Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: RjmxF4wW2KlzQEz6F0Rq35eZP9CBIBMFppiDHdh+A1Q=
Subject key identifier: A0:33:44:D6:E8:FD:83:BD:4C:FC:E3:2D:6B:0A:A8:69:88:BE:E0:FE
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 0198D660224D54C679ADD7B1277E2F18946A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 0FA5
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: pPt641wnyhP0D1zdcpL9/ASvYpadKtNvqBdzlIOPu2c=)
2: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:22:4d:54:c6:79:ad:d7:b1:27:7e:2f:18:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=a03344d6e8fd83bd4cfce32d6b0aa86988bee0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:5b:ab:04:16:4f:7a:32:e0:80:f6:df:bd:
53:d8:da:6e:8b:05:e8:d7:51:8c:fe:fc:1b:d9:05:
d4:ba:4b:18:d0:5b:3c:3a:27:60:1e:b4:85:12:4c:
61:8a:1a:c7:91:57:2f:be:0f:1e:47:d5:8a:c9:2f:
77:f7:4b:5c:cf:61:70:9d:3e:2f:c9:22:25:e1:c1:
80:0f:da:9d:e4:46:cc:9e:70:db:0f:36:13:20:79:
b1:b5:d9:db:c3:9f:4e:52:0c:50:d3:e1:d8:9b:0d:
a2:65:f4:18:99:83:03:f9:18:0f:1d:43:05:54:18:
97:54:17:12:2f:1b:c0:eb:69:33:4a:2f:fe:83:03:
19:db:bb:ab:b9:35:c8:cd:48:65:3f:10:c8:2a:7f:
f0:27:24:ac:68:0e:60:23:23:3b:8e:32:a8:12:5b:
13:43:c9:f7:b6:83:a8:bb:ff:b5:81:58:bd:27:44:
4f:0e:bf:67:bb:2a:f1:13:e6:76:37:ff:e1:e3:ff:
7c:47:68:2a:06:fe:07:f0:1b:f9:eb:88:27:c9:37:
d2:d3:2a:81:d6:6a:fe:01:62:76:ac:f8:0a:1c:81:
e5:a6:05:49:3a:0c:10:b4:e3:62:e9:ee:d2:7e:f2:
b7:27:27:24:4e:d9:41:b7:d5:41:4e:0e:40:07:c7:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:44:D6:E8:FD:83:BD:4C:FC:E3:2D:6B:0A:A8:69:88:BE:E0:FE
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e5:4f:8a:fe:62:76:bb:ce:a4:58:6e:d3:e5:cc:f2:de:5a:
4c:fe:60:07:46:8a:1a:20:61:7f:d6:e1:19:9c:16:39:b7:4e:
d3:17:02:7f:76:58:98:4c:3c:77:c8:d2:ee:15:cd:a8:69:c8:
a6:86:65:4a:00:3a:a3:dd:1c:7f:67:f7:ff:93:11:4a:95:fe:
c0:09:19:2c:52:81:7f:58:cc:f8:b7:b7:3d:9f:50:ed:de:14:
bf:ed:82:5d:e5:a6:01:91:08:a6:a9:39:c8:eb:8c:09:88:92:
8e:b8:02:1b:b9:65:b1:45:c0:eb:a1:42:f7:04:76:50:2f:61:
1b:9e:a6:6d:11:e3:fd:93:1c:32:ec:27:0b:5d:04:9f:d1:10:
4c:99:28:f0:46:c1:3f:2c:c3:a7:3a:e1:bc:ce:e4:78:dd:f1:
8a:b7:49:78:3e:ca:92:f8:66:9a:8d:46:33:61:fa:84:03:65:
f5:72:29:30:a0:7d:44:25:6a:f0:46:7e:04:34:20:89:3c:cf:
ad:21:c8:7a:f3:9d:36:a4:a7:66:86:36:04:06:2b:72:f5:fc:
3f:52:2b:c3:28:38:45:40:59:34:48:04:8d:73:ff:bd:cf:3c:
01:ba:29:d7:31:76:ef:bf:6f:7d:b7:c6:07:c5:fb:bf:c7:12:
eb:9c:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:47 2025 by rpki-client