Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: OSMyV4rrRk+HQ4p5WbRbMOAkIDvtRRpMXySHVHneLZU=
Subject key identifier: B4:9A:45:94:1A:DB:DF:60:B9:97:C0:05:4C:6D:57:F4:FB:DC:4F:DB
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 0199221F360BFFF7BB0A6A0DEB22603AC4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0D1A
Signing time: Sun 07 Sep 2025 03:01:34 +0000
Manifest this update: Sun 07 Sep 2025 03:01:34 +0000
Manifest next update: Mon 08 Sep 2025 03:01:34 +0000
Files and hashes: 1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: 6gHUtqHwRNgAtrZSzo4qbQt0Q9ZOxE2JsZvgsJ7iCms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:36:0b:ff:f7:bb:0a:6a:0d:eb:22:60:3a:c4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Sep 7 03:01:34 2025 GMT
Not After : Sep 8 03:01:34 2025 GMT
Subject: CN=b49a45941adbdf60b997c0054c6d57f4fbdc4fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:42:36:6c:93:ae:a1:f7:73:d4:28:23:99:
84:9c:64:29:89:3b:11:bb:56:3e:db:83:4e:d6:16:
9f:ec:4f:03:68:0a:b7:46:e5:d9:25:78:05:e7:ba:
17:83:dd:b5:88:9e:d2:66:c1:74:0c:d8:11:10:73:
55:70:59:96:e6:cf:c1:28:d8:38:4a:a2:67:17:55:
9f:19:b0:a8:c8:03:47:12:40:e4:0d:db:5f:47:a0:
5c:90:5e:0a:b8:70:f9:3d:a5:55:1b:13:98:5c:cb:
56:da:85:26:0a:37:8c:86:3e:9a:f9:e6:d0:30:e0:
6d:10:5f:29:54:9a:63:f6:f9:d9:ea:dd:bd:81:94:
30:a1:d9:e3:ff:43:72:12:2c:58:a1:c2:16:1c:17:
0d:e0:f8:a3:36:e3:3a:71:33:36:57:24:5d:10:fd:
68:3c:c9:7d:3e:f3:4c:aa:1d:a2:94:7c:0e:d1:2b:
a3:0a:6e:fd:88:f7:79:4f:a9:19:aa:44:35:31:ad:
2a:81:97:24:57:09:4c:fe:82:02:e2:85:0f:0d:f9:
db:4f:9a:7d:03:68:ba:ef:d7:77:ea:e4:9d:bc:d0:
2c:7f:06:ea:63:92:35:fc:36:e3:b9:24:d6:89:32:
78:e9:ea:a3:fe:ad:d5:79:45:9e:4c:b7:cc:84:84:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:45:94:1A:DB:DF:60:B9:97:C0:05:4C:6D:57:F4:FB:DC:4F:DB
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:a2:ef:71:13:47:7d:66:5c:89:54:e3:8f:4b:fb:36:1c:
45:0d:58:e4:52:69:d3:ce:9f:d1:c2:7d:a6:25:cf:6a:bd:4c:
00:82:70:61:60:c7:fd:e8:44:c2:23:72:fe:fd:93:1c:24:d2:
3b:ff:f0:8f:50:29:92:8f:9c:2e:5e:be:3d:6d:ee:8b:ca:01:
82:f6:b7:65:16:cb:66:e3:4e:c5:68:df:5b:bd:9d:0a:23:74:
f4:34:72:7c:18:0a:53:41:0e:0a:d6:8a:ed:8e:3f:76:df:7c:
60:93:74:2f:dc:d7:89:92:49:8a:94:71:39:76:ac:21:67:49:
35:2e:3e:1f:93:50:e5:07:85:65:26:0b:97:fb:84:6b:67:21:
73:cc:cf:77:49:d4:97:67:86:37:90:82:48:ca:fd:d3:0c:6c:
fc:80:af:9a:7c:02:20:a6:e1:63:09:3d:0d:dc:52:b2:bb:27:
05:28:f4:62:eb:4c:b1:fb:82:30:cb:36:28:25:56:7c:b0:9b:
64:df:60:e5:8f:95:10:b4:18:5e:0e:33:98:7f:f6:af:e8:3d:
16:ac:91:8a:3d:d2:ed:83:fc:06:db:6d:e8:20:eb:53:2e:e7:
6d:fc:65:77:f7:9d:6d:e6:b8:22:d1:0a:b4:64:e9:23:51:42:
e6:52:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:58 2025 by rpki-client