Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: SIUnfdRNLlWHE/v1E4kZXPvOh6GBYgduVMweVTjg3Hw=
Subject key identifier: 06:08:5E:A0:05:B2:B6:6B:89:7C:76:96:94:CE:8E:61:72:F9:5A:2D
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0197CE0447C76ADC20F05C8331F70F3D7D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 02:01:16 +0000
Manifest this update: Thu 03 Jul 2025 02:01:16 +0000
Manifest next update: Fri 04 Jul 2025 02:01:16 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: rhVx3nAQaGqBZ7p5lOc/uWpVH8J+kPYf94ZGYOFfivI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:04:47:c7:6a:dc:20:f0:5c:83:31:f7:0f:3d:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jul 3 02:01:16 2025 GMT
Not After : Jul 4 02:01:16 2025 GMT
Subject: CN=06085ea005b2b66b897c769694ce8e6172f95a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:07:5c:00:d9:30:27:24:2e:c7:2d:ac:ab:
b0:37:73:05:5e:8e:d3:9a:7c:4c:e2:0f:11:7a:b0:
01:a6:c6:8e:31:9b:82:8f:b0:c0:56:b4:cb:90:6c:
4b:db:a4:24:1b:5e:f9:4a:10:dd:6e:16:7a:95:d0:
e1:70:71:66:59:53:0e:4d:a7:fb:b2:7b:77:b4:e1:
d1:1e:54:1e:ab:8b:5d:fa:7d:08:65:5a:79:c9:55:
0b:07:0b:47:20:06:0f:a6:b6:59:ed:21:3c:b1:87:
68:ac:2f:7c:12:00:75:1e:5b:44:e8:33:f7:c9:a8:
44:9f:29:f9:d5:b1:e3:43:d5:97:86:28:b9:59:64:
fa:d8:24:a1:94:14:5d:95:e1:7e:47:98:46:7e:2e:
90:05:1d:93:cf:14:e2:26:91:9d:bc:34:cb:9e:66:
8c:b1:3b:f4:c0:62:75:e8:16:bc:e7:0d:30:09:ec:
37:30:d5:58:6c:b4:e2:d5:b3:5d:e6:ee:44:95:f7:
a8:d8:01:18:f6:ba:cc:e5:f9:ff:41:b5:dd:2b:70:
e7:86:09:83:fe:77:56:aa:15:24:d5:d4:c4:d9:04:
b6:fa:db:d9:5d:30:95:f8:7f:e4:8c:4f:f8:52:5a:
18:ae:06:14:96:e9:7d:ac:04:e5:a1:82:aa:65:ae:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:5E:A0:05:B2:B6:6B:89:7C:76:96:94:CE:8E:61:72:F9:5A:2D
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:aa:1c:ed:24:e8:2d:f8:4a:e9:5d:9c:f8:4f:a6:3b:10:
bf:07:73:2b:b0:c1:4a:f0:b7:3c:24:d9:a3:aa:cf:0d:02:13:
00:d3:6c:3e:5f:12:b5:31:5a:e4:65:7f:06:82:c9:ca:db:5b:
df:22:74:0e:99:45:81:ad:f1:12:25:a7:80:5d:c4:7f:57:34:
1c:5f:5e:8e:2e:16:d5:93:d5:ab:55:99:d7:a3:a7:47:1f:14:
28:ab:a1:e1:99:e9:dc:4a:b0:87:77:df:66:37:7f:94:71:67:
92:50:49:71:71:96:6f:da:b6:02:6e:45:c0:30:68:7e:dd:3e:
dc:b4:0e:01:9e:9b:94:07:4e:a6:fc:4b:9e:16:85:e1:81:fd:
09:a1:9c:59:20:79:bf:25:9c:2b:ee:e7:13:eb:2e:98:9b:07:
50:65:8b:3f:78:a7:4b:36:05:2c:7c:8e:b2:c8:13:1c:e0:ca:
5e:98:31:d6:92:50:55:fc:e7:22:63:16:9b:c5:2a:c9:de:37:
09:62:d6:17:b1:dd:08:07:5b:87:37:7e:59:76:10:e5:15:4d:
83:eb:38:b1:e2:d6:c1:1b:65:32:07:69:f3:65:62:ae:37:f2:
02:34:65:6b:e4:23:c6:df:65:9c:1c:0e:39:69:09:37:40:e4:
c9:1d:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:29:09 2025 by rpki-client