Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: eNUNb3plSZjhU4UxPnfwo7CJXgkTWbZy0S235VZVWkc=
Subject key identifier: F9:83:F9:7C:17:D3:7F:8A:FA:77:FB:1D:FB:E2:9A:1A:5F:8F:BB:D4
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01989ECCDD66326C7C7A61E46B51E637E0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 15:01:22 +0000
Manifest this update: Tue 12 Aug 2025 15:01:22 +0000
Manifest next update: Wed 13 Aug 2025 15:01:22 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: Rsv1Z7cVnz2UK6vpxFhxSDFdCg2B5+xrPtxKhFkgpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:dd:66:32:6c:7c:7a:61:e4:6b:51:e6:37:e0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Aug 12 15:01:22 2025 GMT
Not After : Aug 13 15:01:22 2025 GMT
Subject: CN=f983f97c17d37f8afa77fb1dfbe29a1a5f8fbbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:26:a1:1a:4e:98:9e:fd:33:cd:85:2e:1e:
23:71:b6:8f:67:b9:e5:f9:6e:2c:51:25:d0:a9:a8:
d9:97:7a:3b:f2:0f:ba:e0:b9:4b:40:23:94:47:d8:
58:d4:6d:13:9e:c9:e8:c8:0c:07:d2:b7:99:c8:11:
78:24:7d:89:7e:9d:e5:d2:51:30:7b:54:7d:54:f0:
cd:59:13:3d:a7:27:45:c3:b4:45:26:2e:dd:e2:65:
c9:18:8d:72:dc:e9:00:e2:49:ee:91:e7:43:98:58:
4c:c2:9e:6a:6a:3f:60:39:5c:ae:25:42:a6:78:d6:
6e:3f:93:9e:09:82:03:b6:cd:17:85:b9:59:ee:3d:
23:6d:ea:54:69:7f:b9:0f:9c:f2:b0:6a:31:f6:52:
a6:83:c5:8e:e3:3f:c2:2c:11:67:6c:da:ac:84:3a:
11:2b:fb:a6:c5:ba:5a:55:76:e9:7d:f8:f2:ba:3c:
cb:0f:97:df:31:ab:e8:ea:7b:eb:bb:72:e2:42:33:
f7:a6:8b:9f:63:c9:65:0f:e6:eb:c2:1f:99:1f:60:
f8:21:6b:4c:5e:80:b1:a6:84:18:f1:dc:6a:f9:a0:
68:15:ff:66:63:93:eb:96:cb:0d:a1:f4:35:26:30:
ee:6b:16:36:a2:10:5f:5f:35:8c:08:2b:ee:03:bc:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:F9:7C:17:D3:7F:8A:FA:77:FB:1D:FB:E2:9A:1A:5F:8F:BB:D4
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:00:a5:e2:9c:2d:e5:c4:cf:ad:7a:92:0c:a9:3b:4b:55:38:
61:68:22:4b:38:29:4f:51:6d:61:43:f1:1c:33:4c:93:7f:20:
ed:bb:1d:d8:0b:fe:d5:e4:14:be:a8:ae:5b:a7:85:1b:4b:03:
f5:18:8a:61:28:97:14:f4:73:6a:e7:f3:91:6a:c2:81:73:54:
79:9a:74:86:9b:3d:ca:2e:49:63:33:99:ac:f5:24:c0:d1:79:
bf:3a:24:23:dc:98:22:02:b7:aa:b6:c3:62:05:21:f0:c8:e9:
e5:f6:83:17:48:32:33:21:fd:3d:9b:e0:59:77:29:f9:0b:39:
55:88:ea:b7:1f:73:8e:94:0a:4b:29:45:82:71:11:e9:46:c5:
38:6c:a0:2d:97:b2:e8:05:5a:ff:c7:30:fc:f1:ed:f6:0e:c0:
c2:0c:c0:fd:95:7b:07:a5:d1:81:22:19:26:68:bf:1f:fb:2b:
2d:ee:34:49:63:1f:b7:a8:59:ce:6e:c0:86:d3:dd:61:83:67:
88:85:0c:ce:9f:0a:f5:73:25:f1:5a:0c:ea:84:89:4f:ec:1b:
c4:56:d4:0d:15:6a:41:65:59:b7:41:8c:89:98:be:d9:2c:e1:
a2:d7:a2:ef:e5:ba:63:7e:74:6b:89:dd:4c:70:f9:64:d5:47:
28:e9:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:35 2025 by rpki-client