Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: elNPtdyDTXiv+BGaHwXvyr9iauiF6796o6tT6+cxiM0=
Subject key identifier: 6A:84:A9:B5:0B:5B:4C:CA:D2:BD:95:08:87:53:11:47:84:A2:98:6B
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 0198D4E0783325F7B713F09F7143249DD118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: 6Bk6dtR5G82SlJ/+fTe69gspLVS/oZ8VlE5Cgf2Vk4k=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:78:33:25:f7:b7:13:f0:9f:71:43:24:9d:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=6a84a9b50b5b4ccad2bd95088753114784a2986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:de:19:2b:1d:bd:b6:f0:63:ad:2a:88:59:
f2:c5:e3:30:a5:66:20:86:b9:90:e6:33:b4:1a:a2:
29:c6:79:94:84:bc:e3:1c:3c:d1:4a:32:5e:9a:53:
a8:0f:f8:0f:7b:38:30:28:87:6b:84:63:57:67:04:
1e:83:76:98:f7:72:a8:c5:94:21:41:a5:ac:34:79:
5c:fc:d3:fe:77:c9:00:8a:29:2c:59:a2:9a:9e:fa:
69:13:cf:5b:9d:3e:48:7e:67:ac:93:07:e0:d9:70:
ba:cb:9b:ea:61:89:d7:ab:42:62:96:2d:71:50:7c:
dc:75:c5:af:18:3e:17:b7:c5:f3:39:c6:cf:f9:e0:
ad:46:8a:b6:81:52:67:95:06:9b:23:2c:e9:bf:f6:
76:74:ec:af:36:1b:62:ba:53:d5:b2:96:f5:bb:14:
73:d7:f2:36:76:86:18:aa:7b:f9:c6:44:cd:5b:95:
eb:a7:e6:48:69:55:b5:86:69:19:9f:0c:fc:da:59:
83:d5:59:90:b5:6b:38:f3:c3:cc:c2:43:3f:cc:a5:
5f:6e:39:fb:c3:c3:e8:ba:4d:13:d2:64:39:d8:b2:
f9:ae:ff:27:a8:fb:f0:0c:a8:1e:72:4b:46:d5:01:
4a:15:d4:87:ea:ea:eb:57:d2:b3:54:64:84:8c:58:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:A9:B5:0B:5B:4C:CA:D2:BD:95:08:87:53:11:47:84:A2:98:6B
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:97:7b:d4:74:6a:9b:c2:c5:98:b5:5c:05:23:6c:f8:20:
b4:39:87:2e:25:e5:30:f2:ea:7d:50:64:56:be:2a:25:e4:0d:
76:8b:92:db:21:e7:df:be:64:21:44:a4:42:c4:c5:52:d8:6e:
c9:03:53:7b:91:2b:b1:27:5b:c5:a2:90:6b:0d:27:bd:38:9a:
8c:df:71:30:8f:bc:a1:3c:82:f6:6c:8d:54:af:35:a4:4e:f4:
1c:ba:dd:21:ff:1b:a6:a5:83:f3:00:19:4a:52:6a:1c:b6:2a:
0a:43:5e:de:aa:2e:a7:80:4d:0d:c3:09:02:9f:c1:28:ff:7d:
48:75:38:31:ca:82:bf:5d:55:62:9c:ad:e8:4d:31:d3:4a:2e:
49:f7:e3:48:34:75:47:b2:60:5a:e4:0d:5d:96:61:66:23:0f:
65:30:9a:ac:b4:2a:40:b9:34:4b:98:63:c0:ff:2b:c7:af:6b:
16:43:28:a0:06:56:b8:15:c4:0c:d2:3c:63:aa:8d:38:d1:5d:
e8:b0:8a:2e:0b:48:74:dd:a3:57:c1:46:00:f3:8e:42:c0:f3:
c2:9a:62:8c:8b:56:4c:5f:41:aa:7c:9b:25:71:d9:8d:94:49:
a7:8d:0d:7a:20:a5:6d:92:74:6f:a3:e3:68:ae:7a:72:4d:30:
06:cd:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:19 2025 by rpki-client