Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: XCGwb5SSoqX5ELseuZ9EosJw7Kb9uuENm/G5CafhaEc=
Subject key identifier: 14:28:45:41:71:42:4B:AD:30:F5:AF:3D:41:8A:9A:E4:44:FB:0E:31
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 0198D473ED09FCA2CBA04E20221F3296E0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 06E0
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: XCmwfEpPeacpt2+kn/Pyp0kzDqHpkej+ZuwlMlTVZf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ed:09:fc:a2:cb:a0:4e:20:22:1f:32:96:e0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=1428454171424bad30f5af3d418a9ae444fb0e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:64:ed:e6:c0:c5:bc:17:ac:64:e4:32:60:
46:62:36:4f:b3:51:6b:85:a8:d3:68:2f:5b:9d:cd:
cd:3c:90:ca:ed:4a:27:b2:51:c3:61:41:3a:dd:42:
25:d9:d1:d5:65:2a:d4:c1:41:fe:48:08:e7:5f:b9:
ef:ed:30:53:28:72:ff:27:fe:cb:fb:ca:1d:f4:05:
bf:21:d0:6c:03:a4:bf:1c:f3:1e:cf:df:52:e5:a4:
cb:b8:98:4e:3b:e9:8d:97:c1:9c:35:fb:96:29:bf:
de:30:73:b7:4a:e1:bb:22:f9:e3:65:e3:5e:6c:5a:
b7:ae:78:df:52:15:88:57:78:c3:35:67:2e:3f:6e:
1d:bb:b3:52:41:62:53:7f:63:a7:d6:6e:67:0d:56:
7b:88:82:bd:36:3f:75:07:b2:d1:b3:10:85:13:96:
eb:d8:59:a7:0f:85:c7:df:91:8b:2a:a1:40:50:32:
96:ed:c1:c2:42:26:9d:c4:30:f1:2b:f0:b2:e0:61:
6c:8f:b2:86:1a:fb:bd:1e:ba:e0:0a:b4:09:5a:b0:
d9:1c:4d:0b:00:f8:e4:52:68:aa:51:fa:3b:d8:04:
4d:49:0a:c8:3d:69:46:ff:4b:b7:80:ea:b2:db:e1:
c2:99:49:c7:36:1a:83:5d:d1:57:af:a0:62:ca:be:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:45:41:71:42:4B:AD:30:F5:AF:3D:41:8A:9A:E4:44:FB:0E:31
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2a:fe:df:c4:95:b1:82:57:37:72:60:bc:8a:fe:c5:39:fe:
71:44:3c:b7:50:7e:bd:f0:d8:39:90:08:3f:51:f4:2f:01:66:
a2:24:90:4c:f7:f4:42:3d:1c:ee:0e:6e:7b:95:32:da:eb:7f:
a7:7f:78:50:70:7d:81:ff:38:32:18:c1:c8:76:84:79:33:c2:
75:58:b3:85:65:25:c0:48:88:ef:9a:f7:dd:e0:27:c9:fb:77:
b3:c9:ce:64:ee:42:78:31:4c:53:1c:ea:99:0e:38:9d:60:9b:
01:5d:21:80:28:88:45:25:49:10:e7:56:57:e6:53:b0:cf:58:
23:fd:45:63:29:9e:90:cd:e4:cf:9f:ba:98:f8:c1:05:7d:ca:
e3:50:0f:d5:af:e5:9d:b1:f7:d2:cd:54:35:e9:c8:ef:58:8c:
40:37:cf:56:27:6c:25:e6:1b:fe:a2:75:40:b8:97:cd:ef:7c:
30:97:67:e8:71:fc:aa:3a:a0:81:cf:e1:ae:25:75:ab:a2:cd:
62:66:58:16:3d:2a:d3:f4:41:d8:cb:e9:3b:c6:a0:e0:84:8e:
60:26:bb:61:0e:f7:fb:62:c6:44:e6:73:93:c6:7e:ec:11:6f:
dd:63:c0:6f:d4:e9:9c:d5:47:17:e9:77:c5:fd:70:5e:c4:a0:
17:d7:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:53 2025 by rpki-client