Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: f8vykUC2TVcFRnVDzt4chz/LAaUosfppf+VJKLHpcDk=
Subject key identifier: 7E:1A:A2:7E:9F:21:67:C8:F9:AC:72:15:B3:75:15:A4:6F:C7:81:78
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 0198D5F12C0C9B37640B3837D0B505BB8211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 0363
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: j5QtHlhxEZZOM5CvXJMLssoxGGc.roa (hash: 8L3ZEU7bcEWssZWSFVojRb4D5wALELFNA26f5J8ZxnI=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: uud7iGDp3ONLI7UM4Pd8+H7w7CcUL5JelUi5zrpDu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2c:0c:9b:37:64:0b:38:37:d0:b5:05:bb:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=7e1aa27e9f2167c8f9ac7215b37515a46fc78178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:a0:36:9a:69:53:db:62:76:cf:5b:02:dd:
53:09:74:ba:10:73:8f:dc:0f:22:dd:cc:37:42:8a:
15:dc:e4:15:27:aa:38:40:b2:bd:5e:bd:0b:d0:8e:
cd:48:30:8d:8e:2a:ce:a1:d0:2a:f1:81:74:8b:0d:
e3:9e:69:12:c7:5f:3a:d7:34:af:de:d2:bf:bf:3f:
a9:65:dc:8f:b0:e2:b9:ee:07:5a:3c:f3:70:e7:bb:
6a:3b:1f:c4:0b:d3:a1:07:19:1d:34:fe:ed:73:07:
b8:97:f9:23:d9:2b:b3:0e:47:74:7f:5c:1b:53:cd:
a7:f4:e8:87:65:16:b2:5d:60:14:3b:e3:06:11:eb:
2b:e4:a0:b3:f2:5a:6b:5d:cf:4d:11:d5:dc:7e:6e:
e6:f8:2b:47:fd:a6:b5:80:21:a3:b5:04:93:c3:e6:
22:b6:b5:64:d8:82:87:e3:41:74:12:c2:22:0c:18:
b8:42:5f:17:66:63:76:e8:3d:b9:7d:bf:14:2f:6e:
30:fd:c1:f9:74:4d:9a:a2:33:69:93:b8:d2:30:ee:
8a:8d:fd:8a:a7:4d:74:48:7a:b3:74:99:47:b2:cf:
ea:23:3a:cd:19:5e:70:4d:9a:47:1d:2d:b3:b4:3b:
d2:3a:fb:63:45:96:d2:70:94:aa:ae:a9:d0:27:91:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:A2:7E:9F:21:67:C8:F9:AC:72:15:B3:75:15:A4:6F:C7:81:78
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0c:dc:76:fd:d7:a3:7e:0d:09:85:8a:bd:86:a1:29:61:ae:
b3:9e:ee:8b:2c:31:51:09:9a:bb:9c:1d:c2:28:38:2b:31:e5:
bc:8e:92:89:8f:5c:ef:76:32:a6:05:7b:bc:29:51:bc:8c:01:
f1:6e:df:a3:b4:9a:f0:f3:34:8f:3c:58:09:b0:9d:66:05:6b:
1f:b0:f8:41:c6:42:8b:79:77:bf:86:54:cf:30:02:dc:05:f9:
9e:25:10:5b:5e:fc:06:4d:b2:57:e8:11:6c:32:4d:34:a0:e9:
ab:4d:7a:92:c7:06:42:a1:d1:47:8a:dd:e0:7c:70:b4:66:da:
fc:e0:9f:c5:3d:cf:e6:73:39:3b:66:19:81:a5:39:d9:b4:b3:
1e:9a:2e:23:39:63:64:85:89:3b:77:3c:98:66:2f:c0:5c:99:
e8:06:ce:52:dc:b1:9d:e4:08:23:49:40:47:07:61:10:82:9e:
b4:a8:c1:a8:44:83:05:55:8a:90:1a:f8:62:8a:f6:5b:38:f1:
21:99:cc:1c:67:5c:81:f2:83:9a:ca:13:e3:1d:a1:5c:9d:ce:
7d:37:09:34:6d:e0:2c:07:18:79:84:2a:29:33:68:cf:67:6e:
1c:04:48:d5:7f:6c:4c:04:c5:3a:a2:5a:95:97:da:6d:e9:70:
0c:8d:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:16 2025 by rpki-client