Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: SMLunQUr3cPnZDozXeUzxpUkjDHYLQLDyDaZ8jFb0oQ=
Subject key identifier: D4:2B:88:48:FB:45:5D:7F:D5:4B:B7:F7:E0:F2:28:AD:7A:BA:18:D0
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019847771AC3270412C289608751A4B65889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:44 +0000
Manifest this update: Sat 26 Jul 2025 16:00:44 +0000
Manifest next update: Sun 27 Jul 2025 16:00:44 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: Qo+pfr8rDOqU3VlQgKw0T1jhN7dflEklMJnGLMMD6WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:1a:c3:27:04:12:c2:89:60:87:51:a4:b6:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jul 26 16:00:44 2025 GMT
Not After : Jul 27 16:00:44 2025 GMT
Subject: CN=d42b8848fb455d7fd54bb7f7e0f228ad7aba18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:18:4d:03:3f:f9:70:c9:9b:7c:dd:fd:1f:
18:ac:78:6e:96:90:d3:d0:13:04:b2:d5:fc:93:50:
f8:a8:ec:f7:4d:98:03:1d:c4:9e:78:ac:19:2a:06:
ad:c4:6f:30:48:db:af:c0:01:43:ec:a5:10:80:30:
b4:c4:0f:6b:c4:ad:b9:d4:66:8f:3c:f1:da:ad:10:
b1:18:66:fe:20:47:72:9e:b4:3c:b9:41:f3:1a:32:
cf:a0:46:76:e7:68:e2:3b:c7:a5:78:9d:e1:63:ba:
c6:d1:37:ed:e7:4e:d0:74:2e:46:bd:6a:19:5b:e7:
cd:98:87:d4:75:9d:6f:e7:fd:ff:44:bb:c2:c3:cd:
e2:c3:a0:cb:82:92:19:e5:df:98:de:6c:a0:04:6c:
59:17:35:7e:21:38:4a:a5:4f:e5:de:82:6b:4e:d3:
2b:7c:c5:29:41:6d:09:cd:28:a4:35:a7:7d:9f:0f:
f4:43:6a:0f:66:de:73:75:b8:bc:5f:a8:3a:24:3c:
2d:74:2a:03:72:ec:29:35:f4:03:41:90:91:20:c1:
52:d3:f5:6b:6e:ce:38:69:ff:ef:a3:d2:71:22:79:
45:10:e4:68:d0:78:82:e8:a3:7c:89:a7:eb:77:4a:
7f:3a:57:0b:68:ac:66:a3:44:be:ef:05:5b:8f:f7:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:88:48:FB:45:5D:7F:D5:4B:B7:F7:E0:F2:28:AD:7A:BA:18:D0
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:5c:77:41:e6:54:0c:5c:8d:66:19:8f:3b:43:17:75:e9:
03:11:c7:19:58:f9:27:30:12:c7:4d:99:b1:51:70:72:fe:a3:
99:e3:0a:6b:c0:4d:b0:c9:7b:0f:0b:52:15:74:14:87:94:e2:
da:de:55:f3:94:f3:90:26:8e:97:c0:53:0b:76:42:21:50:05:
80:08:46:2b:9e:db:a8:12:e9:1d:1a:11:c7:f3:44:d5:23:d2:
29:b6:b2:2e:86:14:8c:5a:e5:3c:c8:c9:d0:39:0a:de:07:22:
87:e9:6d:f8:d5:a2:64:52:fa:c6:63:df:6b:fd:56:7b:40:b0:
83:1e:6b:54:20:24:c4:b7:cb:02:28:93:fe:28:36:18:c3:29:
b8:70:a1:d1:fd:27:74:4b:48:90:6a:7c:e0:c0:fb:27:f2:98:
5b:7e:5f:9c:a6:7a:34:eb:3a:8d:cd:23:36:ba:57:4f:cb:dc:
17:20:16:c8:37:7b:e0:7e:33:d4:51:6a:35:9f:2b:59:69:b3:
08:cd:89:f9:66:e5:b4:ee:f1:5f:82:0a:46:d0:bd:c5:86:bb:
ad:bb:21:ce:86:81:6d:22:eb:a6:b7:ac:b5:6a:23:58:2d:e5:
f4:3f:4d:51:ca:86:8d:e4:87:b1:06:f6:c1:ea:8b:84:a5:d2:
ac:f1:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:07:43 2025 by rpki-client