Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: 8nEnLQbojOod4a1OZe9s6M4Oek6g34k/84d6ac0frNY=
Subject key identifier: F5:90:FF:6D:F0:FD:C4:4A:D7:40:5A:EB:95:7F:66:73:07:91:CC:C7
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 01987298AFD40BB6EF9DFF18287E8FBA0BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 01:01:05 +0000
Manifest this update: Mon 04 Aug 2025 01:01:05 +0000
Manifest next update: Tue 05 Aug 2025 01:01:05 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: nohxLevMzcNxDUzVZ28aP5h8e5CY9uirXWKfVf7Rg4k=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:af:d4:0b:b6:ef:9d:ff:18:28:7e:8f:ba:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Aug 4 01:01:05 2025 GMT
Not After : Aug 5 01:01:05 2025 GMT
Subject: CN=f590ff6df0fdc44ad7405aeb957f66730791ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:3e:a8:b4:d5:e3:4c:a9:a0:de:51:55:e9:
a2:3b:9d:cf:70:1c:51:73:5d:0a:38:64:79:10:a4:
44:80:41:9a:53:28:93:f3:c8:88:e7:e2:18:1c:13:
73:2b:0d:b8:78:77:65:7d:fe:c0:f3:31:31:7d:e6:
1b:f4:b8:67:46:d6:ae:63:b5:ee:f2:3c:99:d6:4a:
e5:bc:89:50:e6:79:57:5b:c1:02:9c:4b:1f:3a:a4:
0a:b8:de:2f:aa:e0:74:af:a0:32:92:ec:58:23:ee:
13:73:f5:51:ad:fb:72:29:e5:57:63:db:2b:2e:9b:
fa:cc:bd:e3:e2:3c:25:1d:8b:e2:04:e2:6d:38:81:
44:49:5f:97:c0:ca:21:44:58:4a:41:76:84:eb:4a:
a2:8f:70:f3:a9:68:81:9a:70:47:4d:60:8f:2f:50:
3f:12:c5:33:30:10:09:73:ee:01:61:9e:a8:15:50:
c6:47:c2:98:15:08:f0:95:eb:9e:3d:8d:ff:ff:d5:
6c:75:90:99:82:a6:32:c0:60:ef:c4:e4:df:01:13:
0e:2d:f6:a8:69:59:57:0e:42:e1:0d:13:c6:42:38:
9d:93:2a:32:25:74:76:3a:48:93:de:1b:d4:73:c6:
98:36:2e:db:ae:e2:68:81:4a:27:d6:fd:b5:89:95:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:FF:6D:F0:FD:C4:4A:D7:40:5A:EB:95:7F:66:73:07:91:CC:C7
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:76:3c:28:60:93:25:83:2b:e6:08:2b:1a:75:ad:fb:f4:
f3:b3:63:77:d9:19:9a:8e:bb:2c:47:25:77:b7:fd:c0:24:b8:
d2:21:bf:a3:ee:c1:8d:52:26:cf:b4:ff:51:a2:8f:9b:f9:cc:
70:9e:46:a9:02:01:ec:79:e2:11:05:40:f3:ed:a2:a9:54:30:
04:2b:c2:bb:b2:73:63:f3:6f:1c:fc:af:d6:f2:79:1c:a4:a8:
3f:1a:bf:56:af:d4:68:ee:e9:70:c0:52:09:4f:69:67:0e:47:
cb:9c:f5:06:c0:3c:34:03:09:b9:cc:aa:d6:b9:10:83:61:1e:
a0:1e:6e:85:8a:62:8d:83:3a:03:d4:1d:52:80:3a:1d:dc:34:
45:82:28:ab:ce:e2:d4:80:3e:cb:c2:38:f3:80:56:9c:0d:8f:
0a:8c:93:a7:e1:7a:5a:18:e5:7c:fa:2a:a5:81:45:47:e6:c6:
47:89:f2:5d:88:cb:21:f3:e0:21:54:45:0a:4d:c9:04:0a:e8:
97:b5:df:8d:bb:11:e3:e2:e5:c7:89:a8:04:4f:57:5e:45:f0:
eb:91:78:54:45:d9:c6:be:b7:0d:dd:9d:2d:b3:bd:a2:43:a8:
47:42:11:a2:2b:e9:2e:4b:da:17:f9:3e:f4:96:34:e8:58:85:
66:18:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:22 2025 by rpki-client