Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: 4sH06T4kfxOt+PeU/MZqqeHisuEOIl0IFoTa0qy1LMc=
Subject key identifier: 83:84:EC:AE:43:8D:92:05:C8:B7:75:AD:02:BA:5B:90:EB:17:2B:DE
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0198D73B5436F1522A2F5371A8D2E80D24D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 1121
Signing time: Sat 23 Aug 2025 14:00:46 +0000
Manifest this update: Sat 23 Aug 2025 14:00:46 +0000
Manifest next update: Sun 24 Aug 2025 14:00:46 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: nEXTAIhthp4sjHDMcHWbpfzROF2lsGz67XJfOqympck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:54:36:f1:52:2a:2f:53:71:a8:d2:e8:0d:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Aug 23 14:00:46 2025 GMT
Not After : Aug 24 14:00:46 2025 GMT
Subject: CN=8384ecae438d9205c8b775ad02ba5b90eb172bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:ff:78:a4:b8:51:47:77:68:21:17:a5:04:
f4:c8:7a:02:e3:62:fb:67:ea:2f:c7:21:02:a4:12:
ad:f0:8c:1b:02:62:ed:78:18:59:9c:f7:dd:59:06:
c9:2f:f1:74:33:e2:8b:af:fc:22:5f:d2:10:7d:e4:
b8:4b:f0:dc:e8:2c:cb:ed:b9:1b:c5:79:61:55:b8:
c5:86:42:7d:78:d5:0b:7a:12:c9:d7:9c:de:88:dc:
8c:b4:d9:2a:12:a4:97:5c:fc:14:1e:93:2f:86:32:
3c:b0:e5:9f:e0:28:09:24:e3:cd:93:fd:bb:27:ae:
ef:5c:06:e1:2d:6d:ff:95:7c:a5:75:a8:0b:d3:03:
16:28:17:5d:60:47:74:79:95:31:87:97:0c:fc:02:
e6:1a:16:c9:21:07:c8:34:04:24:53:55:53:4e:80:
c2:3a:2d:76:37:91:36:20:4b:da:9a:b7:01:ae:39:
9a:24:a1:1a:e9:af:b1:b5:87:c4:7a:56:be:fc:16:
02:d6:c4:f9:40:03:41:b6:d4:a6:e7:9c:f5:ed:4a:
ee:92:0d:6a:52:c9:b7:14:33:a9:54:46:cf:16:b0:
07:04:ef:aa:56:78:68:65:1a:88:c3:37:61:64:31:
28:f4:7e:ce:6f:b7:bb:0e:f2:e4:a4:52:40:8b:36:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:EC:AE:43:8D:92:05:C8:B7:75:AD:02:BA:5B:90:EB:17:2B:DE
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:b5:03:9f:32:65:1d:c5:4d:a6:ae:9c:36:ef:e4:49:cd:
a8:86:86:b5:b8:2a:55:a1:a1:a4:b0:dd:53:6b:db:9f:3a:4c:
61:9e:12:c8:37:83:b6:13:d0:b6:6c:64:98:eb:e4:ae:7a:55:
18:66:7b:68:93:97:e8:28:ed:53:fd:f2:4d:54:57:22:b0:63:
e6:2d:e6:11:49:8b:0f:52:1f:77:36:a0:43:ba:ad:ad:b9:19:
78:0c:47:e7:ac:d6:a0:a5:62:11:8b:5c:cb:a6:a0:85:3b:15:
b9:7b:c8:47:a7:21:8f:d5:86:bb:7f:b5:1c:85:12:5f:a8:2c:
bc:22:0e:c2:1d:cd:89:28:e3:1a:1b:cf:85:af:06:fb:30:ba:
1c:57:1b:e2:36:3e:be:fa:0e:80:d8:28:59:c6:1a:7d:9e:cc:
44:17:75:19:90:8e:f3:ba:9c:b0:09:bb:73:7f:3d:e6:07:61:
52:30:82:a1:22:4f:9f:d3:58:6c:e8:c7:52:54:4e:41:1d:34:
c6:0a:78:0f:2b:87:dd:fc:18:e3:7e:2a:aa:06:60:33:d2:c8:
65:07:20:4d:ec:be:6e:96:05:48:b3:e5:9f:e7:89:32:65:8d:
47:61:d4:37:5e:67:ad:dd:dc:49:2a:ec:62:55:83:2d:3d:21:
c5:35:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:09 2025 by rpki-client