
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: E/n+shYTFM6soRwBnkgxMevH9rxtJxNIS4yGa0gc84E=
Subject key identifier: AB:F6:D7:60:72:44:A2:C5:D3:76:ED:4C:18:3A:8B:6C:F6:EB:6E:38
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 0199FBEC0171C32FE70692830D45DE18AB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 0180
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: 76AQV6p1LregarCyl/uqRI2OMmm5a2EstXkleUpKVXs=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:01:71:c3:2f:e7:06:92:83:0d:45:de:18:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=abf6d7607244a2c5d376ed4c183a8b6cf6eb6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:d4:69:2c:e2:5f:45:d2:9a:b3:a3:e1:19:
3c:bc:61:2f:3a:9c:a6:09:11:24:08:07:e0:a0:5f:
9b:4a:93:80:10:d3:88:be:90:38:16:d0:e0:76:ea:
a5:85:77:ea:5f:69:93:49:06:e0:05:a8:2b:3c:65:
84:8a:0a:02:36:a9:2e:f1:99:fc:80:16:93:7d:c0:
ba:f1:66:e9:5c:3f:24:a7:cc:c3:5a:d5:1e:4b:85:
1e:3c:52:51:66:87:02:79:9e:9c:ff:a6:ab:82:d8:
01:5c:7e:ee:33:23:f8:a9:30:da:4d:bb:e4:84:18:
b4:eb:03:c6:68:71:97:6c:0c:e7:19:ee:63:5d:f8:
f2:1c:c5:35:b2:16:71:d4:07:2a:44:c7:80:e9:2b:
d4:82:8c:22:4e:0f:eb:98:fd:c3:ef:df:78:b0:62:
e8:34:f7:22:6f:18:63:81:41:a9:5b:d1:37:10:6a:
7a:bf:b9:40:e6:f1:68:0a:0a:63:a5:9f:d8:33:1e:
ff:ba:88:28:96:35:10:62:5e:21:3b:fd:28:a0:a8:
ca:d6:cf:41:17:ef:00:53:08:6a:91:86:b5:f6:84:
ed:56:0b:8e:d2:c1:3d:41:58:bb:93:d9:64:b8:e8:
ec:a8:a1:de:12:3b:f2:ad:67:a1:1d:dd:0b:a6:78:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:D7:60:72:44:A2:C5:D3:76:ED:4C:18:3A:8B:6C:F6:EB:6E:38
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:73:3c:86:2f:b4:19:79:77:a3:7a:fd:e6:d0:00:89:1d:
cd:6f:d6:36:5c:8e:1e:70:26:ec:eb:e6:02:02:dd:3a:c3:43:
8f:aa:ce:a0:f5:ca:76:4d:9a:c3:d3:76:a1:da:0a:41:a2:a8:
20:3e:f5:80:e1:9e:1d:20:cb:3b:ad:62:56:1b:b9:ad:df:9c:
f4:ea:78:6e:74:f3:69:6d:75:10:29:b0:5a:5e:14:da:6e:ad:
53:8a:45:89:90:52:60:ca:71:d6:a7:5b:b4:52:3a:79:67:f7:
1a:ae:ce:37:41:9e:fe:76:3b:0e:58:a7:64:e0:0d:b6:d7:54:
dc:25:4b:b1:18:6a:87:50:e8:45:9f:3f:85:e1:c0:fe:86:ec:
91:1b:c6:5f:38:b7:24:b3:fe:25:a7:3c:7f:a2:7d:76:94:1b:
43:f3:c9:cc:5b:df:14:65:10:f2:a5:0c:3b:47:32:01:0b:65:
e1:66:e1:76:92:cd:6e:9a:76:e3:bb:c9:a5:b3:e3:db:ee:58:
2f:0f:4d:c9:6f:c4:01:af:93:8b:80:70:dc:16:c4:00:da:ae:
d7:ab:83:a6:c5:41:b6:1e:26:fb:50:7f:42:21:83:78:29:c3:
3d:2d:84:88:58:bc:4b:59:1f:7d:67:98:aa:b6:c2:1d:27:3e:
fb:e6:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:52 2025 by rpki-client