Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: g1oLQXu5aN7Gr3qRinYFdmRN6PuyeHubZQQ2qYUoH0A=
Subject key identifier: 42:2D:C5:C4:1F:71:63:B2:44:8D:1D:91:26:FE:CA:FD:27:0A:74:D9
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 0197B820DE0D1BC04645694169C6FEE0475A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1137
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: 8cr3+b7YCeaesWQr7Kr+GFeFWyKX6MZs6s0jknLqf08=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:de:0d:1b:c0:46:45:69:41:69:c6:fe:e0:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=422dc5c41f7163b2448d1d9126fecafd270a74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:3d:53:9c:93:ab:87:b8:65:56:70:61:86:
87:35:61:31:70:df:54:6e:eb:12:0d:ae:64:f9:1f:
0d:4e:04:e9:51:c4:43:9d:49:19:7a:5d:11:ef:bf:
a5:07:bf:17:c1:67:c9:58:57:6b:68:66:48:d2:1a:
e3:32:74:4b:18:02:2e:74:46:da:3a:c4:dd:f1:dd:
24:4f:ed:75:bb:91:a1:ac:a4:26:cf:b7:c5:c5:e6:
50:45:6c:ae:a0:04:fb:1b:59:6f:b4:4a:f6:71:29:
55:3b:b5:f4:3b:3f:43:9c:1e:36:03:c8:14:79:cd:
f8:06:92:fe:cd:b3:7b:10:d5:5b:88:34:b8:93:b8:
26:a9:0a:b6:40:8d:2d:13:3d:77:5a:99:d6:ae:d8:
23:0c:11:90:62:00:9e:7e:87:7e:5e:a8:56:1e:0f:
1f:19:55:3e:1a:39:b1:f3:da:f7:24:7f:ee:5c:f0:
93:42:2f:9f:58:00:70:fc:dd:3b:31:f6:17:e1:d1:
85:1b:40:bd:aa:22:a2:2e:8c:34:5b:a0:81:5e:31:
38:71:7e:e7:03:cc:14:85:24:dc:99:b6:18:9f:34:
03:ca:9a:1d:ba:7f:e6:83:34:a8:8f:6b:86:e2:fa:
51:ef:b5:10:b4:93:3d:70:f6:f7:8c:af:ff:96:e1:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:C5:C4:1F:71:63:B2:44:8D:1D:91:26:FE:CA:FD:27:0A:74:D9
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:de:d3:da:50:4d:f7:73:ed:09:dc:0f:ed:95:44:2e:f6:24:
8f:a3:a0:b2:74:ed:57:8d:58:12:2e:ee:b1:4c:85:bb:39:c8:
b2:30:39:a0:91:28:d9:95:be:e1:c7:82:89:84:09:87:34:23:
90:3f:1b:f8:83:2f:fd:94:78:f3:09:e1:b8:4f:4f:ac:77:1b:
2a:a6:41:93:40:3e:27:a7:d9:9f:d9:0d:85:17:39:52:b6:f4:
11:1e:2a:7d:a3:eb:7c:30:09:83:08:6b:ab:e3:35:ed:e2:83:
c2:7f:61:ec:bb:03:32:7f:c9:be:ec:78:b6:f7:ec:42:dc:9a:
5c:c7:5a:b1:46:8a:e3:7a:a9:6c:7b:5b:11:07:51:7f:be:7c:
df:f6:11:d2:46:2e:eb:a5:ee:9a:1c:28:75:d9:66:b1:ab:b1:
47:dc:59:43:6c:99:ae:a2:8b:c2:07:98:14:92:be:1e:11:8f:
92:2a:f2:a0:18:42:a7:f7:f1:42:d7:c0:40:ef:ac:b0:51:93:
e4:55:d3:77:56:01:07:67:20:1d:0d:b2:8f:3c:7e:c9:9e:40:
90:7b:8a:c3:50:26:24:e4:a9:12:6f:e6:5a:eb:dc:4a:95:bb:
34:d3:07:0f:37:da:e9:bc:ca:ee:32:52:8b:c3:ab:81:a0:e1:
b0:55:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:23:00 2025 by rpki-client