Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: yYaXbke0zHjpBTxUsh0I5ymfbAvoz9unxWzFN4shooo=
Subject key identifier: AA:81:EA:8F:98:33:E1:43:13:24:67:9A:28:95:D2:65:88:65:D1:91
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 0198D4045F97F47B2C939E010868F9C61509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 147D
Signing time: Fri 22 Aug 2025 23:01:52 +0000
Manifest this update: Fri 22 Aug 2025 23:01:52 +0000
Manifest next update: Sat 23 Aug 2025 23:01:52 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: dOOg7sZEll7IHfhfw8R/EnN9jlfeXaBYmjZSXAIDw9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:5f:97:f4:7b:2c:93:9e:01:08:68:f9:c6:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Aug 22 23:01:52 2025 GMT
Not After : Aug 23 23:01:52 2025 GMT
Subject: CN=aa81ea8f9833e1431324679a2895d2658865d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:f9:05:22:6f:69:ff:ab:ff:bb:3c:df:d3:
08:f7:3f:89:35:c7:e1:35:2e:99:93:d8:b4:39:37:
75:03:9d:b1:b6:29:39:6d:05:91:b3:bd:f6:de:ec:
58:ea:b9:10:b5:48:bf:99:06:58:93:d8:69:23:8d:
af:8c:f8:5a:7b:96:d1:56:68:ec:ff:ba:eb:fc:56:
65:5c:11:fa:67:ee:a9:2b:aa:5c:75:d2:4e:5c:20:
cb:7c:f2:8d:eb:9c:46:75:ab:85:08:43:9d:d9:5d:
a8:74:bb:d1:87:68:62:96:d1:b6:13:22:21:0d:d3:
9a:c0:68:a0:fa:86:69:be:ea:b4:08:4c:78:1d:48:
ec:d4:88:62:64:93:27:d7:b0:f7:2d:3e:a9:bf:68:
aa:79:d6:6f:c2:4d:23:f6:f9:be:f5:19:cd:44:ce:
79:84:41:2b:01:77:86:91:45:32:48:61:92:38:f7:
c0:4f:e3:e2:d1:b6:20:c9:b6:1a:0f:d3:c3:5c:ff:
ed:11:35:ba:54:1c:44:e4:76:d3:2d:b2:ca:92:60:
d9:50:4d:2b:78:c7:32:b8:fb:a5:b7:dd:bd:93:ba:
33:fc:48:4f:0f:f3:d0:c8:20:41:74:20:99:ce:2d:
28:a2:2a:14:53:20:68:6f:3a:36:ff:49:c4:68:4b:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:EA:8F:98:33:E1:43:13:24:67:9A:28:95:D2:65:88:65:D1:91
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:ae:64:05:5e:6a:94:4a:d9:7b:60:e3:65:1b:eb:5a:95:
97:be:a7:92:12:79:36:c4:16:5b:8a:0e:96:36:b7:dd:43:42:
26:b4:cb:2f:9f:0c:e4:75:02:e9:47:52:79:78:d0:d5:67:68:
f7:d5:67:6c:af:00:88:8e:24:93:a8:5f:4b:4c:d3:83:2f:80:
69:33:b4:6d:c8:8f:a0:47:36:2e:37:ea:b0:fc:b9:b3:73:bd:
7c:53:89:4a:f8:b6:2b:cf:15:3c:5e:59:1f:9c:77:22:f0:b9:
18:70:5b:3e:dd:3d:1c:20:a4:3e:ce:11:7c:8f:68:22:5e:89:
2e:3f:14:0f:c8:dc:e8:74:c7:b2:1f:61:86:66:1f:37:c3:75:
e2:c3:85:34:5f:7b:8e:3f:46:57:3c:f9:b0:38:13:0e:15:f7:
73:63:59:1d:d9:c2:2a:6b:19:35:44:ed:de:b4:7a:d7:cc:7d:
06:6b:f1:28:39:34:7d:62:a9:36:78:77:cb:73:a6:35:c2:25:
92:49:55:9c:6e:45:1d:85:13:9c:a9:7a:36:fc:7a:6c:b3:07:
e1:9b:4e:44:e2:11:04:d4:cd:10:4c:78:fc:61:a9:68:5a:b4:
59:93:27:ba:ae:bc:7d:90:f1:9a:12:bf:9c:47:40:bb:f8:e8:
17:b9:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:09 2025 by rpki-client