Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: cf3WRulVO4XeiLHYYVcPuICvR+GI41sLrh+KEJ2BlR4=
Subject key identifier: AF:E4:73:AC:64:A2:7E:1B:B7:6E:61:1F:EB:C3:20:C1:B1:E5:18:82
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 0198D5BC5D17E09381BD9F1707C0FA52C1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 0F73
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: 3ncWfr+9jmGm3DFM+Em5K3M72X0QR78cNVf+4KJHG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5d:17:e0:93:81:bd:9f:17:07:c0:fa:52:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=afe473ac64a27e1bb76e611febc320c1b1e51882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:de:67:13:81:bf:d5:d2:09:b3:e4:85:10:
65:08:09:44:85:12:ce:94:48:c8:1e:6d:73:08:31:
79:93:d2:da:ad:12:ea:98:62:c1:33:51:2b:cd:9d:
b5:a3:ab:23:a7:96:b3:02:b5:7f:e9:41:73:7f:a0:
91:16:f3:0a:5a:1d:b0:f4:9b:bc:63:f9:46:4c:28:
d1:1a:56:32:ef:f0:49:ce:b6:5d:cf:5e:11:88:95:
43:1c:d3:87:9b:a7:09:93:d9:72:a7:d0:83:d5:8e:
27:16:77:b8:43:64:9a:ff:44:c4:b8:2f:e2:d2:d4:
37:ce:74:6e:85:a0:bb:80:35:ac:60:c2:cb:9c:76:
29:d8:43:69:11:bd:3e:cf:78:71:90:14:07:d3:6d:
9c:fa:98:ea:6d:a3:2c:dd:6b:cd:03:15:a5:35:6d:
0f:3a:2a:b9:f3:75:e0:8d:93:0c:b4:7f:4d:9c:bd:
a1:8b:68:61:57:5c:c9:40:ad:db:7f:91:51:5f:7b:
1a:d9:89:5f:4a:63:8c:69:e5:1b:e5:a3:7b:b0:0c:
f3:11:b2:11:af:80:92:f1:b7:a4:62:bf:32:ea:40:
5f:47:de:e6:e1:40:44:0d:66:9a:50:c7:95:f3:d6:
1e:08:93:5a:2f:d7:73:74:6c:a2:9b:c5:2e:fd:67:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:73:AC:64:A2:7E:1B:B7:6E:61:1F:EB:C3:20:C1:B1:E5:18:82
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b1:27:b6:48:b9:ee:3d:0e:53:a1:50:3e:68:ad:b4:d5:4b:
23:1d:b7:8b:0d:c9:3a:64:23:15:b8:04:fa:09:7e:a7:4c:bb:
46:47:6e:8b:df:b8:83:76:0e:89:46:2f:9e:3e:86:87:72:3c:
ea:49:e7:bb:8f:8d:67:18:d6:fb:2d:0a:d5:ad:59:9b:f9:1a:
9c:4e:f4:bd:03:fd:92:ed:d1:22:75:d3:68:49:99:98:95:39:
29:72:cd:9f:1d:7d:f6:11:ca:73:64:68:83:f4:d0:05:5a:38:
1a:0f:dd:a3:09:4c:a4:e2:1f:02:fe:79:10:0f:66:cd:09:0b:
5f:37:b3:f9:0b:9b:de:35:e2:8f:6b:8e:f1:9a:93:be:5e:e3:
7e:86:fc:a5:33:5b:00:ce:f7:96:1a:d0:e3:8f:91:a6:5c:0c:
3c:5e:65:2a:88:0c:7a:2d:12:ae:87:83:f7:09:49:5d:5c:16:
76:cf:75:20:4f:e4:5c:1c:e7:28:d4:90:99:d7:1b:d9:a7:2d:
36:d2:be:5a:37:94:d9:55:06:6b:28:96:aa:48:6a:9f:11:f9:
75:7b:fb:c6:60:ec:bb:16:f0:20:af:c5:95:97:ab:86:a9:d9:
04:9c:1e:21:2b:f6:87:2f:63:32:b3:48:6a:6e:7a:40:41:82:
07:61:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:49 2025 by rpki-client