Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: MR9o+9TCjeL5GMKxB0bb0XhW3zjTIXBGDVD3lU5Uz+0=
Subject key identifier: 22:A0:20:85:23:27:94:72:BD:41:A8:51:2E:A3:A3:6F:62:89:DD:A0
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 01994C2D4725BC8AD6E606B36237D91A2D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0A3D
Signing time: Mon 15 Sep 2025 07:00:59 +0000
Manifest this update: Mon 15 Sep 2025 07:00:59 +0000
Manifest next update: Tue 16 Sep 2025 07:00:59 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: tiC0amPXSPRaYp/e8Xo9aKi7icQUH60/Nr9ZTuEqIw0=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:2d:47:25:bc:8a:d6:e6:06:b3:62:37:d9:1a:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Sep 15 07:00:59 2025 GMT
Not After : Sep 16 07:00:59 2025 GMT
Subject: CN=22a0208523279472bd41a8512ea3a36f6289dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:04:ad:2e:45:e3:02:af:0e:74:fa:45:7a:
fc:b3:39:e3:fc:9e:fc:4d:61:73:e9:55:75:dd:18:
d6:01:b3:0d:e9:72:06:60:5f:18:b4:92:fb:5f:bc:
30:fd:7a:2c:85:4e:20:9e:cf:04:0e:ca:93:83:83:
38:13:3d:38:32:9a:8c:40:47:ec:0b:e4:23:d5:4c:
e0:82:6e:fa:b6:e3:18:aa:4c:fd:26:ea:c1:6e:22:
ef:b1:13:db:11:1f:38:c0:49:d1:62:87:5b:ee:79:
1c:a9:13:7a:d8:29:1f:b8:d7:24:29:83:6a:e5:d1:
d4:69:46:ce:b8:bb:0b:46:68:2e:98:44:67:47:05:
fe:7b:ba:b7:31:80:dc:0f:5e:23:89:8d:e2:a0:ef:
e6:83:64:42:cf:4f:ec:96:8d:3f:c3:c9:84:68:95:
03:73:9f:9e:10:b0:d8:17:0a:16:b4:f6:94:13:d9:
ba:a4:a0:b2:bb:8c:57:67:3b:b1:96:6e:74:d2:51:
52:ad:5a:08:c1:32:d0:0a:3c:23:85:11:70:d3:bf:
64:49:f2:92:39:cc:47:a9:96:58:30:75:9d:3c:c0:
af:fa:d5:a3:ae:ab:2e:ad:b6:dc:53:f9:fb:96:9b:
d9:39:87:d5:e3:9d:6d:2b:d6:c1:19:b1:45:32:3d:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:20:85:23:27:94:72:BD:41:A8:51:2E:A3:A3:6F:62:89:DD:A0
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c5:20:9e:10:c7:1f:23:10:a0:d2:46:0b:aa:73:67:8f:ff:
d1:c0:77:f8:27:c4:d2:1b:42:dd:64:38:be:7a:19:32:e0:96:
b1:d8:91:c0:71:c6:25:1d:cb:d6:e7:f8:4f:eb:4e:e0:9d:6b:
a1:c9:11:10:19:6b:20:bc:31:92:d9:ab:4c:db:13:57:5c:cc:
8d:be:f3:5a:46:1a:2c:5e:a7:fb:9e:0f:b3:04:5c:e9:6f:16:
06:5e:33:75:3e:49:f8:fc:2f:db:ad:60:40:07:79:ae:71:91:
73:e9:7a:ee:c2:ef:47:f9:b3:a2:64:6d:e5:90:a2:6e:f6:8d:
61:1f:de:cb:3d:c2:09:c6:3d:52:de:02:4d:ca:e1:52:fd:a9:
f9:07:8f:be:ca:73:56:90:11:41:8f:23:58:64:22:a8:10:68:
cf:0f:27:f6:ba:eb:cc:13:bd:27:cf:62:7f:90:da:55:44:b8:
8e:02:fb:b2:d2:4b:9f:33:46:a2:a7:67:ad:8f:f2:9a:95:2e:
82:af:f9:1a:a6:c1:f9:0e:a3:fb:bb:44:58:85:8d:92:b4:ab:
e0:4f:17:98:26:5f:f5:f5:61:25:6e:e4:1a:4b:33:48:dd:e7:
fc:a4:be:7c:13:1a:f1:91:9c:58:96:19:96:f9:21:68:1e:9c:
bc:19:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 11:48:48 2025 by rpki-client