Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: LaToRRbGXoDgzpbugDzxHj+BFKzLVDfZCsk/Kn7+KYU=
Subject key identifier: 0C:64:A5:85:AC:8A:08:46:3A:B7:69:06:F8:57:A3:E9:26:67:BB:A8
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0198906C0A3773B7AC030DF2423BED5FFFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 20:00:56 +0000
Manifest this update: Sat 09 Aug 2025 20:00:56 +0000
Manifest next update: Sun 10 Aug 2025 20:00:56 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: PkxklHf43/ZZu3z1S0l9k9WhgPwuHONz6OZBUnvHYGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:0a:37:73:b7:ac:03:0d:f2:42:3b:ed:5f:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Aug 9 20:00:56 2025 GMT
Not After : Aug 10 20:00:56 2025 GMT
Subject: CN=0c64a585ac8a08463ab76906f857a3e92667bba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:15:35:99:1a:4d:b6:6c:5e:53:68:25:49:
04:5c:13:cf:64:08:ef:b8:db:c5:e4:c9:4b:85:f4:
bc:0d:4a:95:e4:ee:3e:b2:e0:27:2b:8a:d1:d3:d0:
e1:72:48:63:56:df:cc:44:3c:4d:53:7f:2c:3a:dd:
e1:0a:66:3d:1d:73:bf:8f:0c:d3:23:c7:5c:a2:4e:
be:d9:1f:e3:d8:1e:17:e3:d7:d5:f0:05:21:75:59:
da:02:52:6d:49:19:5e:fd:41:af:21:3f:42:7f:49:
85:80:46:1e:9c:57:c0:9b:5c:ee:3d:25:fc:6e:61:
52:b8:2c:e1:82:45:42:a5:b6:fb:85:52:fd:9f:0f:
55:bf:92:6c:7f:25:43:03:29:60:eb:37:11:aa:77:
dc:14:04:52:25:64:82:5d:5f:61:8d:26:ec:3f:a5:
46:78:47:8d:44:71:c4:ba:48:3c:e7:3c:ee:97:79:
cb:52:00:b9:06:8d:02:5f:3c:8b:04:05:97:21:98:
7d:de:b6:a7:91:19:d7:51:04:c3:22:50:8a:2a:73:
af:72:16:89:6f:cd:64:31:8b:b8:98:84:63:3b:ea:
34:26:5c:2b:db:42:9a:95:fa:6b:3e:2e:50:4f:53:
d0:71:ab:22:90:58:e7:7b:5e:5b:8c:4c:5a:be:aa:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:A5:85:AC:8A:08:46:3A:B7:69:06:F8:57:A3:E9:26:67:BB:A8
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:0f:ac:60:48:b0:70:be:81:30:17:9f:f5:4f:71:85:e6:
13:1e:51:6d:4d:47:40:06:55:99:f9:ff:3d:70:ba:d1:c8:3e:
8f:c3:c4:ea:cd:b4:93:95:cb:e6:23:25:49:f3:aa:97:5d:12:
dd:1b:aa:93:57:11:b5:33:ab:e6:e5:e4:c1:66:6f:7a:8f:13:
92:0e:77:68:45:4e:5e:e9:90:69:d7:45:3e:a5:13:57:f8:aa:
1c:5d:19:11:93:83:0c:11:33:a0:fd:58:6b:21:9f:55:5b:60:
42:b7:38:e9:19:6b:54:64:95:14:fe:70:3d:68:ff:d8:aa:ca:
cd:c8:ab:cc:bc:82:cb:4c:ba:72:23:eb:15:0d:88:3e:38:49:
eb:c4:c2:5b:b0:07:6f:a5:8a:8b:ab:2a:80:c9:86:fc:b9:2c:
e2:cb:26:51:8b:4d:78:87:16:b5:a0:c0:b6:f8:d6:67:7a:d5:
3e:4c:77:21:51:22:f2:13:7e:4e:b4:26:84:8f:06:57:67:4a:
3b:d5:ba:73:e3:a4:8e:44:a1:e6:81:6a:98:dc:f0:d0:59:19:
72:57:fe:a4:49:56:54:12:37:5b:e1:91:c6:35:b7:6c:0d:f4:
0e:5a:5e:0e:fe:7f:ea:35:92:55:44:78:42:73:28:b6:ae:5b:
ca:91:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:20 2025 by rpki-client