Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: SZFV1CyfzXvZAlHwjxv/Vl89quYQDSeGnNEXh4OJ4nQ=
Subject key identifier: 02:4B:92:AA:83:5C:0D:31:B0:45:5D:19:F3:AB:C8:2B:DB:23:3A:88
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 0199FC58A45A7E32E5B150988F7C37FAA43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: /cZtYlel4AOy+Y/yKG5+FVhq9esT8VhoKpgyxrsom0Y=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:5a:7e:32:e5:b1:50:98:8f:7c:37:fa:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=024b92aa835c0d31b0455d19f3abc82bdb233a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:a6:47:ff:83:6c:04:d5:17:fa:fb:17:1a:
4d:23:1f:94:b8:e2:a8:a9:7b:75:8d:61:94:66:2b:
a7:5f:32:2d:6b:c8:f2:15:1a:c8:14:b7:69:49:d0:
7b:48:56:8f:c1:b2:9c:f8:9b:7c:1b:45:db:86:72:
c5:a3:10:8f:9b:ae:f9:73:57:8d:72:46:92:25:9c:
a3:ec:fe:d9:56:c2:1c:8a:db:61:4a:dc:f6:2a:ec:
e6:24:ce:d9:d0:76:7a:c6:be:ff:ea:03:6f:3a:e4:
61:7e:a8:03:eb:9e:21:8c:a7:5e:a1:f0:bc:b4:86:
f7:9d:10:e4:7a:e2:03:c0:ad:3c:85:64:06:ab:fd:
3e:a2:66:bb:3c:43:80:27:c0:88:7d:11:e5:74:8f:
2e:78:5a:56:c9:61:9d:2c:31:70:37:f9:71:2f:44:
32:b0:34:61:25:61:87:09:42:1d:30:90:c3:7f:9f:
75:ac:c1:b7:4b:35:59:aa:8a:c6:e6:1d:18:36:b2:
11:1f:97:1d:4d:3e:dd:74:f8:18:81:d0:90:c1:2b:
ac:01:d1:d0:b4:0c:65:7c:51:ee:60:a6:89:c6:32:
c3:17:99:b7:bf:66:cc:ff:3c:c3:cd:a2:ea:bd:8b:
12:d0:76:18:11:2f:bf:99:7d:44:7b:e3:dc:14:a5:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:92:AA:83:5C:0D:31:B0:45:5D:19:F3:AB:C8:2B:DB:23:3A:88
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:74:15:b8:14:55:aa:3f:31:d8:21:44:2b:3f:fc:3c:34:cd:
a5:c2:e2:03:37:1a:21:67:12:c4:6f:3a:43:73:8a:4f:66:f9:
ea:bb:b0:54:57:20:93:95:a9:d5:b6:68:93:2f:88:53:05:9c:
ae:37:0f:64:c4:2f:f1:3b:f6:38:7f:27:e4:ab:5c:ba:19:dc:
69:23:54:09:62:f5:bf:cb:38:51:91:d1:00:9d:61:ef:9e:2d:
32:94:44:28:89:39:8a:d3:e5:46:7e:48:d4:7c:38:9a:6b:70:
3a:36:83:45:8b:96:44:6d:75:56:05:a5:c0:5c:52:f2:9d:fc:
5c:f5:e6:40:6d:57:be:6e:b2:2a:f1:9b:e7:2a:3f:6d:7c:81:
36:58:3a:13:91:f9:70:1e:f1:4a:8c:5e:4a:67:56:d4:fa:39:
6d:53:43:0e:76:99:3a:09:cd:9e:79:16:31:62:d8:12:2d:9c:
bd:bd:6e:b2:ad:40:7d:b7:09:2f:b7:27:dc:ae:d4:17:0e:31:
40:94:6b:7b:3e:81:5c:dc:84:4b:66:0c:55:78:e2:13:7f:81:
4e:34:94:15:d8:fe:dd:58:f3:71:43:5e:fc:71:4f:cc:e1:e7:
a4:2f:48:42:8b:a0:a8:65:4e:bc:dd:a3:94:3b:84:15:5d:a9:
c3:7a:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:20 2025 by rpki-client