Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: iU8G1MOitcdHeZXH1rZC338YLSpqkVLoTSQo9oM9jCo=
Subject key identifier: 96:7D:4A:66:57:C7:C5:9C:9E:6E:CA:91:5E:4E:38:4C:53:FC:6A:4B
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0197CFBCF2429F1882667A577AFD46FDF7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 04C1
Signing time: Thu 03 Jul 2025 10:02:35 +0000
Manifest this update: Thu 03 Jul 2025 10:02:35 +0000
Manifest next update: Fri 04 Jul 2025 10:02:35 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: FXMH1mJLra0vxH4w6VSAoFGV3OUYlTsPrH93A07NiRI=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bc:f2:42:9f:18:82:66:7a:57:7a:fd:46:fd:f7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jul 3 10:02:35 2025 GMT
Not After : Jul 4 10:02:35 2025 GMT
Subject: CN=967d4a6657c7c59c9e6eca915e4e384c53fc6a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:74:d6:ba:3a:de:3b:6a:f8:ee:a1:02:d4:
9d:e9:3f:ee:78:8a:a9:27:52:44:45:dc:88:8c:82:
17:c7:97:1f:96:f6:a1:11:7d:4e:45:1e:0e:27:ea:
9e:eb:68:b6:df:dd:e0:9d:1c:46:20:91:b8:e8:42:
b0:b9:0a:bd:4d:26:0f:c7:a6:6c:54:9a:a8:05:04:
61:99:02:5b:d1:41:57:58:89:c9:3b:02:29:63:bc:
22:b3:d7:a1:00:4a:ce:b9:d7:4b:f5:7d:18:55:0b:
20:ac:1d:ec:1a:69:ec:25:bf:7d:54:a0:16:ad:97:
49:4f:55:4b:2f:1e:fe:67:34:87:ca:92:d6:0a:b6:
0e:ae:28:41:b5:60:fb:75:9c:4f:ea:42:ab:99:75:
8d:69:30:a0:3e:36:4a:2f:88:5a:59:92:21:83:ac:
5e:db:80:85:bc:0e:6c:d4:73:85:78:8f:aa:f9:6b:
2c:21:5b:26:ff:58:c8:78:e3:20:e2:01:a8:a0:00:
32:b5:02:36:85:3a:23:a3:9f:06:12:46:e4:fa:87:
b5:02:de:87:18:89:a2:29:52:86:a9:9a:48:60:55:
1e:7a:16:43:02:10:c5:57:f7:a6:fe:ca:b8:04:40:
37:b7:d8:2f:5a:89:88:5e:2a:05:05:3b:83:68:36:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:4A:66:57:C7:C5:9C:9E:6E:CA:91:5E:4E:38:4C:53:FC:6A:4B
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:d6:8e:fb:1e:28:a2:7a:0e:5f:fa:c9:89:52:1b:aa:3f:
7d:c2:d6:fe:8f:70:38:61:89:20:67:6e:7a:05:a3:52:b8:62:
6c:43:7a:ba:fa:07:3f:76:bd:44:43:26:e8:88:4c:ab:f6:15:
48:65:1e:57:f9:a4:96:a2:bd:03:d1:7a:8d:52:bf:f0:75:3d:
c0:57:35:3b:b0:6f:c2:93:3f:6b:09:20:9d:f1:e7:97:04:78:
28:68:3e:b1:20:23:d6:ad:7b:32:6f:c1:ad:29:0c:ed:c1:d0:
39:89:ac:2b:27:0d:70:78:9f:90:cc:0a:3e:91:b9:f1:5f:7e:
1b:6d:1e:c0:e0:a5:1b:38:40:45:fe:9a:2a:65:0b:87:8c:b3:
3f:3a:ca:d8:cc:4b:ce:9e:17:8b:f6:ab:a1:75:76:b8:3e:eb:
2c:f0:35:b7:15:ee:a0:28:42:05:e9:cf:aa:30:d3:b8:8e:3f:
1e:6d:7a:16:26:ca:28:76:b9:9b:67:23:3e:56:cb:d4:23:2c:
df:eb:6f:4b:fe:c2:d5:4e:d8:22:ed:1b:f1:72:ce:b3:a6:83:
6f:4b:d5:28:58:72:1c:25:e8:e3:ce:85:ed:c9:d3:ca:dc:5a:
0a:b4:a9:ca:ff:b5:99:b4:26:81:ae:83:85:25:88:f4:15:df:
b8:2e:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:01:07 2025 by rpki-client