Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: BsJ8CUuH1spdKl7JTSxjulnGCAHRxaXCjzCAU2LRYjk=
Subject key identifier: AF:18:73:F1:31:17:5B:C2:AD:10:1D:FB:DC:87:3C:71:EF:20:20:26
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 0197C5014B41445955F54EE020A79D09D963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 1107
Signing time: Tue 01 Jul 2025 08:01:25 +0000
Manifest this update: Tue 01 Jul 2025 08:01:25 +0000
Manifest next update: Wed 02 Jul 2025 08:01:25 +0000
Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: LloYovRdTEL9VVKJa452afyxnG58gzTrlPOqNBIX0K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:4b:41:44:59:55:f5:4e:e0:20:a7:9d:09:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Jul 1 08:01:25 2025 GMT
Not After : Jul 2 08:01:25 2025 GMT
Subject: CN=af1873f131175bc2ad101dfbdc873c71ef202026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:ed:3d:3e:c2:7f:98:e0:7b:05:53:b2:e5:
c4:ee:3c:17:21:8a:c1:de:78:7f:5d:b6:7a:10:b5:
75:6d:d3:85:17:4a:b6:50:a6:40:fd:dc:fd:45:a1:
19:16:33:6b:ef:da:69:f6:b7:9d:1d:c9:1b:90:99:
d4:52:6b:df:f1:cb:5d:5a:a5:ec:e5:05:ee:8c:a2:
c1:c5:3a:e2:f7:ab:40:78:cf:08:c1:93:d5:de:68:
31:59:54:4b:20:ce:33:0b:3f:c3:60:37:6e:39:04:
8a:15:b1:b0:ca:fc:48:0a:14:66:0f:a1:05:f5:2f:
ec:db:56:d3:d7:bd:60:be:fe:be:04:f7:d1:b9:60:
c7:15:c5:49:a9:ae:3b:ed:31:60:e4:6e:42:7b:d1:
67:a8:b9:ff:09:82:8f:7f:01:0c:1c:d5:7e:f8:92:
74:17:a7:7f:0f:93:3c:05:63:b4:44:46:c7:70:68:
95:3d:22:50:2b:63:5e:bc:8b:5f:11:56:72:2b:e4:
49:9e:b5:9e:cf:01:9b:e2:b2:81:c6:a4:11:27:95:
c2:c1:9b:16:e2:8d:fe:01:36:40:91:cc:a0:e8:97:
9c:4e:3d:0d:f2:ce:e4:2e:fa:a0:91:b7:9f:46:e2:
e6:7c:b4:c8:45:fb:b3:92:a0:a5:fc:cd:24:1e:4d:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:73:F1:31:17:5B:C2:AD:10:1D:FB:DC:87:3C:71:EF:20:20:26
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:69:44:65:b4:62:fe:c8:22:b9:24:a3:24:ea:d3:55:7b:0f:
ae:df:d2:71:1b:39:04:b4:e7:43:bc:dd:dd:cf:8a:b5:fe:ef:
c5:e8:d8:d3:67:6e:32:0c:50:ec:9f:3a:86:6e:ed:a7:e6:4b:
00:e0:95:3c:ba:73:12:48:df:ed:d9:7a:cf:c4:f6:2f:60:4e:
4e:f8:aa:ed:81:46:04:8f:3e:24:26:75:38:f0:5b:cb:f9:14:
d4:25:8e:64:a0:09:de:4a:22:90:ca:bb:89:ef:a0:57:0c:9a:
00:5d:cd:4a:68:35:92:93:64:f8:14:76:cf:2d:c9:ee:4f:c6:
b2:cb:14:fe:66:fd:40:7e:8d:5d:e1:43:64:43:b7:a3:0a:5e:
d4:c1:d3:75:9f:a3:65:3c:7a:31:f2:48:15:d4:40:2b:1e:ec:
8a:14:4b:57:7c:90:f1:1d:2a:e4:0f:53:f5:0e:4f:39:89:ee:
e5:0f:8b:c0:ae:ce:3f:9b:b1:f5:b4:60:ed:1b:b9:2f:75:a0:
55:e2:2c:56:ff:4e:0a:11:04:6d:88:96:1a:55:92:1e:26:f0:
ef:3a:10:5f:5f:21:a8:e8:6f:2c:ba:61:80:5f:b7:22:15:4c:
8d:99:dd:a1:30:b4:05:06:8f:e7:70:c3:cf:48:ca:60:88:54:
81:f2:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:22:28 2025 by rpki-client