Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: /qHb12jPthbIFNWE7/1G8+ca7AWqtyFRD7+tSTvMu1o=
Subject key identifier: 40:19:85:BF:7B:52:63:27:6E:29:16:32:BD:E6:1C:D2:C5:EA:CC:55
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 01987E9CD1F3B0B0A11D5A046897DD1874A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 094A
Signing time: Wed 06 Aug 2025 09:01:03 +0000
Manifest this update: Wed 06 Aug 2025 09:01:03 +0000
Manifest next update: Thu 07 Aug 2025 09:01:03 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: dYNNhUIuO37fjd3QrYBc3kpyzYHXKpWdoUNautM7HSU=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:d1:f3:b0:b0:a1:1d:5a:04:68:97:dd:18:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Aug 6 09:01:03 2025 GMT
Not After : Aug 7 09:01:03 2025 GMT
Subject: CN=401985bf7b5263276e291632bde61cd2c5eacc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:43:b5:1b:a7:12:a2:ca:ca:25:ce:da:ea:
6a:8c:27:6a:bf:67:32:9a:59:08:58:ba:54:8b:a2:
f8:b3:53:3d:4f:73:7b:55:f1:ad:95:99:ba:8e:7e:
33:70:8f:81:19:ea:99:b1:01:ba:0c:da:30:07:0d:
cf:00:42:23:40:e5:8b:1b:af:15:65:88:5e:68:9c:
16:89:8e:c1:88:c2:4e:fd:02:db:34:a7:3b:d9:66:
e8:36:75:8d:23:ca:b7:b0:0b:dc:40:1e:f8:a3:04:
3c:c5:e6:7c:84:05:d3:42:e3:33:cc:37:5a:f4:91:
7c:6b:2f:c8:ee:f1:92:34:20:7f:3a:a6:f9:0f:42:
4e:52:43:e9:e1:92:ff:5a:64:da:63:ec:44:fd:c6:
92:bb:b8:d0:8d:20:fe:2b:f2:85:fa:19:6e:32:c0:
71:82:0d:49:34:43:4c:8f:18:aa:86:2e:0c:7f:05:
6d:07:34:9c:e5:e1:63:09:4e:18:af:f1:4d:8a:72:
e2:b1:69:b1:d4:2e:5c:24:cb:15:50:30:a1:2d:19:
f8:4d:23:f5:18:b4:0d:ab:35:15:4e:72:4e:9a:3e:
8e:88:92:1a:a0:57:07:91:4b:08:d8:10:cc:66:e6:
3e:c9:4b:d5:9c:8b:87:04:a1:d1:6f:c7:f8:5a:7b:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:85:BF:7B:52:63:27:6E:29:16:32:BD:E6:1C:D2:C5:EA:CC:55
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:63:19:c0:a7:ff:61:4b:76:76:ed:e2:53:5f:8a:9a:09:
18:13:52:fc:0b:c7:6c:8e:d6:4f:4f:4a:bc:78:68:eb:71:d2:
b2:a3:bd:3f:f2:34:00:88:2d:07:1e:1c:a8:4e:ea:7e:bb:d9:
a2:31:39:62:a7:d6:6d:17:84:a6:e8:c2:c3:1c:9a:4b:41:ce:
c1:1d:fb:fc:89:66:29:79:f9:9f:05:29:f5:52:b3:ea:14:6b:
cb:91:6c:4c:1f:02:3b:8d:48:7c:a2:6e:93:f0:f8:c6:d1:dd:
24:ff:11:4b:f4:14:35:7b:8c:65:88:a6:ab:07:01:bc:64:ca:
c8:56:58:13:67:ff:23:10:0e:af:b7:f0:b2:e8:ff:d1:89:62:
fc:9f:01:ba:2e:95:78:c3:ca:be:8c:9d:94:34:95:a5:1e:98:
8c:0e:ed:dd:48:7c:c9:27:0f:d9:94:c8:92:a9:39:1c:ba:62:
7a:04:bb:8d:14:4b:ef:46:43:0e:17:a9:f5:e2:03:d5:a8:79:
2f:1f:ac:78:58:8f:e8:c5:8b:9f:85:e9:8f:21:6f:3c:f1:42:
f7:88:0c:de:01:e6:73:23:a2:f3:fe:26:4d:5c:6d:16:6c:22:
b8:64:73:24:d2:62:97:6a:af:fd:dd:8c:7c:51:24:fe:08:87:
0c:c5:f3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nNHzsLChHVoEaJfdGHShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjUwODA2MDkwMTAzWhcNMjUwODA3MDkwMTAzWjAzMTEwLwYDVQQD
Eyg0MDE5ODViZjdiNTI2MzI3NmUyOTE2MzJiZGU2MWNkMmM1ZWFjYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbNDtRunEqLKyiXO2upqjCdqv2cy
mlkIWLpUi6L4s1M9T3N7VfGtlZm6jn4zcI+BGeqZsQG6DNowBw3PAEIjQOWLG68V
ZYheaJwWiY7BiMJO/QLbNKc72WboNnWNI8q3sAvcQB74owQ8xeZ8hAXTQuMzzDda
9JF8ay/I7vGSNCB/Oqb5D0JOUkPp4ZL/WmTaY+xE/caSu7jQjSD+K/KF+hluMsBx
gg1JNENMjxiqhi4MfwVtBzSc5eFjCU4Yr/FNinLisWmx1C5cJMsVUDChLRn4TSP1
GLQNqzUVTnJOmj6OiJIaoFcHkUsI2BDMZuY+yUvVnIuHBKHRb8f4WnsdRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAZhb97UmMnbikWMr3mHNLF6sxVMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi9jGcCn
/2FLdnbt4lNfipoJGBNS/AvHbI7WT09KvHho63HSsqO9P/I0AIgtBx4cqE7qfrvZ
ojE5YqfWbReEpujCwxyaS0HOwR37/IlmKXn5nwUp9VKz6hRry5FsTB8CO41IfKJu
k/D4xtHdJP8RS/QUNXuMZYimqwcBvGTKyFZYE2f/IxAOr7fwsuj/0Yli/J8Bui6V
eMPKvoydlDSVpR6YjA7t3Uh8yScP2ZTIkqk5HLpiegS7jRRL70ZDDhep9eID1ah5
Lx+seFiP6MWLn4XpjyFvPPFC94gM3gHmcyOi8/4mTVxtFmwiuGRzJNJil2qv/d2M
fFEk/giHDMXzmA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:03 2025 by rpki-client