Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: H85VmNLrSUpoZDf+3F2ub/y1B/Zj5zqoc5ZbC61yhhk=
Subject key identifier: E1:D2:A2:77:E6:21:0A:8B:28:D2:D1:A8:08:C2:F4:0C:D9:3F:3E:81
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 0198D4DFF1937491CFB3A3978B8FB7FE191A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 1520
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: g0Pu7VFR+moMUXLsQ2llLdZDoJrjAUO8QgyIJPUPolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f1:93:74:91:cf:b3:a3:97:8b:8f:b7:fe:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=e1d2a277e6210a8b28d2d1a808c2f40cd93f3e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:ca:ab:01:95:6a:20:67:d8:4e:26:21:22:
65:9c:a8:f8:73:bd:b1:80:47:ef:05:b9:53:77:e4:
93:fd:d9:46:10:1c:47:d6:58:cd:a7:0c:1e:8a:76:
81:8a:e3:e0:c7:da:fb:df:82:0c:6d:5d:51:94:75:
48:d6:9f:8e:25:e6:0e:e4:47:b6:df:5f:d0:2f:b4:
00:a2:0e:be:9f:de:3f:4d:f2:f7:85:63:55:b0:bf:
88:7b:69:b7:5d:6b:8d:2b:57:df:b8:50:65:e4:2c:
c6:57:55:6f:e6:59:b3:a9:64:50:70:84:8b:dc:1d:
2f:5f:2b:9f:b9:11:6c:92:7e:d8:91:69:7a:a7:1d:
31:82:18:a2:7b:86:ad:fd:85:d2:c9:59:02:a1:40:
8a:ad:9b:39:9a:e1:e4:bc:69:93:16:d1:a6:cc:88:
2d:cd:80:41:ad:4a:fb:83:f6:f6:99:9c:cb:e8:38:
36:76:49:45:a0:72:2c:60:aa:e2:1f:a1:4e:42:ee:
4d:bf:83:c2:df:c3:4b:34:fe:60:ed:5d:eb:a2:a8:
c0:d7:6d:2f:97:e1:ca:ab:68:95:5d:b9:cb:aa:f8:
7d:e5:74:4f:35:6d:f1:47:fa:6c:02:2a:dd:63:6f:
08:c9:b0:25:de:68:9b:73:64:34:d2:26:65:e6:dd:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:A2:77:E6:21:0A:8B:28:D2:D1:A8:08:C2:F4:0C:D9:3F:3E:81
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c8:6c:ac:5d:dc:bc:fb:63:cb:82:c0:20:39:d2:ec:f5:ec:
f7:cb:62:7c:19:1d:50:db:39:ca:70:0f:4d:4b:51:c8:d8:13:
b1:2d:85:e5:47:d8:6b:ac:fd:8c:34:bf:bc:92:59:c8:c8:e9:
18:da:39:47:b8:df:5e:56:98:42:26:c6:5d:51:5e:67:25:2c:
30:06:14:1d:ef:ca:39:ac:67:d0:5d:70:eb:6a:8e:ff:d8:2d:
a9:ab:18:29:7e:4f:9a:a5:5c:e3:60:96:d6:22:f7:85:d9:28:
d4:fa:54:e8:e0:18:fc:46:84:dd:08:6d:e1:ef:19:ff:b2:64:
47:f1:e4:12:58:37:f6:8b:16:5c:0c:0b:06:ca:c0:43:68:42:
c0:97:31:0a:9a:91:f1:69:00:32:e6:f7:eb:a8:16:ce:8c:80:
28:93:cb:96:f5:52:9c:7b:31:2c:a1:4f:c2:bd:e1:c6:ee:0d:
4b:83:4a:09:3d:b9:8d:1e:df:c3:3e:6a:18:3a:6a:bc:1b:19:
c2:94:5c:94:0d:01:c6:d0:d2:73:c6:21:62:d3:a0:c3:77:a3:
d2:9a:33:98:af:f5:30:8d:de:a4:0c:0c:09:25:72:86:70:61:
ca:99:3b:86:25:68:33:8a:cd:f1:3e:76:03:3f:ac:46:55:e4:
22:22:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:17 2025 by rpki-client