Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: U/t4BLCa1v/i6WcgplG3OsrQfbISDv2JhitzTqrYjrI=
Subject key identifier: AE:6D:B6:1B:73:EA:7E:E8:EA:41:97:98:4C:2E:F3:D8:FC:5E:D0:6C
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 0197C3132DB73A40117ACA3D216DB7F8053E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 01DE
Signing time: Mon 30 Jun 2025 23:01:43 +0000
Manifest this update: Mon 30 Jun 2025 23:01:43 +0000
Manifest next update: Tue 01 Jul 2025 23:01:43 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: 6GQtPf8wPdVghCnrBVfB3Rqqaz2rDoLddWlae/JVfto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:2d:b7:3a:40:11:7a:ca:3d:21:6d:b7:f8:05:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Jun 30 23:01:43 2025 GMT
Not After : Jul 1 23:01:43 2025 GMT
Subject: CN=ae6db61b73ea7ee8ea4197984c2ef3d8fc5ed06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:49:b8:75:f3:42:80:b4:62:3b:7a:18:04:
52:b5:db:de:5f:79:02:a5:a8:59:54:b6:ef:96:d0:
5d:2d:00:89:ee:52:cf:2b:5d:d6:9e:08:1b:5e:f9:
0c:4a:67:5e:e1:eb:dc:e8:5c:92:ee:ee:49:63:9c:
64:90:f5:f7:4a:35:f0:1a:81:c2:d4:6b:0e:1a:d0:
2a:0c:f7:f4:7a:87:42:b6:06:a5:2a:e9:88:b2:75:
76:e4:43:e5:21:0a:65:9c:3a:d8:4c:e2:c9:06:50:
bf:fb:ae:ef:d8:8c:23:11:bb:c1:45:c3:12:56:cf:
c5:3e:3f:f8:da:6b:d9:54:81:9b:dd:66:29:2c:b8:
88:c4:57:dc:1a:cc:be:d2:f9:08:60:76:c8:4f:27:
4e:c8:8c:be:17:d3:8a:f4:c0:55:b0:81:a5:d7:f4:
b5:48:11:f5:a4:13:b2:c0:f7:50:e1:66:51:90:bd:
92:82:86:9c:7a:91:dc:c9:21:80:69:25:96:ef:7c:
f6:ce:33:2f:91:0e:03:af:5c:12:16:23:b5:9f:12:
06:9d:07:7d:82:57:b2:b0:db:6e:44:59:0d:0b:21:
2d:8a:e9:e8:c7:4d:b3:6f:92:cf:a2:b9:66:2f:ab:
01:81:4c:de:52:49:87:cb:74:60:bd:10:75:24:f9:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:B6:1B:73:EA:7E:E8:EA:41:97:98:4C:2E:F3:D8:FC:5E:D0:6C
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:54:8d:b2:fc:d0:45:5c:db:07:51:f3:43:82:77:7f:67:df:
74:3c:ae:18:22:7a:dc:77:60:0f:48:0e:66:c4:0c:d7:b2:78:
9e:c3:4b:a7:65:68:33:d1:9a:11:b0:e4:40:f4:a3:5b:fd:a8:
42:3b:17:fd:fc:9f:af:7b:71:7f:d3:0b:60:b4:ec:b2:a9:cf:
04:3a:5f:24:c5:e3:43:f8:a8:83:0c:47:f3:75:b2:ca:17:0a:
7c:c4:0d:1b:5b:93:90:b8:a6:26:76:98:4b:e8:73:38:7a:69:
24:88:03:87:c6:39:06:8a:60:8d:18:a5:e7:9c:94:8a:6b:04:
b0:4b:13:b0:dc:e0:e0:94:b5:af:3b:18:82:a3:76:2b:cb:01:
62:e0:6e:be:0e:1b:a0:9b:4a:2b:55:37:63:ec:f7:2f:b0:a1:
ab:84:b7:8d:2c:c1:0c:02:57:e4:8d:0d:da:aa:a3:75:d9:ec:
29:ea:f7:91:61:42:56:39:29:d7:7b:a0:b2:2b:e2:15:b8:06:
64:13:da:72:3d:3f:08:1d:f5:10:16:f4:74:31:34:7c:75:ca:
d2:fa:af:f0:e4:2b:1c:a7:85:18:bc:54:d7:e0:78:d6:22:a1:
fc:0d:73:ce:b6:e1:91:4e:98:20:bd:21:2e:d7:00:8c:b9:5c:
68:f6:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:58:04 2025 by rpki-client