Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: bn9XRCvj/Hn2WXlpSkyo0g5nCW1ObHqo2me9Uk9zatE=
Subject key identifier: 38:14:83:48:F8:13:C0:04:FC:CB:2C:E2:10:53:02:1E:CA:5A:23:AB
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 0197B7B2F41CEA9B40CCCF70D4751DA35153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 123C
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 2+xMbDAM/shLJvF8GV77SPt0vBFcveX1MYpzGGsi9ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f4:1c:ea:9b:40:cc:cf:70:d4:75:1d:a3:51:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=38148348f813c004fccb2ce21053021eca5a23ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:ed:f2:dd:04:a8:aa:88:e7:c7:ab:df:c4:
5a:5c:6c:ba:90:86:0e:73:e0:63:dd:5a:db:0c:fb:
77:69:77:56:34:ef:89:94:7c:9c:a0:ba:83:07:d9:
22:f8:f4:bf:85:72:a3:cd:cf:5d:72:3d:00:9e:d5:
d3:7c:05:69:8f:78:8f:62:7b:18:7c:75:a5:94:74:
cb:0f:25:95:96:26:d0:4a:da:a0:2d:63:72:47:12:
be:e5:d7:fa:15:20:76:2e:93:a0:f7:6c:7d:33:a2:
92:10:cc:10:3e:e5:d3:f2:8a:61:d9:c3:d5:a2:f0:
44:29:60:23:12:47:17:3f:39:89:0b:a4:5e:1d:9f:
fa:91:07:3d:d7:d3:1e:a0:0b:18:d9:c5:cc:ff:d5:
9c:df:e3:d9:aa:d4:c1:35:f7:09:57:3e:82:93:e2:
54:f4:46:e7:86:6c:b3:72:1f:20:80:be:51:cf:2e:
2d:8c:a5:35:f6:8c:42:8e:e6:f8:9f:0d:e9:ba:51:
3b:6b:e4:c1:84:2d:8a:da:c2:2a:e0:c7:8b:75:5c:
46:61:86:b2:fb:33:c1:83:54:72:64:f8:6f:a3:53:
06:a2:3c:2a:e3:1e:a8:e5:19:73:4c:3e:a8:0c:f5:
e9:06:9e:ca:8b:a4:92:e2:01:9b:69:50:11:fa:b4:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:14:83:48:F8:13:C0:04:FC:CB:2C:E2:10:53:02:1E:CA:5A:23:AB
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:2a:6b:52:9a:cd:37:f0:2a:73:4f:a8:0a:30:50:70:b6:
22:c2:4b:49:3b:d7:a4:ec:b3:2e:8f:4c:12:b6:77:c8:a1:85:
f3:93:92:2a:0c:4b:96:6c:cb:2c:d6:fd:b9:dc:7b:eb:be:c7:
59:ab:64:15:8c:42:45:fe:0b:58:e1:33:8f:51:2c:99:63:84:
82:b5:5b:e6:64:74:14:3b:e1:d6:5f:a7:30:13:22:60:41:69:
01:3d:25:6a:dc:1b:83:ea:c1:e7:81:83:46:d5:d3:bc:a1:07:
64:36:49:5b:28:8c:58:fc:7f:df:59:f2:08:ce:0f:73:36:f1:
3f:a6:ba:56:34:23:99:92:5b:78:0a:e0:35:a9:a5:63:49:fa:
8d:f7:09:a3:63:9d:c6:f2:c5:9e:41:0e:c4:ee:ee:c6:81:ee:
3c:42:d6:db:e1:07:3d:c3:17:4a:51:cf:70:06:94:af:67:37:
77:4f:03:52:35:fa:59:99:df:75:98:cd:19:d2:49:3f:dd:4b:
a3:bd:9c:4b:f8:10:97:42:c4:02:b1:89:82:a4:78:1e:79:ea:
d1:a2:0e:d4:4e:82:56:10:dd:22:c5:13:35:55:98:49:83:cc:
86:3c:b6:22:1c:a0:66:8d:ae:8b:96:ae:01:be:e2:fe:d9:28:
07:ba:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:14 2025 by rpki-client