Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: G7Fzch+0Sfzv/G1bym2XgLDILc8vEHdK1kgs/92TFZA=
Subject key identifier: 0D:AF:F2:07:75:11:44:0B:0C:21:DD:5F:92:16:74:FE:BD:2D:92:90
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 0197B6A16FDBD7662A0D5AF6A8D0DF81C342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: f3ApLQDBkweJBVuVC7XqmLuNZzxoc6fdhqSEsN8GVyo=)
2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6f:db:d7:66:2a:0d:5a:f6:a8:d0:df:81:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=0daff2077511440b0c21dd5f921674febd2d9290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:53:7d:ce:ca:b0:17:91:96:94:e1:8c:e4:
4e:66:4c:92:61:49:59:c4:4d:93:ec:72:3d:b9:82:
57:51:01:ce:27:c6:60:77:ad:70:33:59:82:14:30:
ce:13:5d:6f:de:45:2b:98:87:36:59:f9:6d:a2:1f:
b5:f2:a4:ad:47:60:2f:22:25:c6:ee:2d:89:27:a7:
21:21:2d:40:b6:2e:03:33:32:3b:1f:3e:4c:c7:c9:
73:14:a4:21:eb:40:78:53:59:1e:c7:5a:26:35:50:
2b:55:d4:ef:6b:f7:fd:67:5c:d7:bf:b6:cb:22:ec:
96:3e:9b:28:4a:4d:4b:d7:2c:f2:c6:f9:1c:6a:9d:
8a:fe:ff:33:0d:c7:a4:75:e4:82:5a:ff:17:7b:d6:
4f:72:05:2b:99:aa:db:8b:01:74:81:a4:c7:ef:d6:
6c:cf:be:a4:68:5f:d8:8a:f9:96:f6:59:6a:54:79:
e5:f8:ba:ea:4b:bb:bd:ed:84:e3:0c:bc:82:59:e5:
9a:30:2b:b3:76:8d:8e:73:f7:67:6b:19:64:65:c5:
a2:02:af:77:19:82:16:30:46:e4:28:73:79:b0:13:
52:e2:00:3c:e8:1a:2e:00:d0:49:1e:f7:d3:86:3a:
b6:28:d0:4d:40:10:c7:42:89:66:78:41:68:dc:b2:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:F2:07:75:11:44:0B:0C:21:DD:5F:92:16:74:FE:BD:2D:92:90
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:55:21:99:22:2a:24:74:0b:8f:84:43:e2:97:95:fc:e7:
88:5b:d6:54:aa:a1:b6:f5:95:62:d1:9d:79:d3:63:f5:92:81:
de:1b:8e:90:ef:3e:ff:f4:fd:0a:14:24:13:1e:a0:c8:b3:f4:
0b:eb:b7:b8:8f:52:9a:4d:25:15:c1:4d:c3:66:be:a9:b6:0f:
4b:83:8a:99:c9:54:a5:2f:b7:ee:28:38:a4:a1:d1:a0:17:d4:
1e:88:85:39:4b:8a:ed:fc:65:40:43:ce:af:21:aa:ee:49:14:
f9:b0:4e:4f:cd:7b:45:0d:f4:df:39:47:16:a6:ce:2d:69:c7:
cd:d1:c1:f3:96:ec:21:0b:a8:09:36:44:a8:4d:38:d4:31:73:
10:ab:30:d6:14:47:94:f8:bb:79:4c:4b:bf:29:ea:99:b8:59:
98:ce:2b:74:cd:c3:07:4d:a2:a5:5e:bb:9c:7b:cc:e6:fd:50:
01:49:7d:7f:48:aa:aa:55:5e:c3:a5:45:37:a5:25:a9:e8:fd:
fc:95:2a:71:f8:4d:b7:78:d1:2d:c8:bb:57:04:ff:60:10:f8:
2c:45:df:88:82:30:ff:11:62:19:f6:75:dc:1e:97:2e:97:83:
ad:c7:64:f2:69:73:3a:0a:5f:1a:1b:53:12:38:e4:f7:c7:0d:
6d:17:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:20 2025 by rpki-client