Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: MSTAXEjoltpIgDiAoA00cKPGkdY4pK34B6dv4S/N4fU=
Subject key identifier: 31:10:D3:17:18:31:AB:E0:B1:37:74:5A:33:77:CA:5A:E1:A1:C5:D3
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 0197CA958F3387D4DC4CC9145DD6C8F30222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: BD
Signing time: Wed 02 Jul 2025 10:01:28 +0000
Manifest this update: Wed 02 Jul 2025 10:01:28 +0000
Manifest next update: Thu 03 Jul 2025 10:01:28 +0000
Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: LluEpFDe0DQieporgjCKZa0Dau3BG7Q6tqaePMjSv6I=)
2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:8f:33:87:d4:dc:4c:c9:14:5d:d6:c8:f3:02:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Jul 2 10:01:28 2025 GMT
Not After : Jul 3 10:01:28 2025 GMT
Subject: CN=3110d3171831abe0b137745a3377ca5ae1a1c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:5d:4a:d3:c9:24:14:28:3f:f8:e8:92:e3:
ca:23:39:a9:e5:37:f2:43:8f:e1:02:6f:12:9f:f1:
c4:8a:f5:22:83:9e:0d:e2:18:50:59:09:be:08:76:
ee:3a:a8:8e:0f:e6:e6:ec:9b:97:ec:d4:a3:72:0a:
09:4a:98:d5:a2:04:8a:83:39:d9:b3:1a:c0:b8:3c:
66:51:ab:08:c9:12:90:1f:80:79:b7:9c:24:ad:ab:
19:22:09:63:de:a2:a3:29:aa:da:fc:92:41:58:8e:
27:5c:bc:c0:61:c9:8f:47:d8:85:f0:aa:7d:05:8f:
a8:a3:f1:2f:ce:dd:30:df:a4:0a:ca:0f:31:5f:a3:
bf:2d:1b:c3:56:a2:de:86:51:a6:90:ca:b7:d8:09:
91:99:a7:07:f6:79:f1:94:27:52:4d:85:88:ab:11:
dc:b1:e7:9e:85:98:51:ae:40:4f:dd:66:57:16:bc:
27:70:e1:14:35:94:19:21:28:81:cc:f2:d9:29:00:
0e:ec:a1:fb:5b:6b:f8:29:63:2a:60:bf:eb:64:17:
17:44:a7:98:71:95:aa:bb:1c:e2:44:04:43:57:32:
15:92:44:90:6b:c3:ac:79:f5:28:82:ec:af:3f:86:
ee:46:38:42:9f:5e:15:cb:f3:34:f1:87:53:55:22:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:D3:17:18:31:AB:E0:B1:37:74:5A:33:77:CA:5A:E1:A1:C5:D3
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:bd:ec:07:b9:aa:80:bf:fb:3d:db:32:f0:88:49:e3:32:
18:80:6c:72:5f:29:d7:fe:f3:2c:c8:9d:c0:9e:47:a6:f3:ea:
c1:2c:b6:a7:39:b1:b7:6d:9a:d0:16:0f:5f:8f:38:1e:47:ca:
f0:68:38:57:ca:7a:1d:4d:d0:f3:4e:9a:2f:9c:7c:5a:dc:af:
56:9b:6e:9f:ac:af:f2:83:06:88:74:ae:be:f1:85:6f:2b:16:
ff:ff:ab:69:03:25:16:5c:f6:af:ea:11:4f:99:39:a2:95:9c:
7f:b2:38:60:ea:50:66:1b:16:47:3f:ff:d6:06:f5:6d:71:14:
a1:54:77:9e:ed:2e:f9:75:c7:d3:b2:1c:17:a4:35:da:ef:4d:
c0:95:4f:0d:4b:50:4b:48:a8:aa:b5:d2:49:69:c8:44:03:04:
ba:63:06:ad:63:12:11:8d:36:b2:b8:a9:c0:57:b6:e1:73:37:
2b:d1:13:2b:9a:4a:54:7a:87:ac:62:c9:31:70:27:e5:d3:9f:
0f:b5:ec:d2:72:be:35:17:1f:d8:ad:14:78:e6:78:9d:e0:38:
8f:59:db:59:6b:36:3b:0e:0a:7f:55:42:7f:70:e5:df:c2:96:
3f:23:1c:95:3a:50:35:fa:ae:39:6e:88:b2:0c:22:64:cf:09:
43:2d:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:50 2025 by rpki-client