Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: 5DzpibzQQaWz9j/ZcGQJAsjMK/+TWgIt8bMm04VR1eY=
Subject key identifier: 04:73:36:24:B8:3F:09:0B:5D:6A:80:ED:D4:15:D9:CE:FF:F0:3E:C2
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 0197B5C4DE6B26CE24B37C0A18DCB42685FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 09:01:07 +0000
Manifest this update: Sat 28 Jun 2025 09:01:07 +0000
Manifest next update: Sun 29 Jun 2025 09:01:07 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: mcEoML9stqnVUB8h9zWIYXRaCAhjR6V6SJikAXaDUps=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:de:6b:26:ce:24:b3:7c:0a:18:dc:b4:26:85:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Jun 28 09:01:07 2025 GMT
Not After : Jun 29 09:01:07 2025 GMT
Subject: CN=04733624b83f090b5d6a80edd415d9cefff03ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:57:84:00:6f:05:1b:83:13:da:36:3f:93:
0d:eb:fa:13:5b:2e:57:20:59:5d:ca:6c:71:84:fe:
6b:c7:78:5f:f0:09:dd:50:2f:98:22:f3:cc:d9:04:
86:fb:5c:d9:74:23:37:a9:1d:e3:d3:a0:3c:72:aa:
bb:ce:8f:a4:de:70:43:2a:73:93:75:11:3e:d0:7e:
14:c2:81:46:1d:af:3f:1b:f2:46:b4:34:51:d9:e6:
02:6f:ac:a3:4b:7f:c6:c6:9f:6f:7b:16:c2:85:6f:
58:e3:d7:86:af:15:c9:11:02:58:7b:ae:40:ab:31:
27:54:f3:3f:b4:a3:9d:66:50:74:8d:03:7c:16:08:
64:c7:01:f3:0b:33:22:e6:eb:c8:cb:29:61:0c:77:
93:3b:69:6f:ef:97:8d:b5:39:e5:43:d8:57:69:fc:
20:98:15:94:9e:96:40:51:9f:8c:77:f3:13:74:38:
02:e0:97:a9:59:8e:f0:be:8c:21:bd:b5:c7:50:9d:
cf:ac:61:95:fd:42:d9:bd:38:80:c7:19:7f:00:ce:
87:7f:40:92:66:c3:bf:f7:ff:76:0c:c1:bf:14:4b:
e3:d8:d3:fd:94:da:d8:1b:1c:10:0d:65:a1:b9:56:
b0:0f:3a:2e:69:25:e4:31:eb:cc:eb:e0:75:86:5b:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:36:24:B8:3F:09:0B:5D:6A:80:ED:D4:15:D9:CE:FF:F0:3E:C2
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ba:e3:e9:49:6b:69:08:54:f6:b8:18:24:e7:f7:01:1d:7c:
31:fd:80:27:5c:1f:b6:e7:61:2a:07:4e:8d:6d:c2:58:6a:67:
b9:2f:c4:60:d4:d6:12:13:06:bd:17:7e:7a:f1:c6:03:fc:c7:
94:10:f3:87:0c:9b:e5:43:da:76:db:bb:97:07:ba:8e:02:43:
43:e7:04:07:f7:12:b2:49:e7:dd:f8:c4:2e:1e:54:80:29:b8:
2e:a3:dc:99:18:83:70:22:89:98:b7:44:46:e3:7c:c5:71:06:
5d:cb:9d:7d:d7:6c:7e:8b:64:e8:01:46:ca:a7:c3:40:8f:42:
14:72:95:61:21:f9:7d:19:63:16:02:c9:26:14:41:ad:70:73:
7a:72:fa:ed:30:6b:11:a4:47:02:69:e2:63:bf:5f:19:43:c5:
87:59:6f:08:a5:d6:77:e3:5e:4d:51:17:02:f6:a5:96:13:fc:
06:9e:ce:22:49:ad:d6:90:9c:3e:ec:d6:35:23:21:ab:36:a6:
f8:c3:f5:05:22:0e:8e:0b:4c:5d:31:a1:a2:75:dc:34:18:2b:
55:ad:fc:88:aa:f9:ae:d1:c4:eb:38:12:2a:5d:1a:90:1a:5b:
fa:af:cd:0d:29:6e:4a:9e:22:3f:a5:af:fd:8c:24:52:21:0c:
e0:3d:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:32 2025 by rpki-client