Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: otbnB8RKBE9tE8vPJNujb+sNnu7gUaAUmyCkOxXVe4o=
Subject key identifier: 28:46:05:40:C1:CA:EF:23:78:D6:53:F2:CA:B8:99:46:78:C9:8A:DC
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 019874507E7E27C1213EA42D4D95F21A8CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 10F2
Signing time: Mon 04 Aug 2025 09:01:28 +0000
Manifest this update: Mon 04 Aug 2025 09:01:28 +0000
Manifest next update: Tue 05 Aug 2025 09:01:28 +0000
Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: UPoW5HX8SiBcpz+1CXPZGWZJR+JwcMg5K+8EzqrU43c=)
2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:7e:7e:27:c1:21:3e:a4:2d:4d:95:f2:1a:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Aug 4 09:01:28 2025 GMT
Not After : Aug 5 09:01:28 2025 GMT
Subject: CN=28460540c1caef2378d653f2cab8994678c98adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:15:77:d0:07:5a:42:c6:68:de:96:d9:b8:
4b:37:4c:cc:b5:0b:a5:2d:f3:0e:25:20:fc:60:7f:
09:e0:68:4d:d4:8b:b6:50:e7:32:91:8e:79:71:2b:
f0:21:bc:bb:7c:e3:57:ac:5d:c8:0d:9e:5c:75:48:
45:b0:e7:01:8a:73:f0:85:0e:70:1d:b8:05:69:c4:
71:d2:0e:97:a2:e6:93:53:fc:72:22:36:26:52:0a:
59:d0:4c:06:5f:00:fb:7b:db:5b:c4:b2:a0:66:04:
71:29:f4:22:12:61:35:39:7a:1d:dd:ee:ff:1d:a8:
9d:27:7d:06:51:72:ed:cc:77:22:2e:38:b9:e4:fb:
0f:46:cd:4f:36:87:4f:2c:0b:7d:04:64:9f:d1:c0:
c4:03:d8:96:6e:c0:2d:df:f6:2e:a4:b5:cb:15:fd:
4f:a5:82:c4:24:74:a5:1c:0a:0c:72:2f:82:2a:7d:
3e:36:d4:66:d1:34:bf:41:76:eb:24:a5:c8:9d:7c:
58:4c:cc:08:7a:15:45:99:79:fe:42:b3:17:cd:38:
0e:b3:d1:1f:ff:88:4e:da:0f:38:a1:0a:c5:3f:a9:
7d:9e:e0:23:7f:fd:67:f9:bf:40:0f:47:e6:35:a0:
13:e9:57:0b:a2:af:0f:36:31:9f:d6:d9:0c:35:d3:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:05:40:C1:CA:EF:23:78:D6:53:F2:CA:B8:99:46:78:C9:8A:DC
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:6a:c4:c7:39:c2:ba:63:1c:8c:13:51:20:1e:b8:99:7d:
7b:8d:1e:f6:cb:10:f7:0d:08:2e:1a:43:b0:ea:ba:91:aa:6d:
a5:11:2b:62:d9:af:be:48:e2:c6:af:c8:c6:6c:3a:35:14:46:
4e:40:68:af:71:aa:19:e4:ba:ff:25:4f:ce:a6:f9:a2:11:6d:
7a:43:16:41:72:86:81:a6:67:80:c3:05:9f:d3:37:7f:5f:b0:
66:59:19:fc:85:ba:3f:2e:b0:bf:47:bb:e3:09:98:55:bc:7b:
9b:a6:a8:19:f9:ef:76:a2:e6:fe:13:f6:9d:98:12:8c:4d:20:
81:d3:66:bb:ab:08:5d:4d:d6:d9:ee:fc:ad:58:31:c4:21:83:
0b:6e:b0:c6:5a:4e:f9:bc:9f:fc:ef:dd:71:92:d0:ae:63:51:
d5:56:ba:24:a3:a1:db:fd:ba:a7:ce:63:31:99:fa:ce:d6:36:
04:48:c3:92:2e:bf:c5:f1:26:98:ca:78:d5:12:57:92:5f:72:
6d:48:53:64:fd:92:08:37:38:d9:83:90:9b:be:71:f0:f7:39:
b2:5b:c4:8f:8a:1e:ae:d7:61:1b:4c:ed:b2:37:b9:54:27:97:
b6:c0:5d:83:53:17:45:f3:21:bd:98:b9:d8:98:c4:f0:dc:4b:
fc:17:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:20 2025 by rpki-client