Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: EG/8qkJBxAI51xoll+ITuuDkW6aNptvIdTsal/ZZcyc=
Subject key identifier: FB:28:7C:B8:9C:23:B6:9E:13:4E:AF:A9:3D:2B:8F:AA:FF:AE:80:BE
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 0198D92BADC75DFDDBE7EF5D249BD654AC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0991
Signing time: Sat 23 Aug 2025 23:02:55 +0000
Manifest this update: Sat 23 Aug 2025 23:02:55 +0000
Manifest next update: Sun 24 Aug 2025 23:02:55 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: meTlzLDb4wA6C31jQkxT4HmlsGyWofjWGXAAdCAZ+T8=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:ad:c7:5d:fd:db:e7:ef:5d:24:9b:d6:54:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Aug 23 23:02:55 2025 GMT
Not After : Aug 24 23:02:55 2025 GMT
Subject: CN=fb287cb89c23b69e134eafa93d2b8faaffae80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:47:91:94:76:bf:56:1a:b5:5b:26:56:54:
d0:35:d5:ce:a3:96:57:fc:cd:2d:21:10:a5:c7:98:
92:f2:a9:50:f4:e5:36:43:46:f0:4c:2d:7b:24:9e:
20:9c:7a:6d:06:0c:12:ad:e7:fa:14:b7:b9:fb:00:
54:c8:5f:f2:77:69:47:52:db:13:9f:c4:23:c9:cf:
f4:45:46:3b:35:ca:4e:4f:94:5a:a1:38:1d:2e:51:
9d:53:2a:7c:67:5a:02:22:33:53:cf:f4:5f:a7:42:
49:51:db:ba:08:33:9c:81:0c:99:3c:d7:ed:91:79:
58:8b:9b:a1:24:09:06:2c:28:e8:a4:ce:f3:92:5d:
a4:77:74:3a:f6:98:67:77:d7:a6:26:d5:79:4f:86:
59:b3:f1:7c:23:bd:6f:16:65:8e:08:ad:3b:b0:64:
57:f3:03:3a:c8:95:4b:81:3f:47:d2:e7:73:2e:68:
d9:8b:2f:84:d8:66:fb:86:2c:9a:71:21:ee:82:39:
a8:1e:7a:2d:0b:0b:d0:56:6f:40:85:89:61:0f:6e:
2f:a5:ee:cd:71:e7:e2:8d:66:58:07:5c:8c:97:dc:
f5:a2:bd:3c:42:2c:a5:53:e4:dd:74:e8:2d:0e:8b:
d8:08:ef:35:18:5e:fb:a5:eb:cc:4c:a3:0d:31:f4:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:7C:B8:9C:23:B6:9E:13:4E:AF:A9:3D:2B:8F:AA:FF:AE:80:BE
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8c:0a:e3:0e:b5:c2:80:2d:98:01:aa:ef:8b:7e:4c:ba:8d:
e9:b7:c8:f5:75:6c:6f:fa:0d:e4:09:1a:83:e7:27:ef:72:2a:
21:7a:a3:0c:35:6c:81:ad:5b:c1:a6:9e:c3:36:6e:97:a8:c5:
94:f0:be:72:d5:79:58:67:64:41:2e:d5:1a:ce:6c:4f:65:e2:
d0:af:a2:65:d9:7e:38:40:9b:b9:6b:b1:79:8d:0d:5c:08:d0:
8d:43:35:c8:e4:1d:be:38:fa:5a:fe:8e:34:09:f6:5a:63:0d:
ef:60:32:db:6d:5e:d8:e1:e3:31:ca:72:99:2c:47:f2:55:b7:
4f:2d:62:cd:e3:93:33:38:19:44:9c:7d:e1:4d:57:ca:1c:fe:
cf:17:6f:12:4f:8e:28:5b:da:13:01:a6:ce:34:0c:0a:59:ed:
9f:6d:a0:28:1b:9e:ef:ac:c2:12:65:3e:ff:e2:e6:89:82:ba:
bb:78:c4:9a:58:2c:aa:9c:14:83:ac:1e:82:71:c7:8d:4e:8d:
2c:2f:51:13:eb:6b:8e:11:e1:af:5e:31:d6:38:7a:86:55:2e:
1a:6e:6c:db:fe:f0:16:0b:63:1d:da:f3:ba:97:80:3b:85:55:
29:0b:9a:7c:07:18:7a:46:6e:30:cb:0b:b1:3a:d0:62:96:78:
67:48:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:42:12 2025 by rpki-client