Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: 3H/OU/ukde8Ui/tPw2DplNwX2ZTEECZgz+xR57MWxIg=
Subject key identifier: 9D:52:C3:9B:58:FE:92:D0:74:2D:EC:4C:F3:C0:98:17:E9:CF:2B:E7
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 0197B70F2B79E9D4E0E298B21E5CE5895536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 1576
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: ejhO5ae56X34n8VVe9NTWM7BMIHob33IaN5loyu+Yak=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2b:79:e9:d4:e0:e2:98:b2:1e:5c:e5:89:55:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=9d52c39b58fe92d0742dec4cf3c09817e9cf2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:03:7d:87:3e:0e:6e:93:1b:a9:93:bb:be:
23:5f:be:e8:ce:b4:85:c2:cd:e7:90:c8:89:ac:2d:
46:2d:fe:27:9c:11:a5:9a:f8:b1:24:39:3d:26:79:
3e:79:79:b0:27:b4:97:13:db:56:8a:60:27:04:9c:
81:aa:9a:8d:73:d5:4c:3b:af:78:d0:fb:77:c3:e4:
8f:1b:35:79:ad:ab:c2:d1:b6:c6:14:6f:15:a4:14:
59:c9:09:60:ea:a2:f0:e2:e2:db:39:a7:64:cb:c5:
2b:bb:45:cd:54:05:e0:3c:11:db:96:57:7d:da:86:
fb:4e:0a:d6:55:dd:20:6c:d7:e1:70:19:12:ff:2b:
17:a7:8a:32:68:fe:8f:ed:28:ca:ae:07:74:be:55:
89:c9:ac:e6:5c:10:03:7b:d7:10:20:6c:81:f7:c0:
d9:1b:42:ab:6a:dd:57:2e:83:ce:03:b8:ae:99:2c:
65:ad:04:f0:2e:6c:9c:c0:c4:5c:bd:f6:91:90:2c:
df:a2:6a:f3:c3:d0:d7:3f:24:42:a7:4b:f9:52:1c:
7a:18:4c:b8:37:28:1f:b0:49:62:b3:87:7a:7e:f7:
42:22:66:63:ef:87:3e:5d:81:69:40:79:56:f0:1c:
ce:e1:45:21:4c:77:06:c1:a5:60:db:d2:87:65:fb:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:C3:9B:58:FE:92:D0:74:2D:EC:4C:F3:C0:98:17:E9:CF:2B:E7
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f6:dd:6c:c8:84:9b:ed:b1:28:98:3e:07:04:84:47:62:0b:
e4:4a:e2:fa:ac:18:93:11:78:dd:c9:a9:2f:f0:a3:c1:12:02:
69:41:39:be:ee:79:de:27:4f:3c:8d:a2:c6:18:22:bc:9d:d0:
c3:02:3f:35:ac:09:8d:68:e1:93:f0:20:41:93:b8:5b:30:ce:
a1:bb:fa:87:ae:90:a8:42:9f:4b:73:15:3d:38:d4:99:33:12:
42:2d:cc:8a:33:36:05:46:fd:fd:75:75:dd:7f:a8:cc:02:ac:
62:b2:dd:97:b4:ca:fb:76:e3:95:9e:2f:eb:d1:87:f0:2a:e2:
ef:dc:55:06:a6:80:a2:ed:16:ad:5f:09:85:17:bb:02:8f:69:
58:de:e8:36:57:5f:d6:5f:b4:aa:53:db:67:24:ae:ae:8c:01:
61:89:99:b7:7c:ac:56:c3:63:de:d8:5f:97:e9:e4:47:4d:e9:
19:aa:9a:e1:f4:27:d1:c5:cb:52:a2:ed:25:4a:b4:18:9a:e1:
7b:f1:ee:c1:ef:e5:16:2a:8d:24:d5:8b:6e:20:0e:22:92:35:
93:b1:d2:88:93:75:a0:be:ee:40:2e:bb:1b:f8:f8:22:46:60:
0a:f2:42:e1:bb:be:3b:74:5a:f6:b7:11:cc:39:86:1c:3a:4f:
83:e2:94:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dyt56dTg4piyHlzliVU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
Eyg5ZDUyYzM5YjU4ZmU5MmQwNzQyZGVjNGNmM2MwOTgxN2U5Y2YyYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO0DfYc+Dm6TG6mTu74jX77ozrSF
ws3nkMiJrC1GLf4nnBGlmvixJDk9Jnk+eXmwJ7SXE9tWimAnBJyBqpqNc9VMO694
0Pt3w+SPGzV5ravC0bbGFG8VpBRZyQlg6qLw4uLbOadky8Uru0XNVAXgPBHblld9
2ob7TgrWVd0gbNfhcBkS/ysXp4oyaP6P7SjKrgd0vlWJyazmXBADe9cQIGyB98DZ
G0Krat1XLoPOA7iumSxlrQTwLmycwMRcvfaRkCzfomrzw9DXPyRCp0v5Uhx6GEy4
NygfsElis4d6fvdCImZj74c+XYFpQHlW8BzO4UUhTHcGwaVg29KHZfuVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1Sw5tY/pLQdC3sTPPAmBfpzyvnMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPbdbMiE
m+2xKJg+BwSER2IL5Eri+qwYkxF43cmpL/CjwRICaUE5vu553idPPI2ixhgivJ3Q
wwI/NawJjWjhk/AgQZO4WzDOobv6h66QqEKfS3MVPTjUmTMSQi3MijM2BUb9/XV1
3X+ozAKsYrLdl7TK+3bjlZ4v69GH8Cri79xVBqaAou0WrV8JhRe7Ao9pWN7oNldf
1l+0qlPbZySurowBYYmZt3ysVsNj3thfl+nkR03pGaqa4fQn0cXLUqLtJUq0GJrh
e/Huwe/lFiqNJNWLbiAOIpI1k7HSiJN1oL7uQC67G/j4IkZgCvJC4bu+O3Ra9rcR
zDmGHDpPg+KU5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:09 2025 by rpki-client