Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: T8AACPwgK2KbVmj8qVnR7mWNMNXHO50/AP2kXb4oVpE=
Subject key identifier: C9:BE:7E:47:0D:89:48:D0:39:AC:05:F6:B1:92:1F:17:AD:D2:DF:9D
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0197B6D77B68DBA1B3A2978ABC1949C6BD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1491
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: ygzhwOf4JfZpicGVOlH74WlKFZzCPTAkJ/Hjrnu5Heg=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7b:68:db:a1:b3:a2:97:8a:bc:19:49:c6:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=c9be7e470d8948d039ac05f6b1921f17add2df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:31:a8:16:d0:68:95:57:56:2d:b4:87:12:
ee:eb:8b:f6:d5:ff:00:cc:23:df:af:ca:f7:d1:35:
32:c3:47:16:23:f7:5e:c0:3a:0a:7a:dc:00:ef:a6:
75:b7:f9:e6:bd:48:79:e4:e3:a8:9b:22:a6:6d:d1:
25:3c:9f:f3:13:0c:b2:e6:6c:6a:fb:0f:7e:9f:47:
e7:6a:e8:d2:92:81:c4:70:6a:f0:e7:e9:17:d9:fe:
e6:8c:29:5c:7d:9f:b9:a3:14:ca:13:08:0f:2b:bc:
11:81:a1:c0:93:1f:84:d7:c1:4f:3b:ab:96:a9:e5:
75:9c:c0:b8:47:f3:96:73:b1:ae:ce:31:ee:16:f6:
6f:e2:88:47:f4:d9:b0:7d:9f:fc:31:91:32:cd:38:
14:6b:c9:f4:00:7a:e4:14:79:c6:f4:c0:48:79:3a:
d4:1d:4c:d4:f0:0c:1b:35:a2:5d:95:b2:1f:57:82:
98:5b:5b:1a:23:88:0f:11:4b:57:c1:d1:4d:7e:94:
a1:52:83:f0:fb:39:e0:b0:96:ca:ee:e5:6f:b5:9a:
d8:7b:0c:e1:14:26:b9:53:4a:ba:5f:cb:a1:d1:c9:
6d:bd:12:a4:61:ab:d7:b5:48:df:4f:4a:9e:05:d5:
43:0e:7a:d6:86:ab:1c:48:38:e7:1e:a5:b9:1e:04:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:7E:47:0D:89:48:D0:39:AC:05:F6:B1:92:1F:17:AD:D2:DF:9D
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:a3:4b:7e:af:e2:d9:f7:7f:89:88:bb:8e:b7:cc:ba:95:
b8:06:33:7d:04:bc:1e:c9:4a:39:27:f3:0d:7d:a2:82:8f:3f:
2b:c8:9b:a6:3a:f2:2e:8a:22:8e:87:4f:5f:19:78:0c:b0:05:
7f:b1:2c:50:94:dc:95:e3:67:f3:1d:d7:d7:35:80:68:76:0d:
90:00:a5:fc:1c:2f:25:79:ed:b5:8e:cc:1e:c7:9c:8a:5c:a0:
68:d0:20:8f:7f:28:53:48:ea:96:b3:4b:a3:80:ca:78:aa:ff:
62:15:e6:37:c4:24:e4:57:9b:40:8d:1d:65:98:00:91:97:35:
35:ee:24:79:01:44:c7:8e:5f:e0:b3:55:8d:c2:17:02:d8:c3:
3a:2f:d2:65:5d:29:ff:29:3c:97:dc:bb:ba:bd:a3:d0:a3:55:
40:11:c0:46:08:53:b5:91:e0:eb:17:2f:99:1f:6b:92:37:02:
26:ec:e0:e4:86:95:a2:78:67:0e:04:ef:a9:4d:55:ca:b8:47:
9e:ae:aa:1c:92:57:1b:8f:68:bd:f0:69:d5:6f:fb:cb:09:6e:
63:a2:40:8d:d1:04:67:a4:49:c4:d1:ee:b5:93:1b:09:7a:24:
d6:36:a3:45:e1:83:ea:60:83:bc:7b:b7:a6:88:ae:f1:c8:71:
e3:a3:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:56 2025 by rpki-client