Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: RojxX+wIaJ8HKcc69ToObY/D3Fg5qJ02cl76aB7jMOM=
Subject key identifier: 90:96:B3:AD:B0:E4:49:43:C8:83:B3:9F:CF:1C:69:7A:7F:B5:51:11
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 0197B7EAA83291E4B1829443E8572035C57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: Gbnwhb/nsCJNxEKbnBBXrSWAz93qo7yVnhk3kxXLFbk=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:32:91:e4:b1:82:94:43:e8:57:20:35:c5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=9096b3adb0e44943c883b39fcf1c697a7fb55111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:b3:b5:92:91:3b:69:5c:ca:97:1e:b2:57:
53:9f:60:53:eb:d2:28:c3:7b:cb:e2:b6:0c:29:88:
be:d6:ba:4f:7a:3d:78:b9:22:26:eb:1f:a5:37:c7:
8c:26:71:04:89:f2:43:5b:26:00:b3:30:b7:2b:0e:
dd:15:a1:be:c3:9f:9e:b0:b0:06:f9:68:a0:c3:6a:
71:97:bf:2a:07:8f:93:68:61:29:96:2f:a9:b2:b6:
26:29:f1:dc:1a:31:60:aa:2c:09:22:7d:af:a7:a3:
b2:a6:ae:e6:d3:9d:92:85:3f:d0:f5:c3:e8:57:27:
52:d6:d6:90:2a:f2:4b:f5:b6:e7:fc:a9:37:c3:73:
45:43:77:50:73:bf:15:04:0c:32:aa:6a:c9:aa:9f:
a5:2c:38:bf:b3:bf:b2:3e:90:f6:6f:d9:8c:73:1e:
5a:26:c6:60:fe:f7:db:1b:91:da:14:f8:e8:4d:80:
73:65:11:67:15:e5:48:b0:31:46:a9:ef:bb:c7:74:
81:df:6c:12:12:d4:db:65:4c:58:06:c1:42:0e:6b:
d1:0f:66:2b:b0:02:c7:70:b3:ce:86:24:92:14:65:
3e:30:8b:48:8c:6a:be:2e:f0:85:88:86:16:fc:94:
fb:7c:60:02:56:e8:20:0f:bd:55:5c:41:9e:8b:5c:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:B3:AD:B0:E4:49:43:C8:83:B3:9F:CF:1C:69:7A:7F:B5:51:11
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:2d:c0:6e:52:49:af:59:c1:cd:24:76:56:62:f5:d9:aa:
6e:9b:19:85:a8:37:b1:bb:f3:c5:1d:55:64:a7:9a:92:5b:55:
65:ab:75:cb:f9:93:a7:cb:a9:51:b8:00:5a:6e:5f:0b:4b:00:
48:48:96:44:2d:6d:54:b5:d2:83:88:87:4b:fc:f1:27:8d:7d:
cc:19:95:e6:a5:48:26:15:ff:31:d5:d0:68:24:11:a1:b4:50:
11:03:90:86:79:48:68:3e:ac:32:e0:ed:c8:ad:6c:e1:87:12:
9f:af:30:bb:6d:8b:13:d8:5c:b8:5b:3f:07:51:06:bd:5a:bd:
d0:52:1d:42:af:49:f8:75:34:5a:1b:29:d1:8e:ea:3b:1a:a5:
7a:ff:b9:3c:5d:b3:17:68:3e:bc:9c:01:38:2f:66:71:15:5a:
f1:29:63:61:75:eb:49:39:03:cf:59:07:10:33:ea:d8:24:20:
79:d6:e3:c2:a5:d8:ca:ce:9a:53:a7:ef:19:af:99:8e:0b:4c:
33:f7:2b:d3:55:e6:bb:81:58:d4:7b:8d:75:3d:0e:ed:b1:d1:
7f:7b:ce:e4:6f:d8:a7:d1:c7:ce:f5:05:b3:ce:02:5a:06:2e:
fe:44:b1:21:49:af:5d:8f:aa:89:00:16:50:38:d6:5e:2a:14:
3b:3b:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:26 2025 by rpki-client