Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: vjaxrXC0PLLyp4vJeNGY/OFPki7g7qeH1Em8eyP8CQs=
Subject key identifier: 4D:BB:1D:84:9F:E6:E8:53:C8:B3:85:03:E6:C7:B7:A7:C2:24:27:D0
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 0198D583EC88A30163117BA8906391380EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: E9
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: UZHnOCgSdeqIq/hu2aDqn9UM8m0kEPZUCxODA7pkHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ec:88:a3:01:63:11:7b:a8:90:63:91:38:0e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=4dbb1d849fe6e853c8b38503e6c7b7a7c22427d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:38:b9:9c:32:84:ec:14:05:c0:d9:2d:2a:
91:83:a0:84:2d:4f:d9:96:89:e8:19:e5:15:fb:1b:
6c:9f:7f:03:5f:43:45:ba:e1:0c:e3:6c:16:6c:f5:
7a:a3:36:a1:94:c3:8b:b8:6c:eb:76:eb:48:a3:b6:
d8:e7:c5:99:c1:46:c7:a3:87:7f:93:01:4f:7b:ca:
72:06:6f:32:d3:4a:bf:21:15:6c:87:71:6a:32:b2:
6d:af:f2:9f:e4:51:78:47:39:93:95:ae:58:c1:a3:
93:b7:0c:fa:c7:38:af:03:08:0b:b0:f6:c2:48:e6:
4b:86:98:d7:a8:17:c9:b8:c1:56:85:aa:c1:f6:b9:
fc:48:6d:5a:b7:bb:07:eb:b4:29:55:36:4c:6d:36:
b5:a3:10:17:a5:cf:a9:da:40:99:17:50:87:0c:75:
3b:9d:73:50:40:79:73:43:e8:d6:6d:07:5c:41:ae:
ba:c2:a6:01:48:1a:e0:11:98:ce:fb:16:fb:ff:7b:
9e:02:bd:df:af:58:0e:b7:76:aa:b4:0e:b4:3a:cc:
1e:31:af:3b:20:ce:5e:6d:75:e3:c8:1a:2e:57:d9:
cd:46:3e:09:74:5a:f2:9a:88:c4:bf:04:3a:36:93:
e3:4f:96:e4:ec:65:74:3b:95:ba:40:aa:5c:41:a8:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:1D:84:9F:E6:E8:53:C8:B3:85:03:E6:C7:B7:A7:C2:24:27:D0
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:c3:79:29:b2:cd:8c:68:de:ea:b3:83:1a:35:6d:87:ee:
1d:69:16:49:93:0b:72:f8:7b:0a:36:3c:bd:6e:9a:05:d3:20:
69:83:27:a3:d0:b6:b0:a5:31:ca:7d:17:53:81:55:90:5a:8d:
b3:94:f2:d7:c3:d2:7f:2d:22:74:3a:f4:ee:d8:f3:2b:48:bd:
ae:b8:72:8b:ba:af:06:58:e5:b3:12:a0:bd:f2:92:75:f8:bc:
65:c1:49:63:2a:55:08:10:b5:ee:1e:73:2d:05:12:cc:34:e3:
dd:8c:a1:61:aa:c0:57:5b:c4:a7:5c:d2:83:fa:9b:9c:c3:db:
2c:c1:08:0d:6d:c3:c9:c4:75:21:5b:54:8b:9a:00:e1:d0:fa:
18:c6:4c:c3:c7:d1:d9:56:cc:25:6c:45:30:d2:99:6c:fa:1e:
28:d4:18:1e:11:0b:c6:ee:5b:a6:09:eb:77:45:24:9d:f2:9c:
83:58:ee:85:ca:0c:65:d6:5c:5f:10:e4:4a:66:6d:2f:3d:c9:
6e:a8:6e:58:8d:24:6a:29:40:1b:bf:79:2b:da:82:51:3d:16:
e4:3f:dc:53:bb:bb:19:4d:d2:4d:61:f7:c0:a4:8e:10:5c:b0:
7c:ff:54:8b:c3:a2:e3:71:78:3a:f7:75:a3:e1:f9:ae:42:37:
55:4c:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:48 2025 by rpki-client