Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: hZZ2I8iRXj8cRReJR/a0WIR2G7gm6zwgOjdvuX3NSjc=
Subject key identifier: 26:24:AE:F0:3E:60:04:C2:B9:6F:BE:D4:D9:35:D4:76:FC:AD:3D:3C
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 01993CF1D285D8597C0DD659ADBE299EB634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1681
Signing time: Fri 12 Sep 2025 08:01:44 +0000
Manifest this update: Fri 12 Sep 2025 08:01:44 +0000
Manifest next update: Sat 13 Sep 2025 08:01:44 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: Eooo3XH9ih05YGza6nJgC3qzbIM4T6eRHHzLFwIHz9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:f1:d2:85:d8:59:7c:0d:d6:59:ad:be:29:9e:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Sep 12 08:01:44 2025 GMT
Not After : Sep 13 08:01:44 2025 GMT
Subject: CN=2624aef03e6004c2b96fbed4d935d476fcad3d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:69:45:bf:9e:a3:89:11:46:73:77:1f:04:
0d:4e:ab:cc:b9:39:ca:74:7b:27:58:14:da:42:d3:
03:e3:94:c4:61:af:8b:2a:36:66:54:f8:2a:92:6b:
34:f3:27:65:e4:f1:51:fc:4f:3a:92:f2:c8:88:b2:
bf:ea:d4:4c:e6:f7:61:4b:63:78:19:58:07:b8:b7:
19:80:e8:b4:7f:30:41:67:ac:21:37:cf:7e:bf:64:
a0:77:e4:a5:bd:08:0f:a7:04:db:af:94:24:24:f4:
69:21:19:f6:61:be:8a:c0:7e:45:cd:71:83:1e:29:
b1:65:12:66:29:7a:8d:65:28:23:7a:d3:98:c8:63:
ba:86:83:05:2e:8a:a3:40:d2:93:fc:9f:5e:97:9d:
92:7f:c8:d2:57:18:12:bf:66:94:13:29:02:8e:40:
27:38:29:bd:0b:5e:81:a5:e5:48:48:8a:72:8d:75:
29:22:d5:e9:fb:21:f8:40:53:94:b3:bb:01:3d:11:
e9:0f:92:c6:53:4b:fa:c1:03:f7:07:01:7d:3d:a9:
fb:6b:87:cd:1d:ff:b4:a0:4f:1a:a1:a7:41:79:5e:
8d:07:ad:d9:62:8c:3f:9c:9b:50:33:16:ef:d7:2b:
1c:f6:87:ef:1f:f3:b6:23:a4:db:66:2d:ad:2a:bb:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:AE:F0:3E:60:04:C2:B9:6F:BE:D4:D9:35:D4:76:FC:AD:3D:3C
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:4a:a9:ed:5b:f5:ca:ab:c6:ba:55:ae:5f:10:c8:c3:e5:
1e:67:be:3b:6f:29:8d:cc:ad:8f:bb:c5:0b:69:32:aa:b2:b5:
c2:b0:77:5b:17:13:52:7b:c5:70:4d:1f:dc:48:a2:4a:65:cd:
ad:42:3c:91:d4:ed:f3:62:f2:ec:83:61:1d:e4:42:56:21:99:
c5:fc:6c:99:a4:bb:10:56:ac:a6:13:e1:af:a3:82:a1:91:f9:
8e:31:de:82:90:bc:48:ed:1d:54:4a:9b:56:ca:01:77:77:a7:
72:d6:74:13:06:1c:d2:68:2e:c3:4c:49:4d:49:a0:f5:26:cd:
fb:af:ea:50:28:cb:cc:0d:14:5c:b3:06:94:02:c1:5a:63:c6:
91:a0:d2:f2:68:34:6e:e4:f8:9d:e5:7e:42:5d:34:c1:a0:58:
0a:a5:06:a0:0d:81:1b:29:0f:34:da:ae:7f:12:61:40:46:73:
e7:ce:57:89:c2:c0:09:43:68:8c:6d:da:74:69:3d:70:5a:32:
ad:99:49:99:e4:55:41:f2:3f:54:36:12:17:4a:0b:df:2d:f5:
8a:35:a6:d2:4c:4f:d4:cc:ae:76:52:9a:2c:e9:59:a6:ca:ba:
b3:38:1e:f5:99:69:50:3d:42:76:fa:00:34:45:cd:82:4f:86:
a5:cb:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 14:20:57 2025 by rpki-client