Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: G8qbSDt7fq32fQPXWD8xLwS1ssAdBOiMKulhht7QwFY=
Subject key identifier: 4C:95:C5:BC:73:1C:9A:F5:95:B8:39:C2:AC:2A:EC:CE:1A:BD:FD:8F
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 0198D4A7B1E62862C80A22E18B055C8257ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: OcmXCRnVSbeZCWe7SJc05WW9a0M+Sv3XpSQoj9G0z+E=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b1:e6:28:62:c8:0a:22:e1:8b:05:5c:82:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=4c95c5bc731c9af595b839c2ac2aecce1abdfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:a8:14:96:e2:15:09:8c:28:8c:bd:52:21:
07:ef:33:aa:93:38:88:48:93:c4:de:bd:db:da:1d:
78:ed:8f:99:19:68:a0:91:3d:09:57:9f:6a:1d:bc:
5b:da:1f:f7:35:c0:ee:d0:57:ab:29:f6:1f:42:d1:
14:a0:9a:68:e6:cb:42:35:42:d0:45:3e:ad:a3:62:
a0:6c:09:6d:82:df:ee:35:5c:90:07:2d:ce:1d:76:
1d:85:f8:7b:da:81:21:8e:7e:3a:8e:7d:ff:48:63:
a4:94:38:8a:86:0a:1a:29:4a:92:e9:eb:2f:83:60:
8e:fe:1d:a6:25:e8:89:81:a5:35:eb:fe:ab:d8:8f:
0a:c7:66:ef:5b:ca:a0:30:19:cf:6c:5a:3c:6e:27:
55:55:bc:c1:98:87:0a:cb:df:86:36:41:7a:08:c8:
a8:61:3a:06:72:a7:3b:44:21:93:56:4f:37:8a:50:
dc:d5:c1:3e:ff:fa:91:05:7f:fd:7b:9a:c2:5c:60:
68:18:ca:f9:78:d7:dc:7e:a0:9f:e3:69:1d:1f:6a:
73:52:5c:7e:18:98:5f:6a:74:ed:01:98:58:86:87:
c4:3f:97:c7:d1:8d:62:a2:5a:07:0d:ea:a5:ca:8e:
4c:0c:fd:45:e6:dc:ca:6a:20:91:6a:7b:cd:65:6d:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:C5:BC:73:1C:9A:F5:95:B8:39:C2:AC:2A:EC:CE:1A:BD:FD:8F
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:d9:9f:27:b7:8d:11:d3:f9:54:23:c8:99:2c:60:99:dc:
b3:3e:1e:11:99:82:60:89:ba:2d:65:db:ae:9f:cf:75:5c:d6:
c1:9d:a0:88:7a:20:84:52:0c:02:d5:6f:50:3c:1b:5d:5f:b1:
5b:6b:b3:7e:95:3a:4e:e8:31:d7:c9:65:4d:e4:52:b6:eb:b2:
21:7c:09:50:56:ec:f7:ad:f8:8a:20:d5:23:9c:54:05:48:05:
31:01:38:16:c4:96:28:60:da:56:11:69:22:a5:a7:dd:a5:53:
1d:b2:2b:c2:57:b7:ad:b2:de:fd:b5:f5:ff:97:fa:1f:5d:0c:
ec:b8:c5:2f:f1:b0:f9:16:e4:cf:10:6d:dc:fe:10:f8:c0:52:
2d:a9:a1:bb:f4:6c:a0:8f:08:3b:f0:75:94:f1:66:d5:e4:e5:
b2:1e:f4:66:4d:0f:88:90:bd:e5:a0:78:2c:3e:c6:90:7d:b9:
c2:d8:81:5d:a0:4b:c7:9f:36:44:89:1e:b4:26:82:eb:71:b1:
ca:c8:d8:bd:00:ee:33:77:4d:33:a6:2b:ef:1f:88:2f:bc:12:
72:35:0e:78:f0:3c:33:6f:7e:b9:c1:3d:02:6c:db:a1:4d:d8:
db:b3:4c:a8:61:fc:0d:9f:32:03:71:43:36:50:a0:82:fa:2c:
7d:df:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:48 2025 by rpki-client