
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File: R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier: 3GyVbbTjRfBY3QGyxNU80v5ULi7gHc3JEnzmGU5YUWU=
Subject key identifier: 67:99:91:8E:E5:4D:8C:57:EA:80:2D:00:0E:75:3F:E7:4B:76:6B:0D
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer: /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial: 01987298D141BE8B6A54D9CD478FC49553F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number: 130D
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: WN62t5cVPbDw1pDfDKs2VJkZzRtHugHdKsE+7gwvx48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d1:41:be:8b:6a:54:d9:cd:47:8f:c4:95:53:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=6799918ee54d8c57ea802d000e753fe74b766b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:83:54:71:96:33:33:b2:f1:e5:e1:f5:b6:
8b:56:b1:73:93:f6:b1:3e:fa:77:e0:49:29:7d:ac:
62:fc:83:17:73:e4:40:7f:d8:1d:2a:6d:29:79:da:
c6:b4:bd:fb:a7:88:fd:07:00:86:b2:f0:c2:74:62:
4a:9e:0b:51:b9:52:a9:21:d7:3b:2a:fd:a7:dc:38:
19:26:a2:08:3f:66:24:42:01:a4:f9:f5:69:35:9f:
6b:e7:41:e3:a0:08:c7:06:9e:8d:b1:d5:86:e7:42:
92:b1:57:2c:0a:a8:aa:14:49:88:35:79:f9:01:6b:
69:ec:a5:1e:a0:11:55:cb:18:54:2d:df:96:d0:44:
c6:e3:e4:e0:30:db:42:0b:fc:e6:c6:23:c6:ed:5c:
75:d4:65:94:80:b0:38:bc:4f:f9:44:67:24:6b:13:
30:90:1e:10:8c:d1:e1:52:07:0e:a3:49:b6:1c:3b:
a4:6c:4e:25:13:8c:4e:e9:d5:46:46:6d:14:2f:aa:
a4:36:e7:03:cb:03:d7:98:c8:d2:79:c0:33:68:0b:
81:48:da:ad:c4:4a:e9:b8:11:52:24:0c:6a:26:f5:
20:82:b5:54:ad:e4:12:0e:57:1c:17:fe:31:ad:7c:
c7:01:46:fc:e8:aa:15:ed:2f:4f:4f:ee:84:dd:14:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:91:8E:E5:4D:8C:57:EA:80:2D:00:0E:75:3F:E7:4B:76:6B:0D
X509v3 Authority Key Identifier:
keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:4a:07:5b:85:b6:57:d7:fb:77:46:22:35:8e:99:12:b0:
f5:29:e7:7c:23:7d:f5:65:e1:a2:2f:c9:26:08:67:8a:d3:ad:
b5:c6:a7:41:62:4c:54:19:26:f5:7c:c2:ac:91:f4:78:34:96:
c9:fa:9b:42:e5:5b:e9:b2:54:a7:a3:64:1b:b8:73:cb:8f:be:
51:f0:b4:a3:84:3a:33:77:ae:58:2c:b1:86:ed:4d:c6:cf:79:
4b:2d:ba:5f:a5:18:f6:0a:52:ac:e4:f5:3a:58:76:fe:3d:c5:
c1:c8:5b:5e:a6:38:33:9f:39:20:c8:84:a6:ed:5c:ca:8d:41:
6c:24:22:d4:50:76:a3:cd:16:8e:71:35:1a:68:fd:e7:87:09:
52:1f:90:9e:14:a5:f5:55:e7:41:12:56:7d:bd:79:d6:b2:8c:
93:1c:27:3b:ac:af:1e:23:b5:3e:10:88:79:d5:59:18:b6:b0:
0f:d6:48:74:e1:20:53:2e:85:49:c2:7b:0a:64:ba:bf:9e:01:
3a:27:8e:0f:2f:70:94:24:2b:23:a2:0d:80:e7:2d:5b:83:63:
d1:94:c3:cb:2c:12:ef:54:39:e4:7a:95:fd:54:63:c7:af:67:
64:38:ea:23:81:b3:2b:04:3f:ea:42:6d:e7:df:57:2a:c4:e5:
6a:85:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:33 2025 by rpki-client