Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: r58vSbMJlF6PSnj6L85vHy0cSOmVjkpXxtAFLAoRvuk=
Subject key identifier: 15:D9:AE:41:93:EB:43:60:67:53:18:17:3E:D3:2C:42:0B:E9:A5:82
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 01992330CFE0F18B28BA3666CC065BB0E95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: DREUAs++QgLNDJTHEnDAFm4Vm4JScR4goz1XlPCDa0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cf:e0:f1:8b:28:ba:36:66:cc:06:5b:b0:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=15d9ae4193eb4360675318173ed32c420be9a582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:5e:97:6f:a5:04:6d:82:b9:6b:b1:82:42:
59:40:68:0b:d2:09:8e:62:94:16:d6:dd:9a:23:a1:
3f:23:3b:c9:aa:ed:bd:4f:2d:e1:b0:5d:23:94:5a:
8c:29:cb:78:cd:31:e8:a6:bd:6e:ec:27:49:d8:61:
67:57:ae:35:b7:c4:56:b8:24:36:f9:be:2a:c3:67:
02:ef:e6:62:3d:66:7f:09:63:83:ce:4f:4e:d8:b6:
69:6d:d3:9e:8d:de:0c:32:2b:87:0e:44:e0:6d:1f:
ec:92:b7:d6:88:87:32:a0:46:a0:fd:e4:16:3e:01:
c2:0c:5a:9b:5e:e3:d8:62:58:77:be:8e:54:29:97:
f0:3e:bf:57:37:82:e8:7f:dc:50:ff:07:7e:68:d0:
e4:af:db:53:c7:bf:53:14:ea:98:11:77:60:fb:c8:
bc:34:a0:e7:28:05:ed:ad:ee:c9:7e:d1:5d:76:45:
be:2c:3b:8a:d0:e1:78:9f:37:cf:b9:aa:12:a9:50:
92:80:ca:50:6d:4c:82:21:65:39:3b:b8:96:c4:12:
b7:c1:b3:48:47:6f:31:e3:04:35:ad:2f:07:24:05:
12:69:fc:31:ad:d4:ec:86:99:d6:56:8b:19:3a:1e:
2d:bd:64:57:4d:f1:15:dc:25:bb:43:dd:cf:8b:8b:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:AE:41:93:EB:43:60:67:53:18:17:3E:D3:2C:42:0B:E9:A5:82
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:75:f4:2e:09:15:c7:a8:4e:c8:90:ae:68:7a:0e:57:45:
72:02:5f:eb:fc:08:b2:bc:16:a0:eb:97:c5:37:fb:d1:41:6d:
96:82:e9:77:2e:32:33:88:4d:fe:2e:c6:fd:a9:7f:2f:4b:7e:
86:ff:c6:b2:1b:a2:d7:7b:3c:15:0a:d7:6d:10:32:c1:4d:ed:
96:ee:8c:2a:93:c2:c3:9a:cd:3c:ab:c7:82:cd:a4:60:bd:57:
cf:2d:29:06:b7:15:7d:96:89:ca:5a:99:47:a2:dd:8d:ad:67:
2a:e7:0a:7c:56:65:0a:c0:b8:10:5f:75:af:6e:ee:87:2f:24:
ef:1b:2e:58:56:b9:35:ca:83:2e:40:25:3e:e9:9e:b7:09:4d:
e9:cb:d3:0c:52:a6:48:77:36:83:fa:fe:d6:5e:82:9a:38:b7:
16:16:ce:11:7a:a4:72:d5:ac:61:93:85:a4:e6:33:24:9a:ad:
09:79:e7:a2:64:3f:f1:a3:b2:8e:c9:6d:f5:0d:35:97:2a:63:
49:68:7f:11:81:d6:07:94:b9:88:b5:1d:f5:bc:b2:8c:ce:54:
3f:76:28:ab:26:b1:31:56:dc:ac:c4:4d:97:d2:fb:42:d9:9a:
f5:91:0a:1b:d7:58:94:96:97:65:b1:b4:a1:b4:96:41:71:3a:
9c:41:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:28 2025 by rpki-client