Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: jI6O8OtozoCfV6Oyhfq9HqYWRvVZBN4RI/SYIqyZRq8=
Subject key identifier: 3B:EC:9C:50:87:71:66:BB:DE:78:3A:25:6A:C0:CD:BB:65:BB:A6:C1
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0199221E340182000568ECEAE12FD5A7393E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0BE5
Signing time: Sun 07 Sep 2025 03:00:28 +0000
Manifest this update: Sun 07 Sep 2025 03:00:28 +0000
Manifest next update: Mon 08 Sep 2025 03:00:28 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: m0ZP9A9fuMCAL9rkZhKSq0hR/Dk0Fs4KR9smIrRmyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:34:01:82:00:05:68:ec:ea:e1:2f:d5:a7:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Sep 7 03:00:28 2025 GMT
Not After : Sep 8 03:00:28 2025 GMT
Subject: CN=3bec9c50877166bbde783a256ac0cdbb65bba6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:15:e8:ad:67:cc:3f:3f:eb:af:2a:a5:53:
ca:b0:ec:27:db:e3:88:05:ba:e3:61:97:b2:09:1d:
23:2e:7f:f2:e2:40:29:1a:16:5a:9b:03:d6:f7:b5:
65:e4:18:4b:5d:fd:a8:f4:33:bc:85:87:5e:bd:a2:
dd:5b:d3:10:fb:33:3b:d3:59:93:92:c2:38:46:3d:
31:40:d8:ed:68:d1:d5:3a:db:8c:45:c9:51:1c:53:
52:2c:63:27:28:16:81:26:93:f2:d0:72:02:9f:6e:
08:24:d4:2f:c6:ef:36:fa:15:63:b7:c2:d9:5c:e9:
60:af:b9:41:5f:2b:ae:be:4e:b3:80:e1:60:c6:ee:
7e:87:b0:41:2c:a3:d3:4d:b7:3e:69:36:fe:71:8a:
11:81:b4:97:35:f7:13:c6:c0:c8:b3:76:a2:83:15:
d2:e9:51:42:17:a6:7e:e7:df:60:cd:00:f4:54:10:
df:f7:85:03:a1:ae:bf:89:b0:48:7c:68:16:0e:e2:
63:54:d9:ed:c1:57:21:35:14:61:6a:b1:2c:6d:3f:
93:df:46:d4:54:7d:33:7b:6d:9f:9e:38:ff:f6:63:
af:9e:cc:b0:67:b4:37:7c:3f:c9:fe:69:9b:a4:ad:
ad:b9:e5:59:6d:26:cd:13:05:f9:8e:fb:ae:f0:b0:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:9C:50:87:71:66:BB:DE:78:3A:25:6A:C0:CD:BB:65:BB:A6:C1
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:2c:07:a5:4a:b2:76:ed:0e:ac:4a:a5:a5:a5:0c:e7:73:
f8:2d:6a:35:1e:ea:dd:fe:ad:c6:f0:10:db:0b:d1:2b:57:36:
53:1e:a5:ba:d9:dc:fe:fa:ea:52:af:57:1b:53:8f:42:c6:d9:
62:fd:cc:99:c6:ea:bb:21:22:36:cd:39:d6:fa:56:22:6d:fb:
57:61:c9:fd:e4:46:fe:ad:c8:0f:ab:78:bc:6c:5d:1f:8e:f8:
ba:ba:a8:e0:32:bc:81:32:b8:a6:7b:db:4e:28:98:92:17:ce:
9b:a5:d7:f8:d6:db:ce:16:72:c8:53:9c:75:69:90:a1:7a:9a:
4e:69:a3:86:1e:4f:f3:cf:67:a6:c9:73:e6:a9:56:55:05:d6:
69:b2:b9:e5:2d:b9:90:67:6b:39:96:98:af:f6:05:30:7f:b2:
98:ce:da:fc:2a:1a:97:5e:40:c9:29:d7:b3:31:63:a2:36:18:
3d:58:58:a6:c8:35:11:94:e2:c3:e2:67:72:46:13:03:3c:31:
e2:9a:2e:74:62:0c:d7:1a:21:0a:aa:c0:fc:f3:50:7c:5e:a4:
c2:7f:33:41:6c:18:35:d0:4d:2c:00:c7:7e:05:ec:d9:de:1e:
a9:87:ab:5e:9c:87:5b:d0:50:03:2e:ef:bb:ea:41:4a:30:b0:
18:69:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:46 2025 by rpki-client