Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: b/7C/FQhFRNMU2mUFwpO/xQVE5vivjU4ychS+7gBv0k=
Subject key identifier: DF:FE:8B:F9:14:A7:84:21:3B:CC:94:5F:E9:4C:DE:44:31:A8:09:66
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 01976C61EFCFA6B2E0DBA15B847AF32066BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 08BC
Signing time: Sat 14 Jun 2025 03:00:47 +0000
Manifest this update: Sat 14 Jun 2025 03:00:47 +0000
Manifest next update: Sun 15 Jun 2025 03:00:47 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: dT8mu6WQWnlYIutPD0qgPCsYOh7NGzpFD1wubh6Wk74=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:ef:cf:a6:b2:e0:db:a1:5b:84:7a:f3:20:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Jun 14 03:00:47 2025 GMT
Not After : Jun 15 03:00:47 2025 GMT
Subject: CN=dffe8bf914a784213bcc945fe94cde4431a80966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:ef:e1:c2:c5:50:ae:77:ed:f0:c2:7a:ea:
b5:56:10:6c:25:c3:ee:81:1d:23:46:56:56:d2:6f:
5a:73:26:50:d2:39:94:da:11:63:9f:12:ed:37:cf:
ea:67:d6:2b:49:a2:d6:a8:46:c3:40:f5:44:34:17:
a6:57:8d:3e:84:78:90:f0:91:65:8a:11:02:68:8f:
35:32:8d:4a:45:87:c8:b1:df:b5:82:8d:77:e9:7f:
38:65:a1:59:b7:7a:33:fb:b7:cc:df:a0:88:16:43:
19:23:b2:e0:72:0c:f8:7b:45:b1:67:7e:da:b3:41:
87:4d:d9:50:4d:18:f3:d6:ac:44:25:ef:ac:53:7b:
04:ab:31:b2:35:02:c5:28:e9:a2:ca:d8:39:32:9c:
7f:2b:16:8e:55:03:cb:15:88:2c:d8:5c:e3:8d:42:
93:04:e8:b5:1c:65:73:9a:1c:bd:4b:39:3e:39:4c:
ae:80:b3:34:d3:50:e5:1e:a2:ae:0c:f9:15:9b:12:
1d:bc:c7:d7:aa:52:50:38:18:bd:6c:4f:03:8f:22:
96:a7:e1:b5:15:3f:13:40:45:ea:59:2b:4e:f6:a0:
15:e1:fe:aa:53:62:aa:ff:3e:40:5b:a0:c4:00:d5:
eb:c8:3b:70:98:66:d7:3d:89:4e:8f:37:87:40:e6:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FE:8B:F9:14:A7:84:21:3B:CC:94:5F:E9:4C:DE:44:31:A8:09:66
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:fb:c8:9e:21:d0:5e:39:8a:cd:c3:f1:88:a0:ca:ba:32:
30:82:a6:17:e8:fe:ef:54:44:7e:47:eb:3b:57:b2:9d:07:ee:
31:54:c8:d4:7f:f6:e6:22:cf:1a:83:b5:7f:02:0a:b2:be:09:
12:63:94:b9:a5:56:8f:bd:fb:3b:73:78:1b:72:e2:04:ce:0b:
cc:6b:a3:37:85:12:ed:82:41:65:7c:0f:d8:c5:e1:89:d3:db:
e6:c6:94:26:6b:d3:38:bc:1f:3a:e2:89:d8:a3:53:43:ae:22:
6a:40:be:be:37:1b:ce:73:a8:76:59:55:f2:49:ca:ea:91:c8:
49:28:cf:fb:1d:08:41:91:82:e8:a9:45:72:91:c5:b0:4f:ed:
ef:dd:32:bf:41:11:bc:0d:ad:03:ee:1c:6f:20:83:5f:d6:22:
1e:29:e8:40:aa:46:7f:75:85:20:1d:71:22:99:ef:c4:11:2f:
7e:80:38:c3:3b:7b:38:d9:11:82:a3:a1:b6:ba:3e:be:c0:3d:
28:11:be:9b:48:b7:39:0f:4d:e9:6c:78:0e:42:06:8b:38:80:
64:8a:a7:b7:88:d1:85:36:47:a4:f1:3f:ff:d0:8d:4c:05:e0:
15:4f:e9:92:21:94:5e:49:64:fc:eb:5e:bb:a6:c5:bc:c4:b9:
6d:92:92:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYe/PprLg26FbhHrzIGa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjUwNjE0MDMwMDQ3WhcNMjUwNjE1MDMwMDQ3WjAzMTEwLwYDVQQD
EyhkZmZlOGJmOTE0YTc4NDIxM2JjYzk0NWZlOTRjZGU0NDMxYTgwOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFXv4cLFUK537fDCeuq1VhBsJcPu
gR0jRlZW0m9acyZQ0jmU2hFjnxLtN8/qZ9YrSaLWqEbDQPVENBemV40+hHiQ8JFl
ihECaI81Mo1KRYfIsd+1go136X84ZaFZt3oz+7fM36CIFkMZI7Lgcgz4e0WxZ37a
s0GHTdlQTRjz1qxEJe+sU3sEqzGyNQLFKOmiytg5Mpx/KxaOVQPLFYgs2FzjjUKT
BOi1HGVzmhy9Szk+OUyugLM001DlHqKuDPkVmxIdvMfXqlJQOBi9bE8DjyKWp+G1
FT8TQEXqWStO9qAV4f6qU2Kq/z5AW6DEANXryDtwmGbXPYlOjzeHQOYA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/+i/kUp4QhO8yUX+lM3kQxqAlmMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpv7yJ4h
0F45is3D8YigyroyMIKmF+j+71REfkfrO1eynQfuMVTI1H/25iLPGoO1fwIKsr4J
EmOUuaVWj737O3N4G3LiBM4LzGujN4US7YJBZXwP2MXhidPb5saUJmvTOLwfOuKJ
2KNTQ64iakC+vjcbznOodllV8knK6pHISSjP+x0IQZGC6KlFcpHFsE/t790yv0ER
vA2tA+4cbyCDX9YiHinoQKpGf3WFIB1xIpnvxBEvfoA4wzt7ONkRgqOhtro+vsA9
KBG+m0i3OQ9N6Wx4DkIGiziAZIqnt4jRhTZHpPE//9CNTAXgFU/pkiGUXklk/Ote
u6bFvMS5bZKSXg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:24:55 2025 by rpki-client