Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: NoZ+27rjqqLt+TfFyrUDZ/M4mhUQ3TMumVrEzVg+94E=
Subject key identifier: 83:D7:64:35:D3:1F:00:4B:D9:F6:5E:CD:A0:8C:2A:99:C7:07:6E:13
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 01987DF7ECE559AC2ECDF0462BA5CBBFF909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 06:00:56 +0000
Manifest this update: Wed 06 Aug 2025 06:00:56 +0000
Manifest next update: Thu 07 Aug 2025 06:00:56 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: s050XNWWmHS7aXVUzXLTBQQ4SYac/7I7e8nEPBGTzew=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:ec:e5:59:ac:2e:cd:f0:46:2b:a5:cb:bf:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Aug 6 06:00:56 2025 GMT
Not After : Aug 7 06:00:56 2025 GMT
Subject: CN=83d76435d31f004bd9f65ecda08c2a99c7076e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:2c:bd:24:ba:e2:91:71:7b:87:47:44:2c:
11:24:d9:68:4c:e2:57:dc:6f:ff:6b:74:eb:5f:df:
5a:fd:81:72:fd:96:8e:43:b3:43:0b:38:4b:12:2c:
0c:42:7f:a7:90:93:ad:61:f4:af:11:23:e6:58:be:
de:4f:3d:0f:9f:5c:56:be:3f:40:b3:75:ff:ed:55:
41:14:bb:bb:6b:2e:0a:6f:4a:03:2c:b3:ab:1e:a1:
ee:db:a8:da:77:c5:ef:b0:bb:3d:86:e6:c8:02:0c:
63:75:82:bc:7b:03:c2:12:3e:f8:67:8c:b3:8a:e5:
85:90:d1:a4:1c:e5:92:54:c7:86:c9:09:b2:8f:7b:
52:5a:19:33:58:3e:36:92:6b:5c:09:cf:5d:44:2c:
49:87:fb:01:79:8a:f6:c8:e2:56:64:f5:4f:01:30:
03:0c:8b:de:0b:28:67:63:cc:ab:89:a9:d1:fd:d8:
fe:b8:61:96:4a:1f:61:5b:49:b6:5b:dc:0e:2f:6d:
96:4e:a9:bd:d3:e8:d0:ce:e6:e3:ab:31:cd:9d:32:
52:c8:a8:d4:da:18:45:2f:c1:74:fc:82:84:43:2e:
f2:12:5b:3c:4a:ee:a3:d5:56:88:2e:01:c6:19:0c:
90:31:e9:37:20:80:5f:7e:62:e1:27:f5:ff:28:d8:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:64:35:D3:1F:00:4B:D9:F6:5E:CD:A0:8C:2A:99:C7:07:6E:13
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:42:7f:16:b2:ac:9b:12:9c:e1:d3:0e:eb:46:50:a6:d8:
65:04:98:e4:fc:0b:11:26:f8:0c:97:84:d0:ee:71:ef:f9:52:
83:41:d0:7b:6b:de:22:5c:24:d8:55:96:e0:67:96:d7:55:12:
81:52:e6:9d:e2:a6:30:2f:cb:64:7e:57:17:29:eb:f5:d3:16:
34:ef:3c:53:79:c0:8c:48:2e:1b:d5:12:2d:c0:91:2f:2b:14:
f8:35:7f:8a:75:7c:cf:f7:6b:8d:10:45:bd:62:56:73:62:97:
f7:8a:30:32:93:29:3b:79:48:69:e7:45:28:5c:53:44:65:79:
41:f9:c9:28:52:29:fb:95:f5:1b:e5:6a:af:31:f8:c0:e1:60:
36:c8:d4:e7:dc:b0:e1:6d:1b:de:7e:6e:1c:95:6d:59:54:a5:
f8:7a:b4:2d:ab:0d:58:f3:85:5e:0c:30:e9:dd:6b:aa:dc:ca:
f0:d7:e0:56:0d:93:39:a4:fc:a7:9f:24:a1:84:e8:0c:6d:69:
53:a3:32:5f:19:c5:85:17:df:b2:dc:2e:08:63:c8:2e:3f:c6:
7d:9f:55:b4:4f:74:a0:fb:af:59:85:5b:03:d6:88:f4:b7:11:
9e:9b:bd:1c:45:aa:90:58:57:24:dd:88:b9:e7:cd:09:2b:23:
55:6a:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:26 2025 by rpki-client