Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: zTTL6JYnmhuQlVVSQxwFp71fiwQarWztf9knitBaz9w=
Subject key identifier: 14:5F:65:A3:2B:E6:8B:3D:0E:06:63:5B:25:0E:76:A9:54:22:6A:F6
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 0197B821035576171BA686624FB037858DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 02A4
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: EfMtz6TsxWfGmEd9oqAq8UFEma2snJ+R1ZX+LJflNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:03:55:76:17:1b:a6:86:62:4f:b0:37:85:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=145f65a32be68b3d0e06635b250e76a954226af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:b1:d3:9f:a7:09:73:e8:7a:5c:8b:fe:2f:
74:71:c4:0d:0c:4c:bf:86:96:f6:b9:57:af:8d:5d:
90:5b:30:64:0f:61:45:9c:09:64:c3:1b:03:54:b4:
d2:fd:95:0d:66:d1:67:7f:70:b6:2f:70:a2:17:9f:
ee:e0:95:99:31:62:df:ae:e5:43:8a:86:22:9b:d6:
0f:c4:26:1e:13:e4:b0:22:cd:23:5a:85:33:82:80:
73:fa:3d:18:49:4f:a4:fa:be:8f:45:4f:10:82:06:
4c:58:b2:b1:cc:bf:36:d9:82:4d:84:38:b9:64:1f:
bf:fa:f1:8e:07:62:24:59:be:dd:05:fa:af:0e:81:
a9:2f:c7:6f:09:e4:05:46:2c:6c:90:9f:e6:c0:63:
de:ce:4e:77:31:f2:59:86:04:22:92:30:75:ef:c5:
e7:01:6b:37:2d:94:63:6e:c5:55:04:24:d6:74:58:
a8:39:9a:2f:0e:94:d8:65:2a:ce:93:01:3d:a5:71:
70:d6:b1:0a:94:d5:f9:2b:37:69:70:66:73:30:47:
67:8b:3f:9e:77:c9:7e:3d:3f:b1:89:88:fa:ff:68:
3b:d0:95:d1:40:ee:0a:89:af:77:44:7b:f9:69:a9:
3b:ea:5c:f5:8d:02:01:f4:3b:51:e8:af:f7:9b:21:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:65:A3:2B:E6:8B:3D:0E:06:63:5B:25:0E:76:A9:54:22:6A:F6
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:6c:be:83:b4:86:cb:49:d2:1d:ea:2d:60:ad:cf:1b:0e:
02:c4:b5:8d:40:99:b0:97:d6:63:1c:75:e1:dc:b9:65:e4:3b:
aa:e7:31:0f:9a:94:69:e2:84:67:02:fc:bc:54:a3:69:a6:ed:
81:06:78:ca:5d:69:17:7b:82:7d:5a:8c:e5:5d:b5:4b:fa:8e:
79:70:14:5f:ff:17:d0:f0:9f:61:15:25:61:09:a2:79:a2:67:
c4:f7:b2:09:a9:50:2e:9f:1e:e3:e9:ac:8b:75:d2:c2:18:a5:
51:90:78:57:4c:5c:33:9e:13:6a:c0:be:b1:0d:06:a2:4e:99:
2f:99:ce:d8:3f:79:95:40:24:b6:82:76:d1:31:ae:a9:f8:71:
90:ec:6d:44:b0:34:9e:60:39:db:93:01:0e:6f:c9:a7:81:7c:
04:de:e7:b9:db:30:d0:52:77:be:78:2d:91:06:44:43:49:48:
c6:25:df:bc:02:74:0f:90:c1:af:e7:13:52:4f:ce:87:05:59:
b8:db:61:90:34:ae:3d:d4:5a:02:97:08:d5:42:28:c4:e0:b6:
0f:2b:b6:a4:42:30:a0:da:9f:e0:32:65:db:c4:66:f1:f9:8d:
10:e0:5f:96:01:9b:63:dc:47:4a:85:71:13:51:77:f8:a8:27:
44:2b:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:24 2025 by rpki-client