Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: o0ThcreX+rxHLgjJGMgTZ4d2P7LLRFlqCUMG8Vg2u9Y=
Subject key identifier: 4B:7B:D8:36:12:06:4C:AB:44:F2:C2:2B:1F:D9:41:80:CA:A0:5A:FB
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 0197B70E5E650F47A116EE46A256F05D1624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 0583
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: WziYZQTgG6uYWNEdvqwQxarVou4.roa (hash: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: HvlFR6Ha8o9VPPjBeJWOnPy7M1ca1iHHr9fPeKDMiKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5e:65:0f:47:a1:16:ee:46:a2:56:f0:5d:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=4b7bd83612064cab44f2c22b1fd94180caa05afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:1f:01:20:e3:76:41:ff:29:f1:f1:92:41:
8c:91:c4:3f:9d:d6:af:bb:c7:3b:9e:79:cb:09:19:
a6:8d:f9:23:5b:7e:19:39:07:82:47:20:9b:ed:f2:
8c:aa:3e:39:f8:14:1f:bf:99:d2:e0:4f:b1:49:fa:
74:0e:df:bb:8e:c7:9d:d2:81:6e:40:8b:27:fe:b0:
e9:8d:3f:4d:0c:83:61:05:96:62:d1:c5:fa:75:fb:
87:92:64:02:43:46:b4:65:31:c1:ca:83:bb:8a:04:
a1:50:ef:1f:fb:d1:7f:36:e7:e0:2d:7a:f0:67:8b:
a3:7b:16:d7:c3:27:c9:65:43:77:24:58:df:73:76:
10:13:c3:28:e7:af:5f:43:a3:a9:8e:d4:72:22:09:
81:30:c9:7c:33:84:cb:b3:bc:95:68:44:35:a9:1a:
1a:dd:c9:bb:83:d5:15:45:8d:75:98:03:55:e9:87:
72:42:e5:1c:12:ab:b4:fa:a2:6f:92:f8:f3:fb:90:
19:00:7f:02:93:cd:33:f4:e2:71:9f:9d:5b:ae:cc:
ce:42:f5:db:f1:3a:e5:b3:af:5d:d8:04:91:67:ec:
d0:b2:b8:5b:4b:1e:ec:2e:42:88:60:69:df:1c:48:
15:42:09:02:e3:82:ae:8c:17:6a:1d:46:af:32:5b:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:D8:36:12:06:4C:AB:44:F2:C2:2B:1F:D9:41:80:CA:A0:5A:FB
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:31:d2:5a:45:8e:92:93:39:8d:5d:22:5e:f3:d2:a8:39:63:
e7:13:6c:dd:d5:63:ee:cc:ce:25:cd:1a:51:e0:ed:ff:38:e8:
f2:a4:c7:32:5e:82:4f:bc:06:12:54:50:5e:8c:e6:3c:19:26:
81:87:6b:06:75:6a:2b:a8:50:ef:f7:b2:e4:d4:81:2b:40:d2:
8b:91:97:94:56:e3:20:95:2a:54:e9:1f:a5:39:0d:fa:3c:51:
10:4d:51:a6:9f:6a:01:a3:a3:ec:4c:85:c1:05:78:c0:ef:de:
26:3b:67:78:de:b2:11:2a:31:03:99:f3:94:0f:88:dc:69:46:
84:fa:76:6a:dd:cc:96:6f:e6:ba:14:f4:86:68:5a:d5:59:b6:
c8:54:7b:fa:32:bb:1a:c3:50:53:f5:63:04:57:7e:c0:67:58:
af:b5:ae:65:e8:8a:05:ff:1d:4d:f4:7d:e1:e5:e5:25:cc:d8:
89:bd:f6:16:36:a6:7e:7b:8e:6f:8e:cb:72:15:fc:87:6b:5e:
f4:50:37:6d:dd:a7:b1:a4:18:93:16:9a:48:39:1e:2e:dc:f5:
68:29:6a:36:59:85:ab:6f:97:23:cb:f7:73:1c:7c:ab:09:7b:
8c:83:06:20:fe:c6:03:31:d3:b5:8c:55:cf:27:b0:90:9b:0b:
dc:c7:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:47 2025 by rpki-client