Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File: R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier: hcW5EMiNaVNIaBbap89PnGd8iBH6cqGRlDjKHD4CMVw=
Subject key identifier: 7A:10:93:15:C1:83:DA:4C:0C:43:92:37:97:69:F3:3B:6C:38:C5:9D
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 019874191EFAF024239041DB2F5FCA80FCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:01:00 +0000
Manifest this update: Mon 04 Aug 2025 08:01:00 +0000
Manifest next update: Tue 05 Aug 2025 08:01:00 +0000
Files and hashes: 1: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
2: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: CqdGSCetW6M9gi21uQyGbq/9a3MyzRI2Ai+R03l1KIY=)
3: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
4: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1e:fa:f0:24:23:90:41:db:2f:5f:ca:80:fc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Aug 4 08:01:00 2025 GMT
Not After : Aug 5 08:01:00 2025 GMT
Subject: CN=7a109315c183da4c0c4392379769f33b6c38c59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:ba:bd:8a:64:53:7d:70:46:79:79:df:0f:
de:90:a9:b6:03:ca:9d:64:66:c8:7a:20:73:b1:f3:
22:74:d7:26:ed:86:52:97:39:d4:73:1c:06:ed:f7:
1b:e6:72:54:e1:a7:d1:56:7d:51:15:e6:fb:c0:81:
f0:cb:44:29:28:c1:17:a7:4a:9c:a3:96:d4:d5:d7:
3c:02:50:12:ce:10:87:23:33:f4:a0:dc:19:3a:60:
00:0c:05:20:f6:43:0d:0b:15:4e:8a:24:39:f4:72:
28:10:d2:fc:cd:37:79:ce:6d:36:08:aa:75:86:94:
23:4b:cd:89:87:bc:eb:63:90:90:19:4d:79:c0:82:
7b:37:bc:cb:04:e6:d0:05:00:b9:f5:36:4d:f0:27:
e2:a9:69:4b:ff:6e:e5:54:89:80:38:85:30:93:b5:
26:05:75:05:25:38:06:3f:10:b2:bc:57:61:c9:d7:
cf:21:90:a9:3f:47:d7:2a:70:2d:66:9f:a9:be:64:
6c:26:cf:38:0a:52:5b:5d:7b:e8:40:d4:ce:9f:42:
49:a0:1b:6b:12:0b:2b:cc:5f:4a:8e:ef:b0:c7:5c:
8f:a9:92:34:cf:46:a1:ca:92:95:9d:23:7b:09:47:
10:4c:98:fc:3a:f9:a7:d8:77:ff:75:29:76:cf:af:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:93:15:C1:83:DA:4C:0C:43:92:37:97:69:F3:3B:6C:38:C5:9D
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:a0:69:0e:f5:3c:01:c8:54:27:15:2e:0f:a2:dc:a1:a1:
60:82:fc:d1:78:82:c1:38:93:e7:8a:f0:1e:5f:e8:28:cb:91:
ad:3c:2d:30:42:8c:84:9e:75:48:e0:9f:ae:ea:7f:63:58:b7:
4a:bf:87:8f:f1:61:bd:f6:96:14:88:dc:1d:f9:26:9d:15:36:
31:eb:85:a2:b3:05:62:c6:5e:fc:e4:9f:fd:7c:8b:63:84:05:
76:62:9a:89:9f:d7:ca:34:4f:62:56:e8:12:cd:48:04:e5:c4:
fd:92:7b:7b:7a:05:8f:2d:5f:22:51:77:46:4f:06:30:b0:ad:
83:0f:3e:5b:c9:30:db:86:6a:7d:82:7d:19:7a:76:4d:d0:46:
3f:25:82:78:d4:58:aa:9b:69:e8:76:01:93:d8:6c:98:c5:b4:
66:fc:4e:50:7f:dc:1d:bf:dc:81:3a:18:c5:65:45:b0:3b:84:
8e:bc:e4:8e:cf:3d:3a:2a:4c:57:81:38:3d:f1:30:62:a3:5e:
d2:18:53:6b:8f:0c:cf:bb:ab:98:62:c1:4f:3f:fb:3c:9f:4c:
a7:c3:6e:fc:ab:7d:ad:a6:9a:ff:26:8f:69:58:d9:3c:2f:5c:
19:36:af:ea:53:20:02:a0:28:32:34:f4:b7:27:fd:f0:8e:80:
04:c4:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:14 2025 by rpki-client