Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: SRdTSwFzvon/d0QMWGo1Wyq6kDNWuS+W2u6V78wuy4g=
Subject key identifier: B3:43:F5:9D:14:5F:B6:73:15:9B:B6:1C:E7:F0:94:16:F1:13:D1:F4
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0197B77C5EB5CDDDD1F1609ACE238567C908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 108C
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: fV3gkQyci3oUHHBVp8oZbSDovlqmhOmoKN6zk63SAzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:b5:cd:dd:d1:f1:60:9a:ce:23:85:67:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=b343f59d145fb673159bb61ce7f09416f113d1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:cf:41:55:43:fe:54:56:8c:bc:2c:8b:ab:
ed:40:69:69:7f:73:a6:a5:7d:12:af:d2:df:50:ca:
18:59:df:08:8e:d4:2a:6a:de:3d:b0:c2:b8:14:5e:
59:27:d7:8d:be:c7:c3:8e:1f:fb:2a:ab:d7:e0:ac:
5c:c8:c8:d0:67:56:1a:2f:54:65:4d:ca:6c:26:7f:
bd:59:b4:27:65:43:d9:d3:a5:7e:6c:ad:86:d1:9e:
08:32:52:00:1c:7c:75:e4:fb:8e:c5:5f:1a:b8:5b:
96:84:29:18:80:f0:02:ba:77:40:0f:1c:22:a9:12:
aa:58:12:ae:ea:0d:25:0b:92:d2:64:0d:f9:07:7f:
f4:6b:c1:f7:7f:76:16:71:09:ac:f0:29:85:19:7f:
00:5c:9c:89:e4:a7:7e:77:a2:fa:07:92:d9:cb:58:
62:e3:64:6d:66:97:38:40:55:a8:0b:5f:f7:ab:29:
94:ba:3a:2e:72:a6:87:37:44:9f:30:f0:de:d9:41:
6c:12:e8:10:85:a7:45:2b:79:69:fd:ae:b4:88:cb:
af:fb:97:0c:e1:25:e2:63:b3:af:a9:97:34:ff:8c:
d5:e3:12:a5:7d:19:2a:e2:cc:ec:6b:7e:18:b8:63:
5c:11:bf:82:73:f3:70:46:c2:c3:14:3c:db:5c:73:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:F5:9D:14:5F:B6:73:15:9B:B6:1C:E7:F0:94:16:F1:13:D1:F4
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:b8:4e:fe:06:c6:cc:bf:5b:9b:8d:de:f4:26:fc:db:b0:
64:81:4c:dc:f9:6c:f0:10:1e:53:82:7e:33:8e:e8:83:77:87:
2f:86:57:e7:7d:c1:ae:60:d2:eb:b1:af:19:ae:16:65:a7:e8:
ca:c7:1f:37:b0:33:cd:5d:48:dd:98:9c:63:89:b9:23:47:24:
07:4e:1d:d2:60:47:39:50:1d:a4:0c:76:1f:e6:2e:eb:cf:44:
a4:c5:83:f9:61:5c:13:cf:17:50:f7:be:fa:a3:91:d1:7a:d8:
1f:ba:48:4d:99:c7:a0:74:27:79:5c:d5:9e:36:5f:0e:ac:8f:
90:7f:6f:c5:8c:0a:f8:4e:2b:0e:c8:51:cf:f6:d3:7a:8f:33:
50:ee:17:0a:d0:1e:5f:b4:11:26:56:ef:80:6b:e1:37:bb:62:
bd:f2:8e:21:9b:84:95:77:ee:f1:ed:44:db:21:b0:a0:01:5a:
15:5e:76:e0:76:17:0a:27:86:61:76:56:bd:8d:72:5e:a7:a6:
06:5c:b1:5d:d9:0d:84:dd:73:d3:49:a0:d6:5e:33:ca:95:ef:
c6:ae:19:0a:06:98:ba:7a:80:85:7a:fe:7b:0b:94:c0:fa:1a:
5e:5f:cc:2f:97:a8:c6:57:d3:c6:0a:40:cc:d1:11:ee:ec:6c:
1f:53:ae:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fF61zd3R8WCaziOFZ8kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjUwNjI4MTcwMTEwWhcNMjUwNjI5MTcwMTEwWjAzMTEwLwYDVQQD
EyhiMzQzZjU5ZDE0NWZiNjczMTU5YmI2MWNlN2YwOTQxNmYxMTNkMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TPPQVVD/lRWjLwsi6vtQGlpf3Om
pX0Sr9LfUMoYWd8IjtQqat49sMK4FF5ZJ9eNvsfDjh/7KqvX4KxcyMjQZ1YaL1Rl
TcpsJn+9WbQnZUPZ06V+bK2G0Z4IMlIAHHx15PuOxV8auFuWhCkYgPACundADxwi
qRKqWBKu6g0lC5LSZA35B3/0a8H3f3YWcQms8CmFGX8AXJyJ5Kd+d6L6B5LZy1hi
42RtZpc4QFWoC1/3qymUujoucqaHN0SfMPDe2UFsEugQhadFK3lp/a60iMuv+5cM
4SXiY7OvqZc0/4zV4xKlfRkq4szsa34YuGNcEb+Cc/NwRsLDFDzbXHOPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLND9Z0UX7ZzFZu2HOfwlBbxE9H0MB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvK4Tv4G
xsy/W5uN3vQm/NuwZIFM3Pls8BAeU4J+M47og3eHL4ZX533BrmDS67GvGa4WZafo
yscfN7AzzV1I3ZicY4m5I0ckB04d0mBHOVAdpAx2H+Yu689EpMWD+WFcE88XUPe+
+qOR0XrYH7pITZnHoHQneVzVnjZfDqyPkH9vxYwK+E4rDshRz/bTeo8zUO4XCtAe
X7QRJlbvgGvhN7tivfKOIZuElXfu8e1E2yGwoAFaFV524HYXCieGYXZWvY1yXqem
BlyxXdkNhN1z00mg1l4zypXvxq4ZCgaYunqAhXr+ewuUwPoaXl/ML5eoxlfTxgpA
zNER7uxsH1Ou6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:28 2025 by rpki-client