Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: n7CnjuvELZKeqlZ+rGPKqCmTMaX9PvrQ9DuPh588jyc=
Subject key identifier: AB:51:41:73:F2:35:8D:8D:51:07:A4:A1:59:20:CA:9F:74:5D:2D:52
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0197C15B6A62A893F98C8FFD5C6588ABA6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 0395
Signing time: Mon 30 Jun 2025 15:01:23 +0000
Manifest this update: Mon 30 Jun 2025 15:01:23 +0000
Manifest next update: Tue 01 Jul 2025 15:01:23 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: xc8GS803WtTUTZXGgguJst+aLaf1TN7Z02g2JBytVw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:6a:62:a8:93:f9:8c:8f:fd:5c:65:88:ab:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Jun 30 15:01:23 2025 GMT
Not After : Jul 1 15:01:23 2025 GMT
Subject: CN=ab514173f2358d8d5107a4a15920ca9f745d2d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:20:a7:c1:08:a9:84:46:c1:20:2e:d0:68:
04:20:1d:62:b6:9a:ed:4e:79:ab:0a:d1:e1:0f:b1:
d8:31:5b:08:04:b0:13:1b:31:ff:bf:64:cb:8c:ed:
02:2e:5f:98:b9:c3:f9:f3:fb:5a:7a:da:9a:0d:78:
c5:62:a9:25:89:f0:40:af:a3:7d:91:42:2b:ce:03:
0d:be:0e:27:1c:9e:ba:49:d4:2c:b6:bd:c3:8c:c0:
bc:20:98:9b:cc:65:39:c6:68:01:7f:43:1f:dd:0c:
76:dc:39:de:94:72:c1:d0:c3:8c:46:d3:d0:8c:f5:
5a:82:ee:59:54:fc:4a:fe:50:cb:78:b8:22:6e:01:
48:bc:f0:55:61:87:bb:22:74:dc:10:05:15:ef:66:
5b:c4:e0:79:c5:64:e5:84:0a:66:f8:0a:cd:6c:d9:
ce:21:05:74:6c:14:5a:20:bf:25:f1:aa:35:64:58:
53:37:66:b2:3c:e6:6b:80:07:c5:55:34:05:f0:c4:
40:61:1c:d3:9f:50:68:fc:0e:78:22:35:c0:78:59:
b9:91:7d:29:07:78:6a:19:23:7b:12:ff:58:5b:b8:
87:c3:e0:61:eb:18:cb:73:b1:b5:30:6c:5e:bf:04:
4a:ab:58:88:c1:6f:55:b5:72:fd:51:b5:f9:57:da:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:41:73:F2:35:8D:8D:51:07:A4:A1:59:20:CA:9F:74:5D:2D:52
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:f6:97:8b:a2:e6:1f:c3:c6:fc:ba:ca:c2:45:1d:79:2d:
12:80:85:6d:fd:e6:31:e5:c3:ba:e9:57:98:df:f6:48:e9:44:
c1:56:ac:d8:b1:ac:de:dd:ef:74:e5:89:bc:ca:3e:e2:48:28:
c8:50:34:69:93:36:a1:7d:3a:a3:f4:03:85:f9:c5:6f:0e:c1:
aa:10:e3:25:6f:0b:0e:bd:26:3e:b5:71:72:5f:a4:25:8b:96:
6e:2a:cd:5a:80:af:d5:11:e0:91:2e:44:3e:82:d5:5a:75:f1:
19:48:53:04:7a:3e:d4:64:a2:6b:5f:21:e9:b7:50:db:37:09:
45:93:66:68:5c:1f:19:b2:06:0b:de:38:80:0d:99:10:9c:6b:
97:d8:07:0d:55:7b:40:d7:ad:dc:e6:92:01:6e:95:bf:b7:87:
19:79:e2:95:2c:cd:e9:ec:52:74:51:e2:e7:65:0d:b1:6a:4f:
8d:6c:f7:89:dd:d2:d8:54:09:95:05:31:ed:af:f9:40:29:d7:
e4:5e:90:c9:0b:00:3f:b3:58:97:03:84:e0:a4:b6:42:9a:06:
35:5d:c7:a5:5a:0e:44:13:82:33:b6:87:1f:94:3a:1a:bd:e4:
d5:29:d9:85:cb:ed:8c:ef:10:29:c3:7c:fe:d1:e1:4a:79:50:
da:fd:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:20:29 2025 by rpki-client