Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: rpCvKntbjd1vmyOhhc8Y/8kFtY1mk1vDAotf3x2I3tc=
Subject key identifier: BE:67:BC:5E:F0:8C:07:7E:34:B4:77:C4:AD:BE:E6:8F:19:B1:0E:24
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 0197B70EC5787440BFE474C438E52651A5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 148C
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: Uu21jPZJWuiTge2TnbVbfWBy0PJUDDCruYcVlSaPyeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c5:78:74:40:bf:e4:74:c4:38:e5:26:51:a5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=be67bc5ef08c077e34b477c4adbee68f19b10e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:c4:c5:76:07:ce:aa:bf:06:84:56:eb:40:
a4:d6:94:c5:89:24:e2:76:7c:cd:32:36:91:1c:5f:
e9:56:f6:83:e3:72:41:5d:c2:d3:07:02:1e:71:11:
52:54:ad:53:88:3a:e9:e8:ff:eb:26:5b:c4:f5:b9:
1e:ba:3a:f4:10:24:75:98:b0:aa:0e:76:de:ac:1f:
9b:6f:da:b2:56:bb:b2:8b:b0:f5:f6:71:cd:21:cf:
72:50:05:d3:7f:c6:65:25:87:11:d9:af:e6:b8:cd:
0d:97:06:dc:3a:04:71:31:d1:5c:16:bd:e0:d7:16:
a2:e1:30:d5:9d:e0:d3:69:96:23:35:b2:b4:d5:90:
25:fe:48:d2:4f:59:bd:27:56:6b:34:51:a1:2b:6f:
5e:07:f1:0f:69:3a:e0:e7:78:dc:dc:25:22:00:09:
67:a3:5f:c1:73:43:3a:29:eb:02:1a:c9:1a:95:63:
34:f2:04:93:c2:69:21:71:e3:d0:6a:5d:d5:8f:a9:
56:f6:f4:07:c7:07:20:3c:48:46:d2:98:03:d2:48:
b3:8e:3e:3d:9f:ee:99:9a:4c:4a:de:01:d5:98:2e:
0c:98:7e:86:d8:c4:27:df:53:9d:3e:be:2d:b6:1b:
7e:66:0e:a5:ad:46:3a:3f:37:1a:6b:42:c6:05:9c:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:BC:5E:F0:8C:07:7E:34:B4:77:C4:AD:BE:E6:8F:19:B1:0E:24
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4d:2c:a0:59:b2:40:72:98:86:4d:31:44:2d:4c:8d:ef:a5:
7f:ec:5b:c7:3e:32:18:31:8a:bb:59:95:91:0b:91:fe:8c:e0:
a1:6e:d6:d6:01:d7:5b:bc:fc:83:db:42:04:c3:f1:8f:42:c0:
90:70:c3:b3:ad:12:46:d9:8c:5c:9d:b5:15:09:de:7e:5f:ac:
a3:59:c1:43:28:4e:95:69:60:97:04:fd:34:b5:31:5d:1e:30:
bb:c2:d5:0a:8c:04:f7:ac:52:76:92:6e:82:cf:a0:97:5a:c5:
95:b8:78:54:12:2a:ba:00:f7:8c:e8:c6:dd:59:75:aa:fb:c3:
9e:a9:24:22:82:d0:12:92:3d:5b:a9:c0:71:67:7e:26:1f:b9:
db:57:08:3a:ef:f9:23:1e:82:7e:7f:6e:e7:15:fa:80:c5:2e:
df:76:4f:07:9c:56:89:75:87:75:02:1b:1e:a4:80:e7:79:76:
76:30:cb:23:75:d1:21:6b:95:89:17:d5:49:07:41:cb:7e:33:
52:c6:f1:45:bc:22:1f:6f:0c:e5:61:ca:c6:33:be:e2:97:e5:
e8:55:c1:47:36:e1:4b:d1:3a:fd:43:c4:ba:81:a8:94:4d:c9:
6e:54:d9:23:cb:55:2e:5d:78:b8:8b:31:d2:79:33:ae:db:b9:
66:a0:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client