Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: MaZVb2FkYhH/DI4Fi7ENvuor2R8ewVnRW3ef/aHeQdI=
Subject key identifier: C6:8A:20:1A:EE:C2:9A:EF:17:78:45:AE:A0:48:93:18:3B:18:A3:C8
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 0197B7EA718E4FB9ED2C436D57A4B72A0109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: FRNJ1hWMDWB3WDu4yMimeRdEByaEZEaVzWSctvnvVKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:71:8e:4f:b9:ed:2c:43:6d:57:a4:b7:2a:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=c68a201aeec29aef177845aea04893183b18a3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:50:86:a0:dc:44:5f:55:2f:90:b4:41:a6:
52:13:fb:1b:ab:93:c8:db:03:76:07:04:64:23:8e:
bb:93:53:14:62:66:50:e2:2a:4d:e4:84:27:bd:f9:
25:c5:26:bf:6c:42:5a:2e:10:b4:b8:d8:2a:69:a2:
8e:02:03:6e:38:32:cc:76:3a:4b:93:65:fe:e2:da:
e7:a0:b8:c6:68:4f:da:20:5e:d9:d6:ff:a2:71:4a:
8e:0c:de:d7:8e:04:4a:4e:68:70:2f:95:22:15:7a:
94:35:14:fd:46:77:05:a6:99:48:f8:80:c5:f5:94:
4c:9d:4f:b9:41:77:20:b0:16:d0:90:de:98:9e:32:
e4:69:a9:65:5d:06:32:36:bf:a5:d0:42:e5:9f:60:
5b:19:f7:d7:1b:35:11:30:67:ec:c3:4a:8c:93:6f:
ec:89:f3:63:62:a3:f9:40:c2:9b:b6:b3:b5:5f:a3:
61:8c:ae:7f:33:97:9d:1c:03:04:f3:02:3e:a2:15:
13:45:d5:c9:80:21:d9:11:97:84:09:af:1d:c8:3b:
22:2f:ef:d7:d2:b0:da:57:e8:b8:d6:83:c5:2a:7a:
d9:1c:83:91:de:5b:55:16:56:1f:1a:78:c9:de:80:
32:5b:ee:6e:fc:ef:8c:7b:83:1e:fc:8d:61:6b:d8:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8A:20:1A:EE:C2:9A:EF:17:78:45:AE:A0:48:93:18:3B:18:A3:C8
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:34:81:df:46:c6:97:07:fa:68:b8:7c:b2:ab:94:43:b6:
c9:8b:ce:a4:74:3a:32:00:65:79:62:24:3c:33:8e:91:48:97:
a9:15:e3:d6:1a:9f:45:17:91:25:e6:59:75:27:7b:7a:18:5c:
6b:91:ac:fe:70:2a:f8:97:9d:64:f0:c6:cc:29:d7:37:18:c0:
f2:3e:7a:09:86:70:49:0c:a8:60:a0:75:1c:ed:42:22:dc:f8:
6b:d9:3e:c0:f6:1a:b9:e5:74:43:c7:63:75:a8:4c:60:33:51:
a7:aa:b4:23:44:bb:ab:18:32:19:9b:cd:60:e1:09:87:fe:be:
f8:7a:ff:b6:76:00:06:5c:fb:fe:34:3b:80:4a:2d:51:b6:e9:
cc:d7:6d:17:0f:42:a0:06:35:8f:6e:3c:e9:80:fd:a0:15:29:
9a:8b:00:93:67:d6:d0:88:d2:6a:2b:0d:6f:c4:52:d1:67:53:
dc:26:b5:64:f2:8f:ab:01:96:85:f2:78:79:16:1d:7f:bf:5e:
8f:93:50:51:e6:f0:c8:6c:b8:87:e1:cb:1f:2f:8d:2f:96:d8:
6a:24:d8:24:e9:63:f1:94:6e:b3:df:17:31:7b:a8:00:50:98:
b5:3e:15:df:8b:44:2f:c3:2f:f1:9b:0c:e4:ea:90:89:1b:e3:
19:63:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:34 2025 by rpki-client