Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: k+nDzo8OR0dRYzOwKDrdlErqam6xbvAG1FAePxIou7s=
Subject key identifier: A0:D3:81:0A:2C:6A:41:24:02:61:26:B0:4F:2F:37:A5:0F:EF:03:24
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0198D773555DE1680293BEDBE03A3C914E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1496
Signing time: Sat 23 Aug 2025 15:01:56 +0000
Manifest this update: Sat 23 Aug 2025 15:01:56 +0000
Manifest next update: Sun 24 Aug 2025 15:01:56 +0000
Files and hashes: 1: DywUgglXJxjquxmHdtAjCp7Yq9o.roa (hash: 6H1UCjI6GgLSo6SE87Wkm7SLFZ5VGUSjT5Cycx1feMs=)
2: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: 0/FzgzUlPUibrsn66rlEBVcufOV5Y5Ilq/Vo+Bfs4WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:55:5d:e1:68:02:93:be:db:e0:3a:3c:91:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Aug 23 15:01:56 2025 GMT
Not After : Aug 24 15:01:56 2025 GMT
Subject: CN=a0d3810a2c6a4124026126b04f2f37a50fef0324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:38:7f:4f:1c:1a:c6:2f:db:87:e8:f8:c2:
d2:fc:6a:7e:6f:ab:57:8c:ef:64:1d:0b:66:97:78:
3e:91:40:29:d6:7d:ca:53:c7:38:79:4f:4e:2c:30:
49:25:f9:c0:97:d7:42:cc:21:7c:ae:ba:8f:e7:61:
5f:ea:97:57:83:cc:de:c0:b4:57:07:54:2f:5e:b6:
96:d4:23:7f:d2:77:ce:50:3b:79:5e:17:ac:0b:ec:
37:eb:ac:96:3b:f7:22:7c:d5:81:af:70:6f:34:c7:
f3:b2:0f:ff:b4:ba:2e:34:00:c2:68:3b:4e:d5:ae:
ca:db:0f:8c:2c:14:79:22:63:7e:19:7b:d6:98:39:
f5:07:36:6f:80:6b:7b:2a:0e:33:29:2b:d8:8b:33:
2d:7d:93:fb:7c:84:99:d6:3a:f2:f4:b6:aa:ef:c7:
67:12:00:d5:89:66:57:33:76:ed:45:e0:35:2c:99:
91:1d:ae:9b:33:bb:0f:1e:01:5a:8b:f2:28:32:c3:
ae:dd:aa:68:c3:db:71:11:d1:95:a1:3a:e0:40:19:
09:c7:47:43:5e:35:46:21:54:e7:53:3d:ce:03:db:
ef:fd:66:8a:a7:dd:a2:94:d8:e2:9a:d1:43:a1:b5:
34:1b:d7:a7:75:23:08:22:8e:10:59:d2:df:8f:59:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:81:0A:2C:6A:41:24:02:61:26:B0:4F:2F:37:A5:0F:EF:03:24
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:f5:43:a4:d0:90:f6:bb:4d:68:37:6a:81:36:c8:a8:fa:
13:26:02:3a:8a:a6:57:8d:82:14:c8:58:12:a4:07:0d:9c:76:
4f:05:9a:27:24:e0:90:1c:57:ed:38:32:1a:6b:78:95:00:71:
35:6a:e8:be:87:16:39:34:3b:02:7c:19:34:ce:83:b3:59:00:
fc:f3:9b:c9:4d:be:1b:83:bd:4f:b8:89:23:b3:e9:ba:05:ea:
b8:0d:70:bd:4b:2a:ae:be:1a:32:4a:15:7b:94:8d:ec:2c:9a:
85:60:7a:c5:fc:16:52:a5:6b:8b:13:8c:a0:cb:46:cd:61:71:
a6:58:f1:62:38:4f:3e:d7:64:a2:9b:e1:7d:28:c0:97:1e:9c:
d9:5c:c8:74:39:08:7c:51:ab:d4:2b:7d:66:8a:a0:9e:64:3a:
87:38:e5:8c:4b:cf:98:7a:15:09:07:45:c8:a6:f7:07:b2:ad:
4b:20:bf:d9:39:59:25:e9:7f:66:15:1c:70:df:79:4f:c9:74:
71:d4:c2:48:c2:aa:c2:f4:63:37:de:84:f8:40:bc:8c:de:23:
f9:8e:19:e4:06:cc:4e:3e:f5:8c:a3:05:1e:b6:4f:96:d3:13:
e9:57:ce:e2:d0:0a:45:53:b6:43:22:6f:2e:ba:a4:f2:94:ac:
12:af:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:28:19 2025 by rpki-client