Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: PhdAs8EKSzaiysTGAxi8TT2ltaa9KcV48yzkdusDWr8=
Subject key identifier: BB:1A:2A:E2:8F:5E:57:E4:39:28:3F:B5:24:D8:FC:18:16:89:18:37
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0197DBF6DCEBC3DA901AD934C727961BCAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0BB8
Signing time: Sat 05 Jul 2025 19:01:18 +0000
Manifest this update: Sat 05 Jul 2025 19:01:18 +0000
Manifest next update: Sun 06 Jul 2025 19:01:18 +0000
Files and hashes: 1: QAlZxJpPNS1rmQL4HuNAcE7lmik.roa (hash: S0+MsekOjpK1fn9TgliC/Ks4ugN2LoEukjLPMsOlGQY=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: +ASNbHRTMOVMzL+foV1aGtmfwW62gHf9CLDTNMsECHU=)
3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:f6:dc:eb:c3:da:90:1a:d9:34:c7:27:96:1b:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Jul 5 19:01:18 2025 GMT
Not After : Jul 6 19:01:18 2025 GMT
Subject: CN=bb1a2ae28f5e57e439283fb524d8fc1816891837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:cc:bd:85:d2:c8:68:17:16:19:3a:4c:e6:
c4:2c:cf:51:85:ab:c4:a8:43:72:c7:24:3a:47:fb:
46:78:79:56:34:24:cb:5d:1c:b3:41:ac:e3:29:84:
6f:fd:ec:80:09:f6:b5:ab:84:6e:aa:73:b5:3f:86:
31:78:36:54:94:2c:4c:ca:b4:4b:41:9c:3f:b1:18:
06:12:aa:26:75:17:da:a9:42:63:dd:91:d3:de:f1:
cc:22:01:0d:ca:67:1d:ad:16:4d:0f:03:13:9c:6b:
9b:ae:2d:88:c0:73:f5:a9:b2:0e:8f:7e:c8:f7:bc:
11:3e:04:29:94:23:90:ea:a1:c4:57:8e:b0:fd:ef:
9d:2c:47:85:f6:31:49:5a:7c:b9:bb:32:e2:ab:74:
ec:cf:d3:f4:7f:50:7d:50:af:e3:46:5d:5b:31:e8:
41:49:36:b0:0f:aa:43:42:50:e0:de:87:ef:b2:55:
c7:13:15:0f:10:c9:18:5a:5e:d9:f3:a0:12:39:53:
b2:79:25:92:d8:9f:5a:48:51:82:5a:36:5d:90:0b:
6d:f4:7e:19:03:3c:38:cb:07:dd:7b:75:b7:b2:1c:
ae:3d:f5:dc:bf:93:f0:cb:5f:db:77:a0:a2:11:6d:
ba:65:f2:2d:d2:5d:73:25:f3:a3:66:48:a7:79:b9:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:2A:E2:8F:5E:57:E4:39:28:3F:B5:24:D8:FC:18:16:89:18:37
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9c:22:13:8c:e1:96:b1:65:e8:87:52:24:39:db:10:3c:60:
67:9f:a8:fb:c4:2e:56:83:d8:b9:75:21:25:2d:2d:8d:74:c7:
e6:79:ef:70:36:52:72:48:45:5a:ae:69:a9:78:e5:34:51:82:
6e:3f:61:c4:d1:28:8b:f1:8a:44:80:b0:f0:e6:4b:e8:a7:89:
98:75:f7:02:b1:75:e1:d3:8d:4a:67:13:ed:8b:4b:c0:13:58:
90:65:fb:00:06:1c:91:65:b0:eb:91:87:ef:e3:4c:5d:69:e3:
96:a7:31:95:08:3b:af:f4:ec:30:3a:b8:93:c9:82:d5:dc:cd:
bd:ff:9c:b3:14:c1:30:4e:80:b3:ee:14:d3:45:15:01:2d:f0:
c5:3d:b0:98:91:c7:e3:ff:17:f6:8a:03:d6:f8:ca:e9:27:a8:
83:7e:2e:57:bf:dc:27:5d:f0:dc:85:b6:41:c1:c3:f7:d5:a9:
34:a6:b7:27:80:ed:81:9e:10:87:4d:ec:cd:85:15:17:c8:84:
8e:01:11:53:c8:d5:fa:b1:e6:90:32:04:60:aa:e3:38:97:68:
f3:1d:e0:05:10:42:7c:00:77:09:73:5c:8c:5c:41:ed:bb:33:
d8:e4:44:4f:03:72:05:a9:95:b2:5b:15:09:a3:e7:fc:dd:68:
58:96:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:13:22 2025 by rpki-client