
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: ZqqzrS2vGrIOMAmnzyqxMA6V0SYqAzXUP65tVlAGrXc=
Subject key identifier: EB:5A:2B:8D:18:6F:BA:07:65:81:E0:37:AA:52:0F:AD:72:A4:60:27
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0198D5F164537726E994BE57CE1901AA316E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1326
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: 018V68QhsbvLTmk52fe/HZvbLwWYeNcbtekhNJpDesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:64:53:77:26:e9:94:be:57:ce:19:01:aa:31:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=eb5a2b8d186fba076581e037aa520fad72a46027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:88:d2:89:b3:8b:91:7f:f0:e7:d2:40:8b:
09:c9:c4:08:50:96:23:81:52:8c:7e:81:d3:0b:8f:
d7:e3:58:27:8d:bb:40:9d:a0:cb:60:4a:8a:f7:87:
1e:5c:31:e9:94:a3:14:f7:b6:f2:90:8e:1c:94:71:
54:4f:1f:a0:9d:67:87:91:97:4c:0a:0a:09:44:f2:
41:02:36:68:d4:92:a2:29:04:bc:f6:46:55:08:73:
ba:24:7d:70:47:96:27:44:07:fb:4f:fe:8d:75:6d:
27:ce:77:d7:02:02:e1:70:c3:ba:e2:bc:c0:e1:6b:
fa:11:9d:a2:c2:ae:d4:c8:0e:36:49:99:1a:1c:31:
51:79:b2:78:6f:e0:8b:23:fe:fd:c9:a8:c7:e7:3c:
60:e0:6b:dc:9d:97:27:6c:01:ff:84:e6:4d:4a:21:
1c:a5:08:98:6b:d0:f4:b7:1c:17:79:26:5b:91:9a:
77:aa:f6:3b:13:df:bb:30:02:05:29:c5:dc:5a:f8:
7b:92:16:66:e1:a2:3e:67:37:cc:2d:68:f2:06:77:
7e:33:ca:aa:fa:42:10:31:62:6d:85:dd:d6:38:9e:
9d:38:0f:bb:10:d2:26:68:54:00:ff:47:a1:68:22:
62:4a:83:93:a3:e8:14:c9:5a:b1:ba:a7:92:7d:a3:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5A:2B:8D:18:6F:BA:07:65:81:E0:37:AA:52:0F:AD:72:A4:60:27
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:30:92:ba:8f:e7:64:22:80:e9:9c:e9:14:94:30:ca:ae:
e6:b0:da:ce:be:60:de:6a:72:7e:a3:02:ff:9c:aa:ba:fa:66:
b1:ca:f8:18:65:f5:2b:d7:ba:9a:2a:0a:56:86:8b:b1:33:ba:
04:14:08:cc:c8:74:a1:dd:e8:e1:f0:63:04:5c:3a:c6:55:99:
bd:da:cb:44:d8:7d:67:68:db:b8:c1:cf:69:eb:83:3d:87:56:
2b:87:41:c8:9a:b3:a3:49:25:71:cd:14:c3:c0:8b:99:ef:4b:
c6:17:01:ce:90:7c:0f:ed:83:ed:a9:c4:01:5b:be:17:22:c3:
81:8c:c2:17:b9:d7:f2:74:93:88:18:46:c8:7b:ac:2a:81:28:
1e:a3:81:a3:02:b5:64:c0:d9:99:c1:d2:f1:d8:85:85:51:d2:
fe:44:72:04:96:b5:ca:f3:0d:89:f0:0b:5f:91:42:a6:92:d7:
88:ae:13:8c:7f:ce:a1:81:76:eb:f3:dd:a9:da:7d:14:bb:e3:
f3:ca:92:fe:0c:11:39:00:f1:7c:48:b2:39:fe:ea:45:7e:49:
3c:b1:72:e5:e7:1c:d1:bc:8e:e9:62:36:70:2c:d7:ad:6e:51:
97:e3:58:5a:b8:bc:d2:e0:3e:80:6d:ed:7e:02:37:94:44:66:
8e:1f:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:31 2025 by rpki-client