Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: FWGRklzk4V+3RRpwlAMFp1IRSQVKL2/qAMh55J/yaw0=
Subject key identifier: 72:C7:4C:DE:80:6B:38:A9:7A:45:B8:E1:46:29:08:77:BC:55:A5:4D
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 0197B7B35C9661B98A77145A8F6032941C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 08E3
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: C1Dpb2U9HbZfWs/EutJU51JNQn4zvt52qc5Fg6Djdb0=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5c:96:61:b9:8a:77:14:5a:8f:60:32:94:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=72c74cde806b38a97a45b8e146290877bc55a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:cf:4c:31:6d:e4:20:03:8f:fe:15:8f:b1:
0d:bb:40:a5:ac:24:ad:86:0d:2f:bf:99:ce:22:39:
37:eb:7d:10:ec:e4:e5:51:bd:38:b6:f8:c9:0a:67:
65:a1:92:ac:f0:2b:ab:ad:6a:d0:f6:bc:ee:b7:bf:
c8:e5:bf:b8:a8:d5:32:19:18:c5:2f:3c:6c:2e:5a:
60:45:eb:cd:78:a7:8a:e5:ec:ca:5b:b7:05:60:98:
ef:86:92:5c:cc:4e:14:b8:1c:3e:cd:a4:c0:ce:de:
aa:9a:7e:41:84:06:31:5a:2e:05:93:01:7c:88:68:
7a:e6:cf:36:a0:64:63:25:15:92:47:ea:e4:f6:24:
ce:cd:f6:3d:0d:72:ce:82:5a:17:03:87:12:f2:0b:
11:4b:21:81:70:b8:01:d8:14:e7:75:7a:db:52:f4:
c5:7d:86:7a:b9:df:6e:1c:f1:ab:45:b7:6c:68:bd:
68:32:ef:88:8f:a9:51:3d:f1:cf:f3:ac:f1:b9:ec:
72:61:bc:a4:27:55:b1:24:37:09:0d:6e:01:ab:d1:
c2:38:08:95:f1:ca:d6:c8:a9:d0:d0:63:c2:e8:94:
92:6b:80:50:fa:01:d2:97:b0:45:c5:db:54:9f:8c:
8a:d4:be:bd:35:15:db:38:4a:aa:1e:94:f3:0b:f9:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:4C:DE:80:6B:38:A9:7A:45:B8:E1:46:29:08:77:BC:55:A5:4D
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:48:ad:da:cb:d8:88:3d:f2:a5:0a:11:41:60:07:97:4a:ff:
f9:82:b6:c9:51:e2:32:b1:90:2e:d8:9d:80:b9:fd:69:ef:71:
8d:ad:d6:df:b5:01:a6:9d:19:90:5f:34:04:ff:58:d2:03:90:
a8:db:84:87:0a:da:33:07:fc:a4:7b:4b:e5:04:0a:33:95:18:
9a:8f:be:2a:81:e0:73:7a:03:a2:f9:f4:f7:57:6e:c8:91:5c:
1d:b3:7e:7b:a6:10:c3:be:06:c9:7c:b3:64:04:2f:fb:83:e0:
71:e7:2b:e4:8b:79:0e:b0:f3:50:28:3f:7c:7b:10:9b:92:d1:
16:be:f7:6e:3d:91:8a:70:ab:e8:91:23:aa:53:59:13:54:61:
51:47:5b:9a:5e:c2:36:13:a8:11:a7:63:6e:26:c0:60:52:c4:
19:2f:10:11:e2:d5:f8:dc:3e:23:2d:42:35:c8:71:64:e9:b6:
f5:cf:d2:73:05:6a:bb:89:05:6f:bb:44:7f:01:ad:a5:66:23:
63:48:5d:b9:66:d1:1f:5e:4e:9a:b6:4b:93:aa:87:fe:cf:7e:
16:c6:0c:71:64:06:40:2c:18:09:a5:ea:f1:d6:12:00:7a:10:
6e:ca:d2:0b:db:2a:b9:ba:5c:69:5c:05:00:c1:b4:fe:16:91:
2b:66:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:15 2025 by rpki-client