Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: p9tlNigyhY/0KVq7a8WHfXcJu6RU9jqwBWCk+gVF7+4=
Subject key identifier: BB:23:27:7C:2F:AC:16:02:91:9A:A3:C5:15:BE:CA:DE:AA:5D:6C:58
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 0198D54E772CE614C778DA6EFF9C7E584EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 097B
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: bBd12Ynx/aW1KjwV65GiLUW3s9oKc6f8OoWm3hVtj2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:77:2c:e6:14:c7:78:da:6e:ff:9c:7e:58:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=bb23277c2fac1602919aa3c515becadeaa5d6c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:cc:ea:41:2f:6e:89:07:77:cc:ef:65:77:
04:f1:9c:fc:7e:bf:22:b7:71:26:10:56:bc:35:f0:
a6:0e:86:f8:49:4d:cc:c4:fc:77:ec:5b:8b:ed:0a:
67:b5:d6:0e:a3:d9:8d:d6:b3:f5:f0:7e:b1:a9:7b:
2f:e4:07:a9:b9:f4:e0:13:9f:42:db:71:f4:da:39:
55:84:14:34:62:68:67:f3:f6:3f:3b:4b:cd:81:10:
19:23:d8:9e:4e:5d:0f:3f:d4:77:67:29:b3:ea:64:
c8:99:16:51:01:5c:91:ca:17:99:06:30:53:c8:8d:
9a:f7:89:60:6d:69:49:6f:cf:5e:ec:60:d2:ab:2d:
12:9c:14:2e:81:2c:eb:a4:08:e6:7d:9a:44:be:2e:
f6:5b:51:5e:57:37:e2:af:d9:d7:75:46:bd:d6:c0:
9a:b4:2c:d5:53:62:44:19:d0:35:b3:dd:86:6d:74:
e8:75:e8:c6:8c:62:56:84:ed:6b:a1:ec:18:a9:29:
9f:97:81:53:b1:71:19:73:38:02:14:f6:ce:34:d9:
94:b0:e6:e1:0b:0f:ac:b0:1a:9e:3f:ff:4c:19:2d:
35:02:61:28:40:76:23:61:51:34:58:37:d7:2b:4d:
1c:17:0c:a5:88:f5:4a:ec:78:ec:64:27:61:d5:7c:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:27:7C:2F:AC:16:02:91:9A:A3:C5:15:BE:CA:DE:AA:5D:6C:58
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:66:2f:54:0d:76:fd:e7:cb:8f:7f:2d:dc:d8:c2:79:2e:59:
af:de:da:61:c7:51:b7:b3:45:85:97:fd:27:01:c7:f7:60:dc:
3a:27:4e:51:f1:b0:c9:87:43:78:ee:f9:1c:d4:5e:e5:a9:8d:
55:f9:cc:76:b8:9d:f9:8d:31:f0:22:b5:3c:c8:bc:c6:28:ed:
6e:35:28:01:28:c8:28:5f:07:1b:b1:07:9a:6c:54:d2:08:ef:
aa:fa:40:69:2c:b9:0c:81:8c:e7:84:c0:32:92:80:bf:5a:35:
47:30:97:ef:4e:20:e6:e3:e2:7c:a9:d0:56:20:49:1a:73:19:
05:f6:ed:aa:78:6c:d3:d3:d1:a1:8a:78:eb:34:63:f7:ee:67:
5a:5d:86:2d:09:30:59:a2:9f:75:07:8d:2d:60:3a:e3:5b:41:
17:4f:65:dc:91:95:b0:72:83:19:cb:5a:11:d3:03:4c:6d:76:
b2:9b:70:40:1b:94:92:01:0f:40:4f:85:d9:67:0f:e1:1b:eb:
3b:88:38:09:7b:ff:e5:ea:55:49:5e:ed:78:d1:bc:23:5d:11:
57:cf:aa:87:df:93:38:0e:16:cc:e1:b4:af:f5:3d:c4:07:9d:
87:06:bb:83:74:10:5c:73:c1:bc:5a:21:5f:40:ec:ca:17:b1:
df:60:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:45 2025 by rpki-client