Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: IHbss5S2oguCdeEtjkzdAwxKWUNsqOKU5h+5TRAFJTA=
Subject key identifier: FE:C1:08:B1:4E:7A:28:2A:45:CE:C5:FA:47:40:6E:25:CB:FC:6A:6D
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 0197BFDAE2FAFFEF74C413550F9686E08809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 02D3
Signing time: Mon 30 Jun 2025 08:01:22 +0000
Manifest this update: Mon 30 Jun 2025 08:01:22 +0000
Manifest next update: Tue 01 Jul 2025 08:01:22 +0000
Files and hashes: 1: j5QtHlhxEZZOM5CvXJMLssoxGGc.roa (hash: 8L3ZEU7bcEWssZWSFVojRb4D5wALELFNA26f5J8ZxnI=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: THEFnO1hf9p7ZyDuBstM31umaU5uvs6v/arWx7IOAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:e2:fa:ff:ef:74:c4:13:55:0f:96:86:e0:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Jun 30 08:01:22 2025 GMT
Not After : Jul 1 08:01:22 2025 GMT
Subject: CN=fec108b14e7a282a45cec5fa47406e25cbfc6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:08:b6:44:dd:17:a7:8d:dd:82:99:46:95:
de:6b:85:f3:b8:c9:cb:69:7d:e7:4e:a7:38:04:7f:
b5:88:1c:31:90:44:24:29:5f:ea:e3:df:03:6f:41:
72:84:16:6f:2c:9b:9a:e9:c8:d6:01:04:82:9e:4a:
1e:64:33:20:5c:13:4f:b7:f9:32:10:ab:53:eb:4c:
74:10:bd:fa:1c:fa:32:95:60:de:53:eb:35:13:b4:
86:a6:03:68:78:ee:5d:8a:98:fe:6d:de:eb:91:18:
85:9d:2c:c8:6b:2f:de:fe:93:c3:e4:62:ea:a8:cc:
4b:9e:b5:3a:f2:b7:11:e9:1e:1a:d8:c3:14:1c:b5:
b6:84:23:10:9a:34:ce:6d:a6:d8:de:80:4b:68:7f:
f3:13:07:fb:bd:ed:bc:9e:46:95:b6:06:54:45:03:
32:e7:ba:58:8c:8c:1f:27:d4:eb:da:23:26:b1:94:
d4:d4:dd:72:e7:0e:7a:14:55:f4:a1:aa:3f:87:e5:
79:d6:6f:bf:27:c1:8f:fb:fc:af:ac:61:fc:ba:b3:
50:70:2e:76:a7:04:5c:84:bc:3c:45:51:e4:27:e6:
15:e2:ff:64:c7:ef:9f:f0:b3:94:2f:74:4e:28:5c:
30:e3:86:30:a1:02:f1:6e:21:d3:b7:bc:25:fd:d9:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:08:B1:4E:7A:28:2A:45:CE:C5:FA:47:40:6E:25:CB:FC:6A:6D
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b3:f4:3b:30:ad:7d:66:ce:58:cc:8d:48:60:6f:3c:21:c8:
6d:ae:76:f8:82:fc:7a:e9:d5:1e:d2:b2:e1:bf:03:0a:7f:3b:
84:28:fc:44:98:46:54:ac:5e:11:88:1b:8b:aa:72:ad:ff:52:
69:b1:dc:fe:63:af:b8:0c:38:51:53:dd:2b:27:88:9c:9f:6a:
2f:cb:e2:ec:27:b1:4f:a1:aa:59:f6:24:23:1a:1c:6a:f1:e6:
03:95:09:84:d6:7e:ec:21:ca:57:74:4a:e5:cb:dd:62:7a:cc:
cd:2e:cf:68:9f:1a:de:a3:39:1b:36:16:6f:b6:11:3b:d2:7d:
6b:f0:f2:f4:0b:87:ef:6c:05:ab:9f:11:b9:15:4e:13:40:4d:
ad:a6:d4:b7:36:31:78:97:db:9e:16:30:d2:5a:1c:e1:73:9c:
81:85:3d:9d:2a:27:f8:16:97:0b:d4:d5:cf:f4:40:b8:f9:a8:
3c:da:14:17:23:43:4b:36:68:dd:69:1c:b5:b2:de:03:25:3c:
8d:a3:99:38:8a:ef:25:01:a6:3a:d8:b7:ac:ca:97:8f:c0:0c:
a7:e5:63:29:61:6e:50:c2:2e:29:92:df:4f:9c:c8:5b:a2:67:
bd:02:52:1e:7a:5a:26:be:97:79:82:cd:17:a7:13:02:d5:8d:
9f:ee:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:43:44 2025 by rpki-client