Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: TaesaAVyOKvoL+cs2EYqzhKNMSZxNmZkj1KnX+doaq8=
Subject key identifier: B9:4A:20:21:6E:83:2D:A0:EF:55:77:15:D9:AE:1F:ED:E7:9B:5E:DE
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0198D4DFF3F018722AA6851434BDE0BA0CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 10A3
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: 2UZkQNcNCUmhdkWDQe++qDPk4+Z3mk2EwinrNamHlzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:f0:18:72:2a:a6:85:14:34:bd:e0:ba:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=b94a20216e832da0ef557715d9ae1fede79b5ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:53:af:40:e5:16:ae:b8:36:a6:71:97:24:
20:df:1d:6a:87:00:fa:77:c2:0e:5d:78:90:33:4e:
8f:e9:78:59:54:a6:44:67:8e:04:bf:e8:ad:4e:d0:
0d:74:60:85:05:ba:d7:4c:1e:9f:81:32:e3:c3:08:
cc:f6:ec:9b:96:ab:32:20:25:97:9f:09:c5:c5:0e:
7f:e9:0f:e3:a6:d0:ff:8f:1a:97:bc:7f:6a:99:9b:
db:db:a7:30:c2:3f:ec:ef:f4:b5:ba:78:9a:cc:3f:
7f:74:64:0c:3f:23:e8:02:0c:5f:b5:6d:16:b3:ae:
6e:5d:67:8c:b3:15:da:0d:e7:07:1d:06:ec:7d:b3:
25:28:8c:0d:1b:3f:35:12:7d:62:c6:5a:9d:2a:0c:
6a:4a:4c:51:b2:54:4f:61:3e:ae:ef:7d:3b:a1:13:
b9:ef:6c:3c:c5:ae:c5:0d:1b:25:33:df:46:ec:87:
8c:e7:2b:f4:28:11:19:37:d0:4f:99:74:ae:07:4b:
7a:96:00:da:a8:e9:78:3a:d2:6b:03:06:43:ab:79:
38:92:7a:02:8b:d3:b6:12:42:3d:9b:6a:a9:89:f4:
d3:d6:48:fc:78:58:1a:45:02:ce:50:a7:7a:75:10:
07:ff:e3:46:76:85:05:9f:91:cb:5d:4f:32:6b:bd:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:20:21:6E:83:2D:A0:EF:55:77:15:D9:AE:1F:ED:E7:9B:5E:DE
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:45:95:72:82:ce:4b:df:2c:ee:f8:5e:6e:65:1a:f3:32:
7d:3f:21:7e:32:41:90:a8:2d:a3:43:6d:fb:c7:8f:11:e7:f6:
24:7b:8e:91:d0:d9:93:97:e8:a8:42:62:c1:dc:50:36:39:6d:
e1:a3:cc:31:f7:3b:8c:8f:37:cc:37:e0:55:21:7d:e9:ae:8f:
b6:c7:5c:ad:a0:0c:1d:53:fa:83:ee:1c:a6:b3:19:f9:e4:23:
e7:0f:bd:0a:f9:75:f6:74:fd:04:e3:5c:cf:d3:7f:64:dd:2c:
a4:92:fc:e9:ed:9e:7a:ea:20:54:6b:f3:35:64:b0:1e:6d:d1:
c9:25:e9:1f:2a:81:71:87:be:cf:d3:e0:c1:66:df:7b:31:71:
84:7d:13:9f:1d:c4:b1:d1:ba:39:f1:2a:cb:5f:37:46:af:9b:
d8:e8:f4:fa:d6:2c:a9:63:52:44:c2:7f:1e:f5:ec:6a:41:9f:
27:72:9a:3a:93:ce:3a:20:13:12:1f:c0:0c:10:6f:15:d4:ff:
4b:06:ae:3c:d0:0c:7d:a6:70:60:36:0d:4e:9f:81:1b:86:15:
5d:16:a5:36:02:22:a6:08:31:82:fe:8b:01:a3:32:a0:46:62:
29:c7:eb:69:bf:8e:dc:10:75:d7:86:17:04:52:bb:c3:ad:c2:
45:2f:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:17 2025 by rpki-client