Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: XOU3E01nBA+u8KRMLXqCKg7UMfOQSK+1llk5RYuJpVQ=
Subject key identifier: 07:09:D1:97:19:C8:86:51:D7:71:2F:04:B2:59:7F:67:FF:FB:5B:FE
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 0197B6A0722E7D0D37EE092D1F6534371751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: VgXpiG3MGaT7nbf61pkgwVKotBHjPWRBhlyM797WdFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:72:2e:7d:0d:37:ee:09:2d:1f:65:34:37:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=0709d19719c88651d7712f04b2597f67fffb5bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:2d:b6:f5:2e:05:c3:b3:7c:98:f2:97:2b:
55:5a:cb:00:54:ea:93:eb:df:76:93:92:c7:dd:91:
a5:56:6d:ed:a8:9f:93:8d:9e:de:9d:b1:c5:b9:4b:
5e:92:01:58:05:2e:2c:d1:d9:43:e1:47:96:ca:d3:
b4:f2:f7:67:c7:18:c3:2f:ee:bc:ea:38:cd:d3:5c:
1d:21:d7:20:46:41:09:8b:a7:db:04:5e:ae:e7:34:
ab:d4:3d:79:87:4c:08:5c:08:b2:ea:e3:a5:92:1e:
d4:e2:a7:d8:0f:a4:b7:8a:0d:a4:a5:f2:04:36:20:
6c:18:8a:f1:5d:10:1e:ed:42:c1:ad:30:ce:b1:f2:
d6:0c:a1:68:13:62:6f:4d:d8:80:ba:05:e6:2e:a1:
d7:71:4e:68:a7:60:d5:5b:00:32:6c:6f:3d:c0:3e:
20:9d:2c:b6:61:56:6f:c6:4c:65:8c:11:13:9b:d5:
62:5e:bf:b3:47:4e:08:51:00:52:f2:8c:c1:f1:be:
08:ee:6c:91:be:97:65:88:b4:af:28:7e:25:4d:6a:
1b:33:ab:50:55:2e:51:a1:89:97:01:3f:8c:6b:7b:
4a:32:ff:be:c3:8d:05:ac:bc:eb:ec:0a:21:1a:aa:
c6:e7:2a:19:ba:39:9c:8e:5c:b1:1c:7c:4c:42:a0:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:09:D1:97:19:C8:86:51:D7:71:2F:04:B2:59:7F:67:FF:FB:5B:FE
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:dd:df:df:44:cf:62:0d:dd:7e:16:f3:87:67:12:03:4e:
99:5f:5e:de:2a:11:52:7b:29:35:56:b5:9a:52:4a:6e:df:a9:
47:eb:5e:9c:a1:0d:ae:27:fe:f3:f8:e7:7b:2e:6d:e9:49:ab:
cf:27:c3:63:a4:9f:e9:f4:b8:5c:a0:6c:bf:91:3b:b8:5c:e8:
c6:07:c0:70:ac:12:72:4a:c2:2e:1e:29:91:15:84:04:60:21:
1c:a5:19:c7:ef:79:1b:d4:6b:17:31:06:a6:60:c8:68:9b:25:
f9:f6:8d:63:a2:03:63:07:57:ac:dc:6a:df:9b:97:74:e4:73:
99:8b:be:6f:a9:29:62:bd:ac:28:3f:3c:c4:44:e2:d9:67:f4:
ae:74:7a:b9:ab:e3:50:a8:d7:fe:c2:42:29:0c:f3:ee:a7:31:
a0:a1:50:e5:f5:26:b6:8e:ed:9d:45:b2:4a:7a:bd:23:67:50:
1a:4f:8d:b5:b7:2f:9b:3b:85:9b:74:85:ed:64:7c:99:e9:4a:
b1:d6:a5:46:6d:9d:ff:c0:90:d5:ef:42:c4:3f:df:9a:c1:89:
1f:5e:07:75:5b:3e:ad:02:30:85:2a:f2:f3:67:07:d3:99:91:
cc:b3:ca:96:03:91:88:b4:2b:95:4b:c7:c3:68:34:08:10:38:
83:df:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:57 2025 by rpki-client