:45:80:0c:50:27:ea:b9:d6:c0:ce:
e1:25:0f:73:d8:d7:fc:ad:c8:95:32:85:85:45:cc:ec:14:ea:
41:e4:62:35:29:4b:e8:60:be:5f:03:d7:b7:bc:1f:68:1d:03:
b7:62:2a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2d2ogQfD3NMivsUJXboKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk
ZjFiMDUwHhcNMjUwNjE2MDIwMDI2WhcNMjUwNjE3MDIwMDI2WjAzMTEwLwYDVQQD
Eyg5ZmE0NjUzZjljNzg4ZjlkZWQzNTZmY2RlN2VmMTU2N2UwNmNhMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttOqv/UqaEoKB5F02qWpwPvMuud0
ONIed0ftWw081NN2z8jvnFrA85lMbyOBLWBaXmKmtoqKeoy7EMQHCOh2uQhXIdw/
EZ7IV2rw4e72Fxuu9Zxb2u5wvY5PM+o6ePWfvKY1yDDUp69fs+VtNe/CBoYJgsJ7
2k2mDbRMavLgJSTyg1sRlhzUEfqPh9KJx089BINvguKmeRfGTLySp1UIs0iwep0k
6lfyrIGRrLGntrcA5MFnME1ufwDrxK/IKCGrZHQ+HE/KiVD6QUEBJfb6cmBEBbt8
cbQswJr+JepMV6QBFmIFooWepwpOX2MZ03azAm6o+dTV3LrE2cFLjwO2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+kZT+ceI+d7TVvzefvFWfgbKNgMB8GA1UdIwQY
MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt
OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0
LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrwUIw4i
rYb2UDAHly8wweuqfncNnMlikBnN1LCsEpsy0vuW5pi7xFhXUZ4ZE4LJOjxwmbBa
VrcSLaI9MvBZxLcs4LsHZaWfWZDnSq4TLBj8WCxxi+H5yodtfWSsJv1OPfPibrXk
nU/6U90VYh6sQA5c+rvDuu50nC38AqJ3EAZ/tb2PCRvnRzqjCqcdR1IryDfkyMyZ
WgPO+dvCzmrLXDAYvCp4noLrACOcG64yV330BRrLYo0iVDBJldzhDLVUjBoOpBcp
atfiv7KsOxRFgAxQJ+q51sDO4SUPc9jX/K3IlTKFhUXM7BTqQeRiNSlL6GC+XwPX
t7wfaB0Dt2IqiA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:44:58 2025 by rpki-client