Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: ChsMQw8IvVkMnYClVt6e6xo6IfqUulcT/fzfV/ymuM4=
Subject key identifier: 73:62:93:9A:6C:8B:49:59:8E:CA:C4:B8:78:96:71:C5:75:F0:E5:4E
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 0197B820E7AD385CA2CAC694AB5FA38F1DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0808
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: nautvs9iHvWNlaobQN1Tm/jdJ+ERYvcaydRKWodKI0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e7:ad:38:5c:a2:ca:c6:94:ab:5f:a3:8f:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=7362939a6c8b49598ecac4b8789671c575f0e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:14:87:dc:10:61:e2:10:13:4b:27:40:28:
2c:a5:b5:4e:41:34:99:d0:93:38:cf:c9:55:00:77:
d7:ef:ab:8e:59:d7:42:6e:b3:7f:ea:cf:db:d3:99:
ea:ae:b1:13:da:09:ac:d6:03:d3:c6:f3:f3:7d:e7:
75:65:6e:6f:17:10:17:26:49:4e:f4:51:7a:f5:aa:
a4:96:e1:8c:8d:7a:ac:18:6f:c0:87:2f:9b:a9:0c:
99:9e:13:f0:5b:e9:87:ed:fe:2d:65:36:24:0a:87:
f2:b5:c2:c8:75:b4:84:b2:0a:c4:83:74:b5:6f:09:
37:73:b9:10:7b:bb:db:ea:f6:58:7b:52:aa:e2:71:
43:cf:ee:42:f2:bb:5a:18:ff:cc:49:8f:1c:5d:61:
d8:be:6c:3b:09:69:66:09:d3:72:1a:10:2c:27:33:
2a:51:21:7d:5c:b6:ba:f7:81:eb:ea:63:da:11:21:
ce:9a:f3:28:52:f2:c6:4c:74:26:f9:f5:be:d9:e2:
bc:13:45:d0:18:08:53:b9:70:27:d8:57:5e:35:f9:
d2:74:38:61:fa:9a:6d:da:ac:9b:30:05:35:e5:b3:
4c:55:37:c5:ac:9f:d3:68:bf:8c:1b:97:8d:d8:40:
9d:05:a5:6a:35:08:1b:82:cb:22:42:53:7a:0c:cd:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:93:9A:6C:8B:49:59:8E:CA:C4:B8:78:96:71:C5:75:F0:E5:4E
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:38:0d:06:fc:3e:72:9c:9b:c3:d0:6d:35:01:44:c2:11:
71:d6:9c:e1:d7:c0:31:13:77:83:21:0b:a1:1c:5c:c6:81:b2:
4a:c4:b6:a1:05:96:cf:db:e2:aa:e2:c3:71:fe:e7:f8:fb:6d:
ce:a8:82:06:81:1b:a3:cd:1a:af:ce:3b:c5:90:a9:a0:97:30:
b3:b5:26:5b:1d:90:d7:fb:ef:57:0f:ce:cd:ff:c4:b8:8b:b1:
ad:9c:2f:00:03:bd:81:11:85:89:f3:03:f8:09:a6:32:33:18:
46:65:ec:d7:a7:ed:c3:b4:64:95:b9:46:cf:5d:a2:49:a7:45:
02:0f:22:68:1d:a5:a9:f9:4b:cb:99:84:f1:93:85:a6:00:1c:
bf:29:c6:7e:5e:46:3d:4f:ae:b7:35:a8:ba:f9:2c:ca:be:89:
f3:4a:40:fd:2d:8e:69:17:b8:5e:49:75:f0:a8:c8:fd:a4:b5:
90:f0:fe:62:11:85:dc:a9:26:45:d6:8c:42:eb:fc:07:15:f1:
47:c8:d1:ef:67:fd:9c:2d:84:4e:ef:e7:92:6e:7d:cc:ba:19:
c6:67:0b:74:ff:76:77:a1:3e:70:ed:84:f0:18:9b:af:ff:11:
9f:a6:c7:8b:3c:24:6a:2b:ea:f4:f6:b7:77:35:09:73:a2:80:
be:84:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:10 2025 by rpki-client