Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: Tas4YbZwmbkMUwtZnZ+EZ60IbayUFXNgzIsjzLF+XlY=
Subject key identifier: 24:E3:8E:CB:22:4D:30:0D:62:A7:E2:D1:EB:93:FF:E0:82:5D:33:0A
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0198D4E02680A800487D2F83248420AE34AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0DD8
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: leF4bxnI+7EECN+2l//Jhrb3aUMWlZO82VLY56kNpJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:80:a8:00:48:7d:2f:83:24:84:20:ae:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=24e38ecb224d300d62a7e2d1eb93ffe0825d330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:9a:76:da:79:c8:5c:9d:7d:fe:d2:77:3b:
0b:09:65:37:96:d5:c3:7e:7a:04:7b:22:a0:5d:e5:
7a:72:74:05:b6:ec:d9:79:8d:f1:ec:39:c7:ff:a8:
fe:e7:5f:d4:a7:e9:73:ef:f5:97:98:a0:aa:c2:86:
56:1b:2f:79:97:b9:c3:6b:04:6f:b8:99:41:05:3d:
ba:3c:56:ee:ac:fa:86:2f:0d:24:78:72:e1:9f:b4:
2f:45:ee:23:e3:70:60:57:d8:f6:64:0e:8b:b2:43:
22:88:74:44:8e:36:9f:61:8f:a7:e9:3a:30:23:1b:
a3:fe:76:90:c7:54:fb:1d:6a:99:fe:b2:49:85:1e:
61:55:38:69:ac:ad:2f:9f:c2:b3:41:1b:92:6a:6b:
00:83:8b:c5:b0:f7:74:c4:71:b5:77:cc:53:1b:f6:
9e:3a:81:1c:50:85:41:99:6e:b2:b2:c6:16:1a:b3:
14:4f:9a:61:38:50:a4:dd:97:70:9d:29:a2:a0:4c:
a0:ab:3c:45:8f:86:e4:de:8d:02:64:cf:25:90:cf:
d2:e9:19:bd:cd:c0:f2:11:15:ff:fc:60:c8:8b:7d:
9d:59:02:06:b2:fe:e0:aa:fe:14:33:eb:30:af:0f:
e2:96:78:0e:c6:bd:9c:59:0c:72:a4:08:0b:37:86:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:8E:CB:22:4D:30:0D:62:A7:E2:D1:EB:93:FF:E0:82:5D:33:0A
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b5:3f:68:ae:e4:96:fa:df:e2:2f:9e:f2:91:51:2a:cf:c8:
f2:77:62:6c:b3:c8:f0:5f:3c:b3:31:0e:89:a3:66:42:d0:33:
78:b6:d6:95:c6:1b:16:48:a1:9f:d1:48:a5:67:13:5b:0d:d8:
04:ee:65:6e:87:30:f6:62:07:d4:f0:92:5d:08:13:4a:9e:7a:
1f:a6:48:86:e9:14:c3:c2:0a:9e:53:93:95:dc:2c:db:25:07:
8e:20:bb:23:fc:28:56:c0:ed:3b:40:6b:ba:9b:a6:a4:49:f1:
4d:ee:0e:64:af:d0:28:7d:7c:76:9e:67:26:80:8a:db:1a:9c:
fc:90:aa:85:fa:14:98:c6:7c:fd:c2:16:68:57:29:4e:88:be:
64:e7:e3:d5:bd:84:aa:f0:b5:5f:7f:4a:6b:ba:60:b9:08:25:
31:79:f1:ff:e1:22:87:1c:28:fb:db:61:48:5e:69:03:f8:b9:
d0:1d:a2:47:13:88:02:d7:86:af:5d:2b:35:f5:9f:17:8c:ca:
a4:0a:a9:15:1f:6e:70:c7:63:43:21:8f:18:5d:69:1a:fa:ea:
62:3b:8f:6c:3f:4c:95:5a:72:3a:f6:0b:b4:d6:8c:0d:7f:87:
46:82:54:3a:5e:f7:40:ad:e1:12:b1:f7:30:1f:0b:f0:d6:8c:
99:55:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:45 2025 by rpki-client