Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: iWnZqHE6nSVqE06poumZafjtWua/UkusmnRPw/6F+RM=
Subject key identifier: 90:39:09:08:04:A9:7F:C1:5F:99:41:80:8C:A2:37:ED:F3:46:43:42
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 0197B77CDF53F825AADD77B3CD47B8B13A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 58
Signing time: Sat 28 Jun 2025 17:01:43 +0000
Manifest this update: Sat 28 Jun 2025 17:01:43 +0000
Manifest next update: Sun 29 Jun 2025 17:01:43 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: uD1q9EDCKRsV6jd8giTjFoibedaVW8INv6FI3QEam+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:df:53:f8:25:aa:dd:77:b3:cd:47:b8:b1:3a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Jun 28 17:01:43 2025 GMT
Not After : Jun 29 17:01:43 2025 GMT
Subject: CN=9039090804a97fc15f9941808ca237edf3464342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:a4:16:30:f0:a9:9f:14:dc:ad:e2:1a:65:
b8:92:97:8c:76:df:ae:d6:9d:a7:38:5e:cd:2e:56:
6d:a0:da:5a:b3:5e:b6:be:1e:16:de:72:bf:b3:45:
d2:1a:8c:73:a8:e9:11:e2:d2:91:89:d3:eb:61:f7:
8b:77:f6:e8:d0:2b:a7:f4:9e:f6:93:d2:76:a3:56:
3a:35:a7:be:a2:72:60:3f:e0:b9:ae:a9:1b:4d:ce:
f6:cd:11:e8:0c:03:2b:14:c3:76:ea:21:95:46:64:
b1:29:3e:1a:87:6b:a9:36:a1:37:8b:ff:fa:f4:1c:
9e:fa:71:7e:c8:c7:08:75:8e:88:2c:cf:bb:60:bb:
62:9b:83:58:34:7c:1d:f5:47:c6:7c:34:0b:b6:8d:
91:d2:7e:a8:05:22:f2:cb:6d:43:9e:3d:bc:12:48:
e1:9f:10:e6:20:da:18:96:39:4b:11:4e:64:96:02:
8a:3a:4e:8c:8c:60:27:dc:54:42:d7:e3:87:66:94:
c1:03:33:c8:e0:32:84:fc:f0:cb:f6:a0:50:cf:65:
70:3c:5f:60:34:21:8b:b6:84:e0:0d:16:e9:b2:d1:
8d:f6:2c:79:61:b4:9b:00:4f:a0:f6:80:3f:3f:af:
57:47:68:85:af:c8:cd:4c:a5:1a:32:16:e3:ad:85:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:09:08:04:A9:7F:C1:5F:99:41:80:8C:A2:37:ED:F3:46:43:42
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:60:91:65:c3:08:87:12:3a:9f:0a:68:91:52:0b:42:b7:
09:6f:a8:57:a8:0a:53:0b:00:65:87:1e:c9:2a:e3:08:d3:58:
01:69:df:6b:f7:13:e9:05:8a:7c:8a:f3:79:0d:73:65:eb:5f:
b1:da:81:89:5b:1d:5f:f1:d2:a2:75:e2:8e:46:78:de:16:39:
9f:3c:53:de:95:dc:db:c1:8f:b9:35:a0:1c:ac:64:e5:d1:ca:
3c:9c:71:f3:1c:70:b5:75:24:2d:72:47:80:37:8a:d3:67:a2:
de:8f:a4:66:b6:2c:a0:84:17:86:45:09:ad:c2:a2:c4:19:c7:
34:13:a4:fc:fe:e4:f4:e5:9a:37:f0:77:9e:66:95:fc:ef:07:
dc:ca:7c:26:c8:37:90:d0:27:55:97:d8:00:9d:b4:74:e8:88:
99:c8:df:02:d6:68:66:05:28:ad:07:3a:a1:ad:ec:83:40:69:
10:33:2d:65:42:5d:84:a6:aa:27:3c:78:f8:44:79:e0:e7:af:
61:cd:ff:65:4f:cb:5c:2a:47:05:c2:bb:cb:83:a7:11:63:cd:
cf:fe:0a:30:ea:78:bd:b8:1e:82:0c:03:5c:ec:2c:96:1c:21:
71:72:a7:f4:ef:b4:ed:41:3f:c6:ac:2d:ba:fb:4b:98:2b:02:
cb:81:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:50 2025 by rpki-client