Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: PE8ke87AU0wgXawHIj6EO/sm6L++ALaUZNtgfNPxFS8=
Subject key identifier: A4:A1:97:27:6E:5F:6B:C9:F4:B5:CC:5E:F2:6B:DA:DC:79:5E:FE:82
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 0198D54E6F89190A1A757301398AF4B04F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 1194
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: jamops8n42dfP1YddVKhEA8P7UxJbWwOVenGYnGTZM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6f:89:19:0a:1a:75:73:01:39:8a:f4:b0:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=a4a197276e5f6bc9f4b5cc5ef26bdadc795efe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:7e:ae:69:ce:48:39:a5:05:f9:92:31:17:
e3:25:5a:b8:27:ab:1d:da:d0:26:22:e7:ce:98:a3:
81:89:15:e9:a7:32:82:eb:cd:da:ee:21:bd:bf:5e:
66:e4:24:55:11:cc:d9:fc:70:f3:8f:1a:47:56:ad:
7d:e7:67:1d:10:aa:6c:1a:38:61:07:66:3c:8d:14:
bb:b8:ea:9d:68:82:57:f5:e1:ad:87:fd:85:48:20:
e0:6d:35:ca:85:21:af:67:2e:5f:ed:f1:7d:5b:ce:
3d:f0:98:4d:fd:aa:58:8f:e5:d3:eb:ba:ef:be:62:
77:23:cf:05:b7:c2:3f:97:38:98:9c:26:66:84:dd:
83:a8:d8:36:64:62:d5:90:bb:53:e2:1d:02:12:01:
a1:de:a4:c3:49:fd:f8:6a:50:ed:8f:39:ae:6e:64:
12:ab:de:cd:e6:00:ee:55:03:f7:e8:1f:c7:30:83:
4f:86:69:97:12:01:ca:fe:7f:34:6e:9d:39:f1:51:
58:24:8f:74:cc:4f:bd:37:b1:3d:56:5b:f3:62:b2:
6c:b3:8f:3a:53:6f:59:80:98:4b:21:d6:9a:33:ff:
76:bc:41:72:e7:cb:6f:58:1d:6e:08:e5:52:ce:15:
0a:5e:4a:89:6a:5b:a8:52:6b:ac:01:64:74:35:79:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:97:27:6E:5F:6B:C9:F4:B5:CC:5E:F2:6B:DA:DC:79:5E:FE:82
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:d5:42:73:dc:0a:a1:bc:cc:da:eb:97:bf:49:c2:79:e0:
6d:e5:c2:3b:08:06:fe:73:39:9c:96:9e:15:cc:46:ed:85:66:
37:b8:07:ae:e3:76:dd:91:25:66:c3:57:0f:24:e6:96:43:79:
ce:5e:f6:fb:bb:10:99:47:3d:e5:09:b2:67:fc:c4:66:16:e1:
6f:5e:6e:05:9d:14:d1:46:8c:48:a4:9f:69:0d:d7:9e:00:1f:
c2:dc:33:e1:30:a4:12:e7:3c:6c:14:6d:88:68:59:ba:66:0e:
7d:39:87:9a:3e:a5:09:a8:1e:be:2f:48:65:03:47:21:3a:d9:
8a:62:cb:92:3d:0c:02:9b:eb:dd:cb:a3:ec:12:ec:b6:5b:92:
ed:d0:0f:ea:15:26:43:02:0d:5e:7a:47:bb:02:b7:36:9b:e5:
18:f5:fe:e7:29:3a:86:e3:69:91:71:a8:0b:17:fc:e5:94:18:
c3:e7:9a:07:b2:19:9d:a7:c9:65:3a:e1:7c:e5:da:e6:cf:6b:
1f:c7:ea:75:80:e9:fa:cd:98:27:31:86:ea:3c:ba:72:f4:32:
89:6c:67:05:25:91:56:31:b6:84:95:aa:c6:9b:fc:f5:93:5f:
7c:b7:9f:50:61:7f:6b:4d:25:84:41:42:5d:1c:46:fb:67:7d:
be:42:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:34 2025 by rpki-client