Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: DxrN2b2RkDhSNbLhgCy7mDVfp6X9a9Irxkk9ZlOlIBs=
Subject key identifier: FA:A4:3F:22:8F:3C:9B:EE:A8:D5:EC:4B:BA:70:65:70:76:88:77:C1
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0197B70F2D8F3BA80E0ADD633DDB7E037FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 100F
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: yR030ZuL2buMuCTEyHX5/QYOpzDHOT1PU/1KFJA+hIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2d:8f:3b:a8:0e:0a:dd:63:3d:db:7e:03:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=faa43f228f3c9beea8d5ec4bba706570768877c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:4f:81:23:2d:ff:2a:9b:4d:5f:4e:f9:e0:
bc:18:77:58:7d:45:99:bc:45:cb:e1:d2:27:c9:8b:
2f:38:69:ec:d2:17:1e:4d:36:db:92:bc:d1:00:fc:
92:06:d4:c6:75:63:96:07:8d:0a:0a:f9:ef:e9:7b:
12:5c:14:39:c8:0c:84:d5:fa:0e:e8:da:e8:f1:19:
14:d2:44:88:95:95:db:24:01:b5:82:49:8f:04:a6:
32:81:80:ab:6f:13:dc:c1:c5:04:cc:e0:3b:35:e0:
f6:a7:4c:6c:1f:60:c0:61:7f:e7:3f:d6:da:46:53:
d4:e6:d1:66:5a:29:7f:ab:2e:0d:7f:23:33:e5:ec:
6f:5e:e3:75:39:49:15:70:5e:32:96:9f:c4:e6:cb:
79:ad:ed:80:be:f2:ba:a7:87:38:f3:a9:16:00:26:
4a:99:65:97:28:3d:03:e1:be:bd:6e:13:5e:8c:12:
ff:dd:6b:67:7f:a4:2a:f9:08:03:66:9a:f7:34:69:
7d:7d:9a:7c:89:05:73:6d:68:08:0f:7d:1b:23:ee:
9e:21:7f:6d:0b:8d:90:9b:7a:1f:e2:1b:db:25:17:
43:e8:ac:d3:5b:a0:91:de:37:16:b4:d8:c3:c6:2c:
54:a5:ae:c3:94:d2:a9:40:e6:b9:52:54:9e:bd:95:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:3F:22:8F:3C:9B:EE:A8:D5:EC:4B:BA:70:65:70:76:88:77:C1
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bb:7e:27:ce:ba:d4:08:34:3c:18:d0:53:e2:2a:75:1c:91:
3b:78:85:6b:93:a1:6a:2a:90:85:a9:b9:80:d3:a5:73:3b:4a:
5b:05:26:05:07:42:6d:4c:0d:1a:e3:da:17:3c:7e:da:d5:4d:
ff:11:10:ae:77:14:5f:20:c4:0b:e0:02:60:2d:35:4f:93:c9:
d5:0b:4f:b9:19:ee:98:af:76:13:8c:4a:1c:d8:69:0e:06:9a:
0d:58:d0:0c:59:eb:98:48:ba:04:0d:26:1d:08:db:44:17:ac:
1f:e2:53:51:2b:4b:89:65:30:63:bf:bf:92:6a:c9:56:27:0f:
db:74:ca:7c:41:6f:ef:da:34:87:1b:2c:1c:1d:80:4e:81:9f:
f1:92:6c:4b:30:2b:26:e9:5c:05:3c:82:96:1b:e9:b6:24:1e:
69:bb:a3:c9:32:75:3d:fc:57:fa:ac:15:5d:ba:40:62:aa:c9:
07:89:60:46:53:42:c2:80:53:16:45:f4:c0:a6:d0:7c:b4:b8:
53:81:57:5f:9f:ef:1e:9e:a1:ea:36:d2:21:11:c3:00:c6:90:
5f:16:b5:91:12:d6:53:b5:82:1e:1d:1d:f3:47:95:94:e3:ba:
51:5f:90:e6:b9:03:cf:3b:14:cf:90:da:12:85:fc:34:61:70:
7c:f4:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:47 2025 by rpki-client