Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: +S7SXwz3tS1N5k7vaGh9car/ifvoLjQBQDq1I4o9VIg=
Subject key identifier: 98:4B:3C:FB:02:3E:2B:60:8B:0E:CB:AF:9C:E8:58:B1:91:17:1F:51
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0198D6CDDE0A7B34AA217CF20D57FFEF42C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 10D0
Signing time: Sat 23 Aug 2025 12:01:12 +0000
Manifest this update: Sat 23 Aug 2025 12:01:12 +0000
Manifest next update: Sun 24 Aug 2025 12:01:12 +0000
Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: n9+S7t1sAWVhYk9OoHPp9Lx2DWDdVGL5EUbKNgZ/jHo=)
2: prmNkNLNXxPUBZ53bykbtYiFoko.roa (hash: hBOLiexHlZdG3wt6SL4MOVEN8AgHHkXNkc6zKLyvdD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:de:0a:7b:34:aa:21:7c:f2:0d:57:ff:ef:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Aug 23 12:01:12 2025 GMT
Not After : Aug 24 12:01:12 2025 GMT
Subject: CN=984b3cfb023e2b608b0ecbaf9ce858b191171f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:d3:8c:59:4f:ba:d1:91:86:d2:b6:0a:3b:
56:91:1e:de:54:80:b0:d3:55:85:19:5b:96:6c:fa:
7f:c8:72:4a:3f:0e:0b:cb:77:d1:fe:8e:51:1f:29:
41:05:e3:0b:1d:c4:93:42:42:b1:d5:79:ad:68:bc:
59:d1:46:d0:db:97:d4:2e:ef:0d:9b:41:01:b7:ca:
e2:19:a2:26:01:90:b1:74:1c:b3:da:6e:1a:f3:54:
9f:f1:e6:c7:d1:ee:ed:ec:00:57:88:9b:6a:78:63:
f0:ae:a1:a5:50:e1:02:50:aa:a0:19:e7:30:a6:f8:
bf:1e:ae:ed:51:a9:d7:27:97:13:88:c8:f3:87:96:
76:1e:d1:44:89:9c:29:12:81:bc:a6:f0:d7:95:d5:
86:a9:30:76:06:32:86:87:50:c9:79:8f:a4:b8:5a:
ee:df:07:78:97:6f:0d:3a:17:5b:8c:19:79:80:10:
9a:ff:f1:7a:17:f9:df:21:57:75:34:f7:84:82:e7:
c1:f5:40:ee:5d:92:e4:4d:de:99:c7:e2:f7:2c:d9:
a9:02:22:b5:62:73:70:55:27:0b:8b:f3:bf:ee:66:
c8:44:0f:be:4f:bf:0f:93:f9:5e:66:0e:bb:cb:5c:
6c:68:00:77:b4:ef:30:00:a3:0f:83:52:4f:72:d6:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:3C:FB:02:3E:2B:60:8B:0E:CB:AF:9C:E8:58:B1:91:17:1F:51
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:82:7f:34:d7:42:28:aa:83:27:c8:d4:7e:4c:e8:34:08:
4b:78:45:1f:9d:3e:22:3d:7d:f2:6a:02:12:57:60:bc:41:fb:
c2:d2:2d:d0:78:a8:21:45:bc:8f:f8:2d:8b:59:cd:bd:8c:ee:
d5:39:10:a6:a8:db:c6:95:59:5b:a3:6d:6d:9c:b9:05:56:69:
2a:a6:57:67:a0:45:72:8b:4c:8e:6d:35:52:32:ff:e7:92:6f:
3a:b9:64:ed:f0:55:d3:2a:ff:b1:7e:c9:57:5b:f6:b2:00:0e:
ed:d4:b1:00:91:ec:31:72:05:ff:b5:05:5e:7c:d1:b1:a1:84:
0c:42:08:28:12:ae:90:ac:eb:5e:d3:77:7e:2a:d5:f8:64:d0:
61:66:9d:2b:fc:a4:1d:6d:13:ea:c2:83:61:a5:54:8d:58:ad:
0f:76:cc:54:84:11:47:b7:33:f1:ed:43:59:36:64:d5:0a:ad:
60:55:7e:5b:82:00:b0:98:02:13:a0:b8:0d:65:f4:38:0d:7b:
f1:7d:d3:04:1e:c3:3f:b7:cc:33:b2:3e:ac:95:e0:32:8a:aa:
62:15:6a:8a:ff:e3:b1:4e:31:45:1c:9a:ea:03:e0:b4:96:d2:
66:89:e5:ff:bf:8d:76:78:fc:83:78:69:4e:82:40:3f:0b:c6:
7a:07:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:15 2025 by rpki-client