Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: ki4NbOMKUGpCMTz543NtBsGsRfCu1QlrhFRlJpliEZc=
Subject key identifier: 43:A1:E3:B1:B3:A9:3F:61:58:9F:6F:EB:3E:49:DB:18:A2:AD:D4:00
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019923A05AC8599AB1F3B20843F570E21BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0433
Signing time: Sun 07 Sep 2025 10:02:15 +0000
Manifest this update: Sun 07 Sep 2025 10:02:15 +0000
Manifest next update: Mon 08 Sep 2025 10:02:15 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: ewsJHb6pq9n99cBqgrprXpNLdoMxSYgK1y3e3XThU7g=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5a:c8:59:9a:b1:f3:b2:08:43:f5:70:e2:1b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Sep 7 10:02:15 2025 GMT
Not After : Sep 8 10:02:15 2025 GMT
Subject: CN=43a1e3b1b3a93f61589f6feb3e49db18a2add400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:59:3a:58:32:36:da:cf:b3:5e:65:e5:79:
d6:ae:b2:0d:9b:89:e8:38:b9:15:17:29:64:09:02:
8b:8f:44:47:98:fe:fa:7e:9a:58:07:4b:cb:db:d9:
8e:78:09:95:4b:0f:b8:ef:af:f1:df:f3:d2:76:0c:
5d:d7:b2:a8:97:0a:a8:01:45:5b:92:95:ae:25:5a:
e2:81:99:5c:90:96:fd:17:22:95:31:67:7c:b0:37:
45:5b:0a:d0:20:2b:c9:ce:fd:0a:03:19:ea:a7:63:
4f:93:bb:5c:fb:4d:cb:7f:7d:5d:f6:d1:6d:fb:27:
17:03:27:14:e2:76:dc:69:ce:90:96:3f:2c:e7:97:
1a:99:9b:81:c4:40:e8:df:79:b1:58:7c:63:41:34:
b1:72:6f:76:cd:d3:9e:8a:fc:6c:7c:c6:ad:5e:7f:
02:d2:86:09:03:eb:b2:b3:65:b1:13:f4:5d:f3:d6:
b7:e2:c7:67:e9:34:1e:5e:18:9a:5d:c9:78:75:68:
f4:af:e7:8f:a1:b7:b7:c8:a8:24:bf:d0:a0:4c:5c:
1c:54:93:71:a9:96:3b:36:37:95:5d:52:1b:8e:e6:
94:0b:9d:de:df:b7:f5:39:36:17:54:0a:fc:76:f4:
38:f1:47:bb:1f:6e:cc:1d:c5:4e:24:28:0a:0a:29:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:E3:B1:B3:A9:3F:61:58:9F:6F:EB:3E:49:DB:18:A2:AD:D4:00
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:c3:83:62:e6:61:c6:fa:f3:9e:df:96:6e:1d:f6:56:59:
ac:33:03:ed:d7:eb:34:85:8e:c5:80:3d:5d:36:06:51:79:42:
4a:c7:fa:6f:54:47:22:38:d9:cc:fb:45:53:46:b2:81:9f:44:
4f:b6:1e:22:6e:8e:7b:60:85:94:3f:f2:2d:8e:47:92:d2:79:
5f:36:33:0b:dd:bd:be:44:52:ee:df:c8:99:81:37:ca:6b:24:
59:2c:ab:8e:42:1c:e0:42:5d:34:b4:a5:40:c9:c2:4c:d2:a3:
ab:a9:80:75:54:8b:8b:df:7e:1c:54:a8:df:cf:1d:99:79:9e:
2c:7b:2d:39:43:8d:6d:58:cc:05:f2:31:31:1d:99:89:d0:58:
31:3f:eb:76:2d:33:44:98:ba:3d:ba:7e:71:88:61:f2:27:f3:
4f:bc:89:ed:e3:0f:90:8e:f7:a3:90:e6:3b:a4:96:dd:c6:ff:
a8:6b:53:89:3d:13:d3:f8:00:89:9b:53:19:c1:01:67:9b:31:
18:06:1c:24:99:65:0f:23:f9:15:16:4f:bb:4a:79:df:f8:7a:
28:19:b3:9d:0d:3f:ae:17:f6:17:0b:4e:ab:b1:b8:f1:9a:09:
2d:37:71:d6:86:c5:1a:cd:e4:f6:cd:c9:26:0a:9a:99:84:a7:
f1:77:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client