Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: uvQIr4KX0ELmuQbcjx5ywzei7IiJ3zf5OAUgEQV2/34=
Subject key identifier: 0D:B0:4D:29:6A:65:28:AA:19:58:5D:1C:61:DE:84:E7:AA:5E:7D:DF
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 0197B7451771A7F312B929A881E60B063E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 08E7
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: O7qw4Fl+ONSOQrDbifxvubC9vOQ6lL+XpeK45HvuBkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:17:71:a7:f3:12:b9:29:a8:81:e6:0b:06:3e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=0db04d296a6528aa19585d1c61de84e7aa5e7ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:a2:41:92:81:03:95:4a:bd:d0:24:5b:c7:
50:14:61:ab:b1:c3:e5:5f:db:33:61:4a:8a:a7:af:
ca:5d:d6:6c:2f:b5:35:ab:28:e9:f8:7d:27:79:10:
80:2f:0d:a1:3e:67:c6:b5:c0:c7:4b:9b:c0:af:91:
b6:5c:2c:e1:ba:f9:57:04:94:8a:66:7a:9e:c9:01:
ce:4e:eb:c8:85:35:0f:aa:d6:42:36:bb:c6:34:e4:
3c:cb:9e:ba:93:48:61:91:49:a3:2e:50:e1:70:fa:
7b:b9:b2:b6:3a:e1:c7:5f:61:a7:38:a6:59:1d:62:
98:3a:17:b4:cd:5c:9a:15:56:7c:d6:76:30:c6:62:
5e:38:7f:25:fd:c2:fa:5e:43:8d:d1:4e:de:29:5d:
c3:57:a8:f9:d9:18:2d:7b:f2:c7:f8:b2:02:b4:45:
c4:be:3e:5d:b2:8a:9c:14:27:88:3d:ee:12:02:0b:
75:78:94:4a:6d:70:dd:1b:08:4f:b0:4b:8d:da:68:
5c:14:6e:cf:90:76:98:bc:3a:83:d4:4a:e8:f6:b0:
71:3e:f2:67:1e:ca:f0:a7:7f:4e:4e:c4:58:74:23:
36:4e:73:00:e4:3e:c3:84:38:e4:0f:7a:61:b6:97:
9d:eb:78:6b:a4:37:93:63:86:2f:7c:0f:5a:25:94:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:4D:29:6A:65:28:AA:19:58:5D:1C:61:DE:84:E7:AA:5E:7D:DF
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:48:d0:38:ed:93:ae:5c:27:da:96:c9:1d:16:14:d1:2c:
c9:12:9c:40:1e:5f:1a:75:16:9f:21:c8:be:44:84:e4:e2:cd:
41:d7:8f:3e:4e:18:8e:af:7d:82:2b:00:f3:0b:78:3d:c9:9b:
6f:e9:18:80:96:dd:09:8d:50:cb:0f:29:ab:c0:29:23:e5:2c:
53:bd:fd:3a:01:c6:92:f4:b9:1f:82:c3:34:3a:72:08:93:ac:
3c:0c:f1:d1:83:cb:fd:c7:ed:e0:cb:92:8b:a9:0f:68:1c:2c:
c0:2b:af:9e:45:be:85:6a:e2:a3:bd:1f:3f:6e:ea:79:06:9b:
87:ac:ee:a4:36:51:78:de:92:d2:17:55:52:9c:29:13:30:98:
75:15:73:a4:8f:a9:d7:6a:ef:1f:c7:e6:f0:b9:cc:b5:5a:c9:
39:50:9c:13:86:1e:ac:4f:8c:8f:4c:31:a5:c5:2c:3d:f3:38:
0d:05:bd:a7:c2:ff:1d:36:46:12:d5:9b:78:73:85:d7:5d:24:
2c:b8:7d:91:94:5f:4a:5f:0f:34:02:30:7d:6e:b6:fb:62:b2:
d1:f9:a4:db:c0:7e:a4:7f:eb:b1:b6:49:d6:eb:71:de:5b:a7:
02:82:e4:20:e9:40:c0:4c:cc:fc:23:60:31:56:0b:bb:dd:b5:
e0:30:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:27 2025 by rpki-client