Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: IgnrLTiq0JRELZTOlzOHBBws1KM16yDPgAZRJSP6xO0=
Subject key identifier: 9F:44:D8:71:6B:CA:70:7D:18:DE:8E:F1:98:C3:2C:D6:87:74:8F:9C
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 0198D54E24EAA74949B31939A7B8FD1DEFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (hash: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: 3fbgPJ2KZKwIjQOdpWPMw/5qh9ZIBCryqT4LO1F6BUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:24:ea:a7:49:49:b3:19:39:a7:b8:fd:1d:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=9f44d8716bca707d18de8ef198c32cd687748f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:3d:d7:43:61:86:45:47:5d:68:0e:8c:2f:
2e:ef:07:6c:a6:dd:04:2b:30:b9:97:dd:ce:1b:8a:
d7:f6:70:21:9a:59:ef:9c:05:88:29:c2:54:92:8f:
c0:b3:86:d9:1c:d2:7a:4e:9e:1b:39:df:ca:d3:02:
16:c0:9f:29:aa:da:f0:03:e9:98:ce:b8:a9:b6:8f:
68:a1:3d:88:7b:57:aa:1e:52:13:ed:cc:79:e8:87:
2b:12:de:30:36:8d:f1:cb:ac:76:3a:65:53:29:f1:
75:6c:17:51:63:db:9e:49:54:12:78:e9:71:e0:b4:
d3:4f:e4:02:f8:4f:00:c1:a4:a3:c4:11:90:64:d3:
3b:97:6b:7b:51:f1:0d:cf:72:5a:ef:ae:4d:95:67:
08:32:98:97:7d:c7:75:fb:42:54:d7:a1:ee:78:c2:
31:f3:a6:7d:9f:36:e9:25:97:66:38:ec:91:a3:42:
cf:ec:a9:15:f9:50:50:5c:4b:2e:79:de:f1:29:e0:
3f:14:89:21:47:3d:09:fc:55:26:d2:97:0f:03:02:
aa:15:8a:b5:8f:d1:f0:1d:bf:c6:2c:dc:3a:3c:7a:
83:35:26:fc:1b:ed:f0:15:7a:15:60:13:6f:0d:c0:
87:f9:a5:74:e7:d4:75:be:2c:14:10:ba:6e:12:ef:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:D8:71:6B:CA:70:7D:18:DE:8E:F1:98:C3:2C:D6:87:74:8F:9C
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fd:0f:d2:ad:f3:b7:b6:65:32:fd:b6:fc:55:44:f3:40:bd:
29:2b:94:79:c0:fa:40:c1:7a:9c:b4:66:7c:aa:74:b3:b0:75:
c4:34:57:dd:48:8a:73:e3:37:d6:c4:62:0a:c8:db:10:7d:10:
0f:8c:a4:ce:5f:e8:50:8f:7d:44:64:e3:d2:17:8f:6d:00:c7:
0f:2a:06:23:90:88:a2:b3:44:fc:e4:b5:fc:74:45:61:9f:1f:
08:11:33:e3:03:89:32:5c:1c:3a:95:01:d3:6d:ab:4a:45:6a:
b3:f7:ef:97:0b:26:50:d4:7c:39:75:85:c8:fe:94:43:3c:1b:
a3:45:6a:72:36:57:11:66:d3:be:9f:b8:2f:8e:54:fe:e0:b7:
60:03:ab:26:7a:b1:85:87:1d:c3:bc:97:c6:af:fa:c4:9d:dd:
c4:12:e7:28:12:a3:4a:77:da:ee:9d:c2:63:0a:05:b6:41:8e:
97:73:19:e6:20:b1:8f:f6:c3:67:46:23:aa:5b:dd:1e:e5:5e:
ad:ce:5b:db:6d:3f:9a:74:67:3e:a4:1d:19:f3:d0:93:e0:d1:
87:23:10:d2:52:3f:d6:17:6e:b7:0d:f1:ce:3b:99:9e:29:b7:
35:e2:67:df:fb:6f:c2:67:8e:a0:fb:c9:85:8c:02:7f:00:a7:
60:83:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:02 2025 by rpki-client