Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: Nf2X5hyXGdWb3AxxjHvpC8FWqYLRtXeWIddeLc8dA+M=
Subject key identifier: 60:FD:CC:DD:38:AE:17:3C:1B:DD:95:53:16:30:5A:39:30:C3:D9:9E
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 0198D54DC3CCD77CD0DF2FD54E12D7C1AA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 113A
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: YtdLP9ZwA8FtULhbep/Liyw2xZwiVz/uTWEoOJ+JNOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c3:cc:d7:7c:d0:df:2f:d5:4e:12:d7:c1:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=60fdccdd38ae173c1bdd955316305a3930c3d99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:1b:28:78:c3:f3:ef:77:41:be:68:8c:1b:
c4:b1:71:03:15:b6:94:3f:c8:27:be:94:ed:5c:2a:
73:cf:aa:9e:ee:99:0c:eb:f7:c5:14:51:5b:9d:87:
68:b9:9e:e1:38:22:af:76:9f:06:36:60:b2:36:d0:
6d:6d:76:a6:ad:1d:9b:9c:b1:fd:3a:0d:a3:06:9d:
31:95:c1:95:dc:15:a6:df:7c:f5:39:ee:57:c3:2f:
20:1a:27:64:73:92:aa:fe:dc:d6:58:59:a4:68:04:
c2:79:64:82:f9:df:58:7e:9b:04:59:08:b9:6e:69:
52:eb:eb:d7:62:7f:45:a6:c1:34:f5:00:f2:01:d6:
db:a8:88:d1:44:38:e4:21:0d:d6:0e:80:93:26:43:
11:e0:e0:5f:6f:20:34:7d:8c:5e:7c:2d:38:18:92:
7e:a9:94:ec:bf:22:c7:14:e1:df:df:99:c3:8a:83:
d5:c7:8b:30:2d:ea:4b:6c:6a:c3:fd:bc:b4:54:b7:
7e:90:4e:bb:f4:5a:f4:30:9e:db:20:50:a5:f4:ec:
42:71:ee:87:9f:45:9d:cd:fd:8a:44:f0:83:c3:42:
d3:55:85:d5:87:5f:02:ed:52:02:69:df:22:7f:4f:
bc:a9:df:43:26:46:41:2d:8f:72:6f:e2:32:55:ff:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:CC:DD:38:AE:17:3C:1B:DD:95:53:16:30:5A:39:30:C3:D9:9E
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:a9:11:f2:d8:36:dc:c0:1a:38:d0:c5:06:ea:a7:68:d2:
2a:34:a2:df:cf:d9:6e:1b:10:25:1e:c3:d6:dc:11:97:af:42:
18:60:85:6a:79:52:51:99:44:75:34:47:11:46:e9:2b:23:7b:
e7:21:f9:c1:43:0d:08:64:9e:51:f0:2c:bc:f2:cb:16:7e:84:
3c:11:bd:42:cb:25:26:b2:95:5d:c3:e7:e0:e0:34:a0:48:d7:
9a:49:27:a6:75:78:e8:0c:30:09:b5:cc:fd:ea:bf:85:d4:1b:
a3:95:ee:3f:97:19:a0:fa:5c:88:e3:97:04:57:66:99:5c:76:
3b:c5:26:16:9d:d6:6f:a9:5b:a6:42:a6:c2:a4:81:a6:84:b4:
55:ac:f0:c1:3c:60:dd:a8:5a:a6:ad:a7:4a:57:4f:aa:d3:13:
51:8e:26:bd:da:00:83:5f:09:04:ee:25:b9:08:4d:f5:4d:0b:
51:bb:22:4a:12:ff:33:24:c9:da:00:69:d1:30:2c:b0:db:59:
06:8b:fd:74:13:52:61:ba:94:0c:87:9b:e3:ed:e5:25:54:aa:
1b:6b:6f:f5:7a:31:f7:02:18:fb:d0:b8:53:a5:9a:ae:99:d7:
00:dd:e1:58:65:bf:6b:35:4c:4a:12:a7:7d:1e:b8:ec:dd:32:
7b:38:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:04 2025 by rpki-client