Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: yr+/WivBpbxdYQ3HhBIb5jIuCfoG7gvEd+lU4GBYnso=
Subject key identifier: CC:66:D6:13:1A:E7:8B:7A:79:D4:91:B3:4D:67:8B:B4:9A:6B:56:4F
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0199221EF13CC40719EDB0A05D5ED0BF4FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: ebP5dzjaLLn3f7K4rFbbLYVxXtWUHsIYU8RT617R/+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f1:3c:c4:07:19:ed:b0:a0:5d:5e:d0:bf:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=cc66d6131ae78b7a79d491b34d678bb49a6b564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:f6:31:96:5c:4f:51:13:5d:4e:6e:38:14:
f8:8d:97:15:2b:c4:6a:c7:b9:f7:f2:dc:e5:7e:57:
83:ce:f1:3c:9e:b3:36:b1:a7:60:6d:8f:7b:52:fa:
cb:4c:48:9e:e7:04:f1:c2:b3:fe:a5:4f:42:d8:10:
2d:3f:78:ca:10:43:63:28:41:32:27:37:c0:bb:71:
4c:b9:7a:23:96:1e:38:cb:a6:0c:b7:f1:b4:3b:0a:
42:39:cb:7c:38:72:d5:85:f0:65:05:89:89:91:7c:
df:f8:21:cc:5a:5b:cc:27:64:54:a7:ac:19:11:06:
e3:bc:89:67:24:d5:68:34:50:31:e5:9e:76:79:16:
86:1c:12:ad:c4:b8:36:0c:92:6a:cc:fa:36:53:af:
46:f2:03:94:98:08:94:86:76:ab:47:bd:aa:13:f8:
3c:78:ac:4b:e1:15:0d:b2:14:57:bb:48:d1:ce:c1:
b8:4f:17:20:a2:8f:1e:c8:63:59:08:52:a0:64:55:
20:67:5a:d6:fc:6f:0b:97:92:7e:b8:8f:a1:c8:2b:
4f:56:05:ac:96:56:1f:4b:8a:3c:8c:2b:02:b3:ba:
9b:2f:fb:7a:84:cf:a1:d6:02:96:16:12:6d:0d:3c:
92:eb:e2:7b:3d:9d:1e:cf:52:eb:12:09:3f:c3:0d:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:D6:13:1A:E7:8B:7A:79:D4:91:B3:4D:67:8B:B4:9A:6B:56:4F
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:53:00:1f:dd:96:85:74:cf:a6:af:27:de:d7:1a:79:5a:
a8:be:ee:4b:06:7b:11:05:8d:5f:7b:d2:02:83:fc:d8:a1:23:
2a:60:00:0a:67:ce:03:19:c0:29:eb:c8:1b:b4:e3:a3:22:b4:
4d:9c:12:6a:17:a0:b6:14:ec:7d:08:66:2e:63:93:e4:6b:5b:
29:de:a5:e9:23:fe:4a:44:6a:1b:06:7c:2c:08:01:0c:f3:70:
4a:a1:da:06:9b:7e:c8:89:df:6d:62:c4:44:5d:a7:1b:16:8a:
9b:40:84:ef:e9:f5:2c:84:e3:ff:7c:5e:1d:70:2e:62:d6:66:
23:ab:67:d0:70:0b:63:1c:40:31:1b:71:fc:04:32:4d:18:1b:
9c:ea:3f:8f:25:9d:ed:ea:6e:f2:9f:0a:aa:47:41:1a:0a:62:
39:86:7b:03:b5:51:6f:90:a8:ac:7f:ce:28:94:f2:ac:db:df:
7a:37:14:00:89:50:23:d1:56:3b:5f:e9:1b:2d:a3:22:42:1d:
c6:47:8d:ff:ac:17:e2:fb:f5:b7:19:e5:ed:36:1e:2f:b8:b9:
98:92:2b:31:2a:46:71:1b:7f:ba:44:78:4c:0e:bd:2f:f4:ef:
f0:28:90:55:22:74:26:7a:56:8d:45:1e:af:bb:4d:40:10:7c:
c1:eb:40:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:24 2025 by rpki-client