Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: m4J7vMDpkBIQMGh9egDLBIFdmKPMnBTNUf5K1PYOCUE=
Subject key identifier: CE:68:03:A9:75:CB:B9:77:92:BB:C7:36:E8:7E:89:AD:23:09:CE:8A
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 0197B96A962B50D25C37475A6B64D241470E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 10A7
Signing time: Sun 29 Jun 2025 02:00:59 +0000
Manifest this update: Sun 29 Jun 2025 02:00:59 +0000
Manifest next update: Mon 30 Jun 2025 02:00:59 +0000
Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: HbQX0Hpxm38vhvrbh7cEiHGI5L9yxC8kbVyRDxBznmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:96:2b:50:d2:5c:37:47:5a:6b:64:d2:41:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Jun 29 02:00:59 2025 GMT
Not After : Jun 30 02:00:59 2025 GMT
Subject: CN=ce6803a975cbb97792bbc736e87e89ad2309ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:da:b3:fe:3a:7e:9e:3b:2f:f0:a5:67:37:
a0:f9:eb:02:9f:0d:20:60:32:31:db:68:90:91:f0:
15:54:b7:41:44:cc:d2:44:f7:aa:03:c5:56:43:b3:
ce:31:eb:73:24:6f:e8:67:9c:71:2b:82:b3:f1:47:
e6:e6:e1:9b:03:20:46:f1:9a:b5:0f:bf:9f:49:53:
b6:c0:b4:03:84:51:3e:d3:8b:99:49:50:cc:54:35:
ac:5c:59:8d:b6:22:e5:37:84:16:7f:9c:c9:af:e7:
e2:ff:ce:06:48:09:e7:2c:39:23:2a:17:bf:0d:ee:
de:64:00:05:4a:9f:03:4a:b9:2b:c2:27:e3:3c:57:
8e:79:30:62:4c:bd:bd:13:9a:d2:d9:de:a5:c4:32:
2e:aa:f0:3d:b7:51:5a:bf:7b:6a:47:e5:c0:3b:1a:
9d:4d:c1:de:45:ab:7f:2d:8f:b5:80:97:ca:f9:b4:
5f:f0:1d:c0:44:d2:4d:d2:66:65:a2:e6:19:fc:18:
23:20:d9:5f:4f:75:ba:b2:2a:0f:08:96:6d:16:e0:
fd:0e:b1:86:31:b8:e8:6d:0f:be:2e:9b:56:87:9d:
64:95:f8:9e:d4:41:e6:f6:da:7a:e7:1a:64:0a:2a:
08:06:96:17:1a:c8:59:a1:9a:33:0c:3c:4a:86:4b:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:03:A9:75:CB:B9:77:92:BB:C7:36:E8:7E:89:AD:23:09:CE:8A
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:f9:3f:44:39:50:35:2c:0d:36:7b:f5:cb:97:d4:ff:60:
b4:5a:21:7c:50:7b:c1:51:74:7b:ab:23:8f:f7:7a:70:00:e5:
bc:36:01:68:a4:8c:11:0b:1d:40:ad:07:e4:e6:40:df:07:e5:
03:c6:e9:28:15:bd:16:25:bb:0f:da:68:7f:91:7a:a9:59:5d:
8d:ad:c4:7e:88:36:e6:44:74:d4:ee:90:25:18:a8:4f:9c:dc:
5f:bc:2c:55:10:b0:f8:de:76:67:ed:5f:25:02:ad:26:0e:6c:
2e:65:d0:d0:da:2f:69:f7:5e:eb:63:3f:87:80:24:2e:ba:35:
bb:9f:74:d6:68:7c:c9:b3:6f:79:17:53:67:3f:a7:b6:74:22:
e6:fd:2e:9f:d1:fd:23:49:67:a7:02:8e:cc:ed:f6:d2:39:47:
9e:ea:41:5c:eb:e8:01:ee:2d:32:5b:4f:2c:48:91:ec:66:5e:
a4:c5:89:b8:93:20:b4:18:23:10:4b:21:d5:51:fd:5f:ac:cd:
10:82:cc:16:47:8e:4f:21:0d:29:3f:8c:42:84:e9:36:90:4d:
aa:db:e8:f0:59:1b:c5:e0:32:5d:3d:76:09:79:83:5f:20:c3:
12:78:c2:04:ac:48:1e:7e:f1:50:9f:6a:35:49:e7:3d:74:a8:
3b:b5:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:34:31 2025 by rpki-client