Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: dypbkt0KX60d79H8TbGHTKm6BnF1F/whAv7x/qi8dP0=
Subject key identifier: C2:D4:D2:BE:02:3A:9F:45:2B:50:17:E9:48:76:F2:C3:96:B4:8A:DD
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0198D4A795F47A35D5FC7C615FC1FF994D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0D02
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: XgtN+LGjXwSCTdq4+JkDq0qVHvYLlXODIoGtoilYjXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:95:f4:7a:35:d5:fc:7c:61:5f:c1:ff:99:4d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=c2d4d2be023a9f452b5017e94876f2c396b48add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:31:38:2c:ef:37:3c:1e:92:0f:dd:05:3b:
e5:30:3b:a1:7d:1a:cd:a8:07:41:be:43:ac:55:4f:
82:7a:6c:bf:56:78:87:d5:93:28:0f:96:74:8a:4a:
e0:25:6c:03:a7:7b:da:59:5f:16:56:58:68:64:c4:
29:69:b5:2b:6a:9e:00:b4:81:9e:7d:c6:df:68:f4:
c8:d7:9b:01:88:5a:7b:d1:03:3c:9e:1d:c8:a0:d2:
b6:99:94:d2:c2:82:0a:dd:a4:e4:7e:eb:6e:a5:26:
fb:69:09:41:3c:74:4f:b4:2f:4f:36:af:d2:31:7e:
2f:0b:42:99:5f:29:0e:93:22:b2:b3:90:ff:85:a6:
ca:4d:04:9f:82:d7:18:35:4f:b1:88:c5:5f:2c:cb:
7d:1c:25:91:af:58:52:e3:07:18:e0:7d:eb:0b:82:
56:0f:61:65:d8:bd:f0:a2:45:7b:73:a4:d6:49:61:
88:65:09:1c:03:af:2d:4a:4d:65:18:31:f8:0d:4f:
46:a4:1a:9b:5b:d8:64:92:aa:f6:6b:a3:eb:14:fe:
df:cc:17:57:37:62:cf:53:3c:c4:e4:8b:0b:8f:e0:
90:a2:1b:f7:45:e8:07:ca:b3:5b:a0:da:4c:09:59:
3e:80:59:0c:f5:89:fd:20:cf:bf:fd:9c:b8:dc:04:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:D2:BE:02:3A:9F:45:2B:50:17:E9:48:76:F2:C3:96:B4:8A:DD
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f1:97:b0:4c:98:02:40:dd:5a:5a:f8:80:41:9b:e5:83:55:
9a:64:48:b9:ed:f9:30:de:91:f5:e2:1c:f0:9a:1e:fc:59:ff:
3e:4f:8b:5c:4a:b2:b3:f1:2b:e1:3e:98:8b:57:f9:07:0a:96:
9d:ae:79:29:c7:7b:84:dc:c5:40:93:be:28:78:bc:72:71:7d:
51:74:94:9d:10:99:af:dc:f1:16:52:5a:15:ab:46:ab:ee:91:
f1:1c:55:da:db:43:98:1e:52:fa:29:71:a7:bd:fd:c0:7e:6e:
a1:24:b5:f5:01:81:0e:7f:53:60:6d:bc:d0:70:1f:dc:77:fd:
16:ac:46:1b:dd:28:1d:9c:7e:18:db:16:39:56:d4:13:d0:a4:
49:02:e3:2b:5a:b6:fd:b7:ef:07:6d:76:43:f2:4c:42:58:2b:
c3:26:3b:7a:65:42:7a:af:3f:f8:48:7f:f9:88:db:ac:18:09:
47:49:56:f8:79:6f:1f:8b:79:70:7d:80:7b:6e:b1:56:65:f5:
b0:ed:0d:ba:6a:5e:20:bb:42:c2:7c:31:79:41:a0:ad:63:a1:
2d:56:1f:98:c0:1d:b1:fd:0c:c4:b3:96:7b:b6:f0:8e:28:68:
1e:44:09:62:f8:8d:1e:e4:5a:78:21:42:43:c5:d7:c6:96:0e:
55:2d:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:05 2025 by rpki-client