Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: 4JiRDfV2hilRPq5u1XeMltgVqlR415B5grYtCLhx39k=
Subject key identifier: 18:2F:2D:D8:6A:DB:77:4B:3F:54:11:14:90:24:B9:25:0F:90:BB:CB
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0198D5F12AF9F769A59A745D27FDBEEEB16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 08:00:08 +0000
Manifest this update: Sat 23 Aug 2025 08:00:08 +0000
Manifest next update: Sun 24 Aug 2025 08:00:08 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: qn8gMgR2Ua80sgHkY47qlYPjjWdCoPaYWfXqF1W1kcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2a:f9:f7:69:a5:9a:74:5d:27:fd:be:ee:b1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Aug 23 08:00:08 2025 GMT
Not After : Aug 24 08:00:08 2025 GMT
Subject: CN=182f2dd86adb774b3f5411149024b9250f90bbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:34:cf:8d:f6:4a:b5:46:47:9c:9d:e0:37:
89:41:95:d4:90:32:ec:68:9e:4b:50:6a:3b:f3:b4:
58:09:bd:12:7e:7d:fb:f6:19:44:65:b5:1e:a8:31:
8c:1f:86:1c:a5:b1:07:55:69:70:d7:03:fc:98:96:
31:5a:03:2b:1b:c3:dd:61:b9:0c:b8:b8:fd:1c:cd:
d0:d7:c8:26:e2:6a:b6:0c:80:7a:cf:90:0f:ff:b6:
99:c4:a9:41:ea:d8:f8:53:a3:88:20:42:b3:57:73:
bf:d0:57:75:b8:9f:da:b4:fa:d2:e0:b6:92:73:4c:
ea:5d:b9:c2:a9:b3:14:56:88:e3:f9:18:02:01:23:
47:eb:65:db:f6:3f:6a:7d:63:b5:d2:42:e9:0f:d0:
37:26:91:8f:4b:fd:79:37:1f:e5:fa:c6:57:33:d2:
2a:34:5e:c8:48:8a:cf:0e:f0:9a:c1:10:64:dc:6b:
eb:65:fc:a4:9f:6a:13:16:96:44:61:44:c6:8d:1c:
c5:8c:c5:23:9c:ec:bb:d2:23:18:bb:0a:06:19:60:
f0:2f:b6:aa:de:7f:ff:7f:9e:6a:38:d1:e7:d5:d5:
a0:77:cf:f8:9c:42:d7:92:92:93:d3:64:58:83:da:
72:24:89:62:ad:79:00:cd:a1:f5:14:a6:da:4e:84:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:2D:D8:6A:DB:77:4B:3F:54:11:14:90:24:B9:25:0F:90:BB:CB
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9a:48:e3:65:1c:53:94:2c:0b:80:75:f7:19:85:0f:17:62:
8f:fc:be:85:6b:bf:63:73:79:40:6b:11:ec:0e:cd:aa:76:1c:
e6:87:0c:72:9a:ab:ab:b5:2e:68:6a:a9:09:bc:c4:cc:55:a9:
f9:f4:22:cb:5c:4e:29:2d:ca:44:9a:a1:53:b3:01:f7:f9:8e:
f4:6e:16:24:5f:41:f5:e8:77:a7:1c:21:e2:4e:d9:dd:4c:14:
a6:8a:49:0f:c5:0c:26:52:8c:df:70:54:eb:ba:15:93:a0:68:
4e:13:30:41:8e:c3:bd:6e:25:f6:e7:fa:6f:c6:4c:31:bf:8f:
f5:ad:47:74:13:8a:10:f7:5d:95:a2:80:d6:c1:ba:fc:68:04:
f2:39:cf:d9:be:22:7b:ca:53:c0:d6:66:1b:48:13:e9:b0:31:
90:1f:b3:d2:73:55:e6:66:bf:c7:c3:e4:7e:16:d0:88:be:8b:
7c:eb:87:68:71:60:9f:3b:5c:d2:e1:fa:6c:24:29:c3:40:4f:
6d:3c:5e:3a:f4:4b:86:f9:80:19:73:dd:4d:59:d8:bd:5f:7b:
c3:1e:14:c4:73:f1:12:24:2d:e5:1b:a3:e7:24:0e:06:37:f5:
74:16:6d:89:57:2d:42:ac:4f:65:e3:42:32:d5:dd:ae:c1:99:
d6:31:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:08 2025 by rpki-client