Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: V+Dw9bfhh60SAt8nrG5dfvqwMKaQ7h+D8P6cz8TFihQ=
Subject key identifier: 8B:95:55:8E:C6:BC:BA:46:C7:32:D1:50:9F:FD:97:51:A6:6F:73:A3
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 0196BE92D1A107162F7BC1492BF1CEF36179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0862
Signing time: Sun 11 May 2025 09:00:15 +0000
Manifest this update: Sun 11 May 2025 09:00:15 +0000
Manifest next update: Mon 12 May 2025 09:00:15 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: ctwtGqJu3MXtwgLw8mbG+e29DXMUUsP+i6TaYgLmwYs=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:d1:a1:07:16:2f:7b:c1:49:2b:f1:ce:f3:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: May 11 09:00:15 2025 GMT
Not After : May 12 09:00:15 2025 GMT
Subject: CN=8b95558ec6bcba46c732d1509ffd9751a66f73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:c4:47:a4:33:f0:ba:e6:38:ea:9d:ea:98:
ef:82:e8:ce:7b:37:f5:f2:67:75:f4:0b:42:13:ef:
d5:73:1f:c7:55:8b:a8:ed:d5:30:37:07:93:e9:51:
76:28:0e:38:ef:26:e4:55:c5:af:9f:f7:69:f3:52:
d8:34:8b:ad:55:57:6e:22:35:65:66:55:e1:26:75:
31:d5:be:ca:90:c4:25:76:51:ba:2f:3e:56:c1:5c:
5a:56:cd:c8:70:43:1c:88:00:ef:e1:a8:d7:29:4a:
18:06:d3:d1:03:36:09:22:9b:43:1c:5d:95:60:6f:
e6:77:41:01:8f:bf:dd:96:ff:60:03:4f:a5:12:a8:
86:f9:f7:7b:72:86:da:a6:38:f6:3f:3f:af:ec:00:
89:8d:2a:52:72:00:0b:54:e3:52:52:c8:7f:be:8d:
1e:3b:ff:7f:93:a2:c8:c6:52:e3:cf:cf:80:a1:10:
6c:70:8e:69:ba:5f:9e:4b:43:56:b4:cf:e0:9b:97:
65:19:09:4d:6e:5e:31:f2:73:a7:a9:fd:84:38:7b:
51:5b:61:df:11:b6:cd:47:8d:52:14:87:ef:8e:3e:
90:d3:54:6e:f3:ed:f1:ea:f0:06:cc:ac:4a:7e:19:
7f:26:9a:ea:a9:e2:26:6e:fc:ab:cc:e7:fa:47:47:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:55:8E:C6:BC:BA:46:C7:32:D1:50:9F:FD:97:51:A6:6F:73:A3
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:a1:8b:79:c2:e1:e6:62:1e:64:0a:b2:5c:88:ce:b2:6b:
79:df:c7:e1:2c:61:e2:d4:23:04:01:78:f3:53:be:6f:6c:bd:
52:8e:37:e9:af:3e:b0:61:ba:cb:31:62:2b:9f:81:25:c9:9b:
bc:55:ca:72:b2:19:41:16:4f:71:f9:59:07:b7:a2:af:1e:f2:
95:c3:bc:de:e5:30:71:e0:80:54:ac:92:1f:be:ca:af:4d:8f:
3b:af:52:e0:58:01:8f:8b:90:cc:7f:19:fc:d7:ac:5e:d0:94:
83:d5:30:e5:4d:dc:d5:e8:77:44:4e:39:aa:6b:d8:20:79:47:
df:77:92:b7:71:cc:eb:d8:ae:30:6c:96:7e:f3:6d:b5:f0:23:
77:d9:9e:27:13:ca:4a:b1:6e:55:2e:4b:54:6c:70:ff:51:54:
9b:1f:34:b6:35:24:de:b1:6f:1d:3f:37:16:9c:34:6e:a2:db:
f7:1d:28:3a:ed:a8:a7:af:7f:c3:78:e4:df:2d:94:2d:32:a3:
c9:46:fe:63:ad:13:34:a5:55:ba:0f:eb:33:ce:4a:ee:22:de:
98:22:b5:69:3b:42:69:a7:69:93:88:43:b4:b4:d6:95:57:13:
a3:4a:0e:c6:a5:d7:3a:98:f1:de:34:cf:88:0a:87:87:a8:f1:
5c:c1:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:40 2025 by rpki-client