Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: lLxSPkB5YqlX2Uwb3GBLO/esiH/w2YH2QjADK4Q69Gk=
Subject key identifier: 1F:65:14:BC:E2:42:6E:A0:98:5F:29:8F:25:D6:11:41:24:74:7D:41
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0198D5836A9D0290A13B839C8A2DE32202E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: UbXe58wLWtBlQU7cjB6Z8qvr8JermbhFC+h2ot4bZ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6a:9d:02:90:a1:3b:83:9c:8a:2d:e3:22:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=1f6514bce2426ea0985f298f25d6114124747d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:39:5a:4f:ac:72:8b:0e:02:3e:5f:f0:dd:
8f:73:9f:81:2c:fb:66:a1:0f:65:a1:8c:5d:b0:d5:
88:4f:6c:c4:e2:6e:ce:51:24:89:1c:2e:76:2f:1b:
4a:66:32:3c:21:cd:44:f5:24:3e:cf:42:03:54:46:
26:7e:7e:87:d9:b0:03:ef:46:cd:0a:c8:b4:24:b1:
da:89:8d:f1:6f:7d:cc:9f:f0:15:08:89:ed:7f:61:
55:e3:f7:3d:f3:22:f8:96:06:92:62:84:18:cc:48:
42:20:21:26:c6:cd:7f:fb:67:61:3a:c2:aa:71:72:
e4:94:d0:9c:01:c0:e1:22:f1:e5:01:22:e0:e2:fb:
ad:09:b7:7f:9a:7e:49:60:6c:35:55:8f:06:6a:7f:
90:c3:4d:0d:a3:c1:09:c1:5e:24:27:84:b3:25:da:
50:d8:d5:64:2c:00:65:51:5c:34:bf:0f:9c:9e:21:
86:fb:3b:2e:03:80:33:ae:f3:90:85:7d:18:1e:56:
9a:36:82:8c:75:6d:4a:3a:b1:17:e1:56:ab:27:b7:
d3:c9:58:da:1b:7f:8c:4d:db:db:44:24:a5:a5:dc:
10:8d:f6:d9:a3:9e:44:af:df:b9:53:7b:6a:92:a5:
0e:42:fd:ac:4f:3f:96:64:26:9c:ef:7c:8f:8f:f0:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:14:BC:E2:42:6E:A0:98:5F:29:8F:25:D6:11:41:24:74:7D:41
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:63:ed:08:ae:bf:06:c3:c9:95:dd:8a:82:50:6a:ca:94:
58:05:ea:11:90:ca:bc:c9:39:e0:72:07:4a:11:ce:8b:6c:77:
0e:6f:10:25:2c:ba:af:83:54:7a:10:90:d5:67:5c:32:95:9b:
1d:92:a1:b4:f1:36:cb:8a:b6:1e:2f:d4:4e:91:4f:50:01:dc:
cb:61:20:ac:db:48:16:eb:27:9b:23:b5:b7:69:4c:72:f9:6a:
30:7c:42:ef:3d:85:e2:b0:47:65:e8:cb:69:16:a3:40:54:fc:
8a:17:9e:b5:90:cf:41:80:0f:7f:5f:94:69:2b:32:95:8b:72:
c9:0b:18:93:0c:8a:3d:c9:ca:14:09:c1:9f:4c:86:80:64:3e:
d8:0a:10:dc:63:38:4e:04:e8:1f:4a:9c:69:82:f8:9b:71:25:
6d:03:7f:1f:ff:d2:08:91:00:55:6d:94:a1:13:a0:fd:41:35:
91:e7:f2:dd:ab:11:a3:cf:e6:2d:69:66:7e:57:aa:00:5f:ff:
83:f7:4d:55:d2:ab:94:67:8d:c4:7a:04:c8:cd:ad:28:e0:54:
33:13:6c:b2:48:76:a4:6a:1b:39:a8:ae:2c:e5:01:64:be:26:
bb:c0:47:52:6c:f1:28:f4:ad:1d:da:be:40:40:1a:eb:83:e0:
11:97:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:26 2025 by rpki-client