Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: I8q+vqwj75zek005JZ1vM2ytqtBLgFaiaqVVo8/oKo8=
Subject key identifier: 19:25:2B:8C:1B:AF:73:79:EA:79:A6:CA:35:C1:57:C5:68:C8:C2:5D
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0198D6CCDCDE213349D0E0B3234A442E0D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0BBE
Signing time: Sat 23 Aug 2025 12:00:06 +0000
Manifest this update: Sat 23 Aug 2025 12:00:06 +0000
Manifest next update: Sun 24 Aug 2025 12:00:06 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: Anr+yZagse7OdlR5sQ6X9q5VLYq+CCyhY9dMeCh2eZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:dc:de:21:33:49:d0:e0:b3:23:4a:44:2e:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Aug 23 12:00:06 2025 GMT
Not After : Aug 24 12:00:06 2025 GMT
Subject: CN=19252b8c1baf7379ea79a6ca35c157c568c8c25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:93:d1:39:d5:e1:a2:ed:80:fc:21:03:9c:
5a:09:18:0c:59:01:3e:ea:f8:b3:4d:72:6c:b5:82:
9a:8d:9e:f2:f9:13:0e:86:1c:52:03:f4:61:8b:a9:
96:00:2f:a0:ef:12:e9:99:21:11:39:c4:27:0e:9a:
ed:e8:42:f2:78:22:0b:46:e6:f8:71:f1:d9:9d:c8:
5e:3b:d1:f2:7d:97:23:86:69:9e:8a:1b:3b:57:7a:
eb:5e:be:27:9b:b6:7e:6c:6c:3d:8a:1a:3a:57:f2:
87:2a:8a:55:22:5c:1b:df:5a:55:30:08:dc:e5:9d:
23:a8:6c:58:06:df:f1:b7:3d:d0:78:74:8a:58:a2:
72:f6:93:e6:5d:52:ca:61:1d:c1:30:bf:25:6a:f7:
3f:91:32:a8:99:84:47:50:5d:e7:d1:83:b9:8b:e8:
df:3a:7a:66:73:f9:6d:ca:94:a3:12:a3:db:40:f5:
15:4d:f4:64:b3:5f:f7:6d:76:19:3f:f3:75:8b:2a:
ea:b5:4e:c0:3a:71:eb:a7:30:cd:1c:79:97:12:f1:
da:86:67:d2:b1:94:b0:f8:e4:1c:91:21:63:16:c4:
20:6f:cc:7d:e9:e6:45:24:6f:9e:cc:74:e1:7e:cc:
79:27:b1:52:70:24:cc:ca:2d:cb:3d:86:cb:00:c8:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:2B:8C:1B:AF:73:79:EA:79:A6:CA:35:C1:57:C5:68:C8:C2:5D
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:b3:4e:e2:cb:60:9f:61:06:e2:ae:f4:1f:e0:83:08:e8:
2e:84:b7:84:cd:d2:1a:7c:35:d6:f8:f0:51:a8:d6:ca:86:d0:
89:29:e3:85:bd:90:a8:7e:ee:f1:97:28:3d:a2:4d:d2:25:a9:
5f:e9:3c:c0:22:1b:0a:97:20:c7:c3:ef:9b:f6:ea:06:7b:26:
9d:c6:c0:a1:59:aa:fe:ab:c8:e7:a9:3a:2c:42:05:ea:69:0b:
c8:8b:d6:82:ea:9a:ee:90:3b:00:79:4d:65:bc:1c:25:94:4b:
e2:0d:95:a5:2e:cc:2d:96:60:98:df:4c:29:92:a1:f3:41:b9:
23:85:11:0d:33:ac:dd:37:62:a8:81:6c:6d:92:7e:02:57:f9:
f7:41:27:2b:9d:1b:1a:4a:27:ed:b7:85:0e:36:1c:c1:69:a8:
dd:35:48:c8:f0:6b:5e:88:3a:3f:73:0d:da:e2:b7:69:12:ff:
c7:29:00:b6:51:3b:f0:cb:85:27:ea:bf:3b:cd:cc:0f:7d:31:
b1:9f:0c:61:c4:b2:c9:1d:07:c7:76:69:55:62:31:e4:0c:ab:
ce:4d:d1:51:fc:54:33:4b:c1:c3:88:e5:cc:ed:53:4b:29:ba:
d1:59:a4:df:83:89:e7:67:ed:ea:8c:fe:2a:db:4a:39:fc:8f:
0b:e9:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:33 2025 by rpki-client