Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: 5QxgoDmvmKZwWJ60nUj2mJ0+H6M8JbGqHYS4bgS7MUU=
Subject key identifier: 2F:C9:DD:08:3B:44:2E:9F:B8:56:15:BD:FD:1F:55:A0:59:03:58:B4
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0198D84FB124B9D7ACC9F7CED93BA323D9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 054A
Signing time: Sat 23 Aug 2025 19:02:38 +0000
Manifest this update: Sat 23 Aug 2025 19:02:38 +0000
Manifest next update: Sun 24 Aug 2025 19:02:38 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: +SokbtmxzRiXiCLqJIdCSpg2raNsChf66ArXKiyythc=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:b1:24:b9:d7:ac:c9:f7:ce:d9:3b:a3:23:d9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Aug 23 19:02:38 2025 GMT
Not After : Aug 24 19:02:38 2025 GMT
Subject: CN=2fc9dd083b442e9fb85615bdfd1f55a0590358b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:28:93:36:09:2c:01:d6:84:06:3e:d3:93:
d1:9b:ec:ec:04:44:2d:4d:2c:0c:eb:3b:77:03:7c:
77:50:18:9d:b4:23:02:b9:42:dd:e8:70:5f:55:40:
f7:04:35:0b:c8:64:32:15:39:b5:d2:d3:a3:0f:51:
8c:f0:a5:42:ab:66:ab:5a:e3:52:02:2c:e6:93:9b:
71:51:c5:9a:e0:1e:50:6b:34:57:65:c0:ea:87:79:
82:31:76:42:0b:4c:35:59:20:65:a4:c4:05:ff:3a:
08:2b:4a:fe:91:b4:54:6d:5e:75:5d:ad:5d:09:98:
ce:08:d9:7f:22:6a:ad:2a:71:c0:ce:79:c9:7d:09:
86:2a:cb:36:35:59:33:5f:c0:3f:07:b2:19:50:81:
f1:2b:cc:73:bb:b8:96:8f:89:99:65:33:52:61:8f:
b0:28:01:06:66:c9:d6:94:5b:c9:f1:ad:5e:2d:62:
4f:4e:42:2d:d6:cd:8f:72:2a:26:7e:13:50:51:4d:
7e:49:f7:ec:4f:e7:a6:8a:10:68:28:72:6b:06:42:
4f:11:48:c7:0c:7d:34:d2:cf:ac:58:2e:d7:6b:36:
bf:75:58:fb:e8:71:75:78:b9:aa:6e:00:50:69:8e:
62:9f:d3:f3:c9:b1:8f:66:55:85:16:d8:32:f3:55:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:DD:08:3B:44:2E:9F:B8:56:15:BD:FD:1F:55:A0:59:03:58:B4
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:4d:6e:49:9a:77:e2:3d:9f:f4:31:11:4c:7d:5c:4d:c7:
dd:f7:94:64:be:c3:e0:a2:04:57:76:9e:f3:68:70:e3:6c:ab:
97:c6:be:63:a2:46:76:77:6f:58:5c:9e:26:d8:3a:50:84:ca:
2e:4c:de:4f:d6:69:d6:f2:61:3d:b2:1d:c5:c8:94:9f:a8:f1:
be:e0:cb:b8:59:b1:e2:9c:bc:0c:73:47:00:a3:2e:d9:fc:ff:
01:44:d7:2b:e0:36:37:f9:7d:dc:a4:03:58:9d:b7:21:cc:f9:
ca:88:f2:35:fd:78:40:ae:86:97:a8:63:2f:11:83:9f:3f:64:
70:af:30:43:d8:f3:5d:e8:0e:85:48:19:ee:19:45:93:9d:14:
1e:6c:0a:03:c5:c7:c2:fe:32:f1:6a:f9:09:dd:68:e4:42:8a:
39:bb:3f:32:71:b4:18:af:e0:9f:8e:d6:eb:02:94:75:e7:85:
79:c6:d5:4f:13:2d:df:5d:39:90:b4:08:85:f0:19:55:8c:57:
6c:22:a5:e7:d6:45:2d:b7:b1:20:03:84:74:bb:ff:d4:2b:e2:
88:02:04:e7:10:0d:5e:c4:4b:19:08:38:10:76:4f:c3:0d:c5:
5b:cf:b4:7d:69:5e:9d:8e:27:62:5e:e9:e4:bd:02:f4:04:aa:
bf:71:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:51 2025 by rpki-client