Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: nI5gS4bY/BdHBOjMT2tahlHQiQaNgOLAomIs0yEMBvI=
Subject key identifier: 6E:99:DA:26:F0:A0:CC:72:D5:0D:74:77:5B:59:7D:AC:E5:26:A1:F0
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 0198D660BED90DB408A8FABB7E1CDEDB7D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 040B
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: DIy0Lg/KzduNlHL831yI4HHbJLybGWg0JKpS/odi75Y=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:be:d9:0d:b4:08:a8:fa:bb:7e:1c:de:db:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=6e99da26f0a0cc72d50d74775b597dace526a1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:5a:b5:49:63:35:62:c4:b1:f5:f8:4d:ed:
3b:82:46:4f:49:47:86:9b:e8:a2:6a:37:25:f6:41:
1d:43:1b:e3:12:68:1f:dc:f0:64:87:26:c7:1f:a9:
1d:e6:ff:83:a5:5e:3b:59:99:6c:09:e8:1d:b9:e4:
df:c9:e5:6e:1b:8a:0d:65:cb:2f:47:3b:fd:2e:66:
f8:c7:93:2d:bd:cb:17:2e:8d:5d:f1:78:43:06:80:
94:cc:e5:3d:f4:5b:4a:89:b3:98:d8:a2:2f:b4:86:
b0:9d:a9:6c:3c:a7:59:77:41:41:d5:c5:84:3b:41:
d5:1a:79:fa:fb:15:85:13:80:8c:90:65:5f:01:2d:
b8:dd:e0:4e:d5:59:3d:70:f8:28:96:d2:06:d8:8d:
0f:0d:6f:05:0b:db:8f:91:46:2c:cd:7d:3c:b0:23:
38:da:bd:4b:7a:59:84:0a:ab:93:f8:92:a9:dc:d8:
76:60:1b:3a:b3:68:d7:0a:32:5b:c4:0e:e4:67:27:
09:ec:06:56:60:f8:41:c3:5a:4d:97:b2:4e:35:2f:
44:2e:b5:3d:3c:81:24:48:54:5d:ce:6e:fc:0f:ef:
cf:ea:45:41:71:b4:e8:72:be:bd:00:5d:27:37:fb:
e6:d5:24:88:2c:28:b8:46:2c:8b:c7:ea:06:4d:99:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:DA:26:F0:A0:CC:72:D5:0D:74:77:5B:59:7D:AC:E5:26:A1:F0
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:49:4a:78:cc:88:2c:e6:67:65:2d:22:57:8d:3c:3e:be:
da:c6:9a:8e:fe:3c:7e:04:9b:aa:99:45:d7:ae:9d:7a:62:b5:
5e:82:5b:4e:1a:42:96:77:ed:4c:71:c0:e1:3e:0d:ec:61:a5:
9d:1d:d8:80:9b:3d:57:0a:11:4a:b6:c1:46:19:09:16:9a:d2:
a2:9b:a0:70:2c:78:38:9f:41:23:0a:9b:ce:d3:ec:d0:6b:59:
32:b9:fe:0e:ec:2b:32:b0:68:fa:dd:43:3c:80:f5:10:7b:c0:
ce:70:7f:c0:0e:b2:e8:ed:27:8d:ca:bd:11:ab:0d:d3:92:68:
2a:be:9e:d2:00:fc:90:2f:f5:83:05:7c:c8:ba:26:6f:c9:01:
49:06:09:00:c1:fa:93:b4:84:1e:dc:d9:42:59:28:8a:df:4d:
4c:f9:c3:ea:70:49:21:a7:20:81:a2:74:dc:7d:fc:53:40:51:
55:8a:bb:46:13:b6:2c:32:85:02:70:41:34:7c:42:40:39:06:
42:ba:c6:04:57:f8:1a:a0:fb:df:88:3b:b0:fe:f1:d1:3a:17:
4d:01:c8:a3:66:d4:33:f8:a0:14:a9:e7:5d:83:bc:66:33:f3:
43:bc:1f:c3:44:de:f9:ae:98:88:22:89:19:91:fe:89:fd:d7:
ab:9e:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:32 2025 by rpki-client