Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: bTZW31YH5APj4SbFbS0Oo0vHmNpwd45ZEOhXFLc+gLQ=
Subject key identifier: 38:F3:10:AC:25:64:34:10:D7:E6:5D:0C:A4:E4:BC:34:52:C0:F4:12
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 0199FB0F27E5FC084D554C16C0F34C2AD3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 0181
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: nBgoWyUK4tEp8bxCD4I1fD9u5oL7LcdeDsz7v4Bgza0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:27:e5:fc:08:4d:55:4c:16:c0:f3:4c:2a:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=38f310ac25643410d7e65d0ca4e4bc3452c0f412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:59:bd:a0:da:59:7d:73:c6:38:bb:2c:5f:
45:21:2d:a0:f0:4a:d2:c0:8e:38:2f:44:53:e4:2e:
0d:b5:69:25:b9:4e:4f:63:44:ec:c0:65:67:57:6b:
e1:85:0e:0d:5c:0d:12:0a:72:dd:72:3a:1a:f2:a9:
13:f3:81:a7:ad:10:dc:7c:6f:7a:25:d8:6c:a7:ac:
5a:6c:84:37:51:af:23:eb:0e:4e:d0:89:a1:24:17:
dd:94:72:72:e1:38:fd:d6:d5:f2:ab:0a:23:0b:b4:
d4:3d:f6:33:59:1f:0f:f9:bd:5c:39:97:87:13:c6:
62:0b:31:54:00:71:6e:0a:1d:01:79:b2:04:6c:48:
0e:02:0c:85:0e:a3:0b:5f:1c:63:f8:e6:c9:4b:e4:
d3:d7:db:3f:a6:34:32:47:79:2d:1c:bf:00:ad:b8:
92:c0:9d:8a:11:37:02:0c:f5:ae:7c:34:10:97:31:
4c:bc:29:77:f8:aa:05:eb:fb:79:20:77:17:29:eb:
45:4a:25:5d:b2:cf:ec:fa:2a:28:a0:29:4f:42:77:
8c:79:b7:16:36:f9:f7:5d:c8:f1:75:34:35:5c:0c:
23:a1:ec:40:1e:45:d0:5e:31:4a:9e:4a:07:8e:2c:
55:bb:78:55:98:88:4b:0d:2f:b5:b2:f6:3c:dc:b6:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:10:AC:25:64:34:10:D7:E6:5D:0C:A4:E4:BC:34:52:C0:F4:12
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:91:b4:7c:2a:ba:c0:08:af:00:8a:b7:4c:85:50:cc:3f:80:
33:2f:ae:1c:fa:e0:9f:9b:3c:58:8d:37:22:63:39:c1:45:95:
10:30:99:41:56:77:fa:15:54:2c:82:ee:e2:31:63:d0:e4:a2:
be:63:5a:ff:78:b9:59:f7:d1:a0:b4:83:e1:17:26:6e:c1:89:
d1:d4:70:5a:af:68:89:63:e1:98:ba:1e:40:33:6b:a0:1f:ab:
f2:a7:8e:db:48:24:85:10:c5:fd:55:17:17:e8:3d:eb:4c:2e:
eb:c3:42:c4:de:f9:41:ae:19:24:ad:21:ad:74:a5:a5:13:c6:
90:18:f1:8c:4e:22:0e:75:f7:1a:cd:5a:3b:4b:0b:e5:fa:da:
c1:44:56:04:74:46:09:d8:ff:89:bb:fe:2d:37:eb:84:1c:f3:
d9:7f:87:11:06:78:19:19:1a:60:d5:c5:c0:ef:a5:20:16:0a:
eb:66:34:e7:4b:67:74:97:aa:b8:e6:d9:af:8b:ce:61:90:0f:
e8:99:26:15:44:d3:a2:75:e0:70:1a:61:13:23:f8:e6:60:2a:
e6:b0:60:ae:e7:ff:e5:27:f9:22:df:b4:ae:82:76:3b:7e:74:
d5:f4:8e:d8:ea:a2:46:b3:cf:95:7a:d8:a0:0f:be:66:bb:0c:
9b:3b:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:24 2025 by rpki-client