Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: tWcwtYuZdzHjjoCN5CXGZw1ONdyD2PncEjmNVtml2q8=
Subject key identifier: 86:69:18:AA:0D:27:6F:94:3F:8A:30:25:51:4A:52:8C:19:68:69:63
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01978C23A53AF2F37BE59C3A7FF8EAA8B5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 049E
Signing time: Fri 20 Jun 2025 07:00:35 +0000
Manifest this update: Fri 20 Jun 2025 07:00:35 +0000
Manifest next update: Sat 21 Jun 2025 07:00:35 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: grsh1zs9V4VHYP/g7NMtby6dbYcuFoB2oSYr6R+ZoyI=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:a5:3a:f2:f3:7b:e5:9c:3a:7f:f8:ea:a8:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jun 20 07:00:35 2025 GMT
Not After : Jun 21 07:00:35 2025 GMT
Subject: CN=866918aa0d276f943f8a3025514a528c19686963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:39:6d:41:2c:de:b3:d4:ea:ce:fd:90:76:
87:20:6d:52:63:43:4e:97:6a:69:cc:f4:37:56:4e:
b2:7d:6f:5d:b4:1c:f4:9e:e8:f8:0f:9f:d8:79:28:
cc:93:65:8d:c7:53:8b:72:2d:9c:e9:f9:85:31:25:
11:de:51:ae:8c:25:74:35:7e:94:38:10:80:ca:55:
a6:3a:c1:9c:b2:bf:25:99:02:59:cb:88:41:66:98:
7f:9c:16:82:3b:9f:36:15:46:28:81:31:f7:a1:30:
95:cc:1a:a4:8c:b1:b0:bd:54:f8:a7:34:05:0c:6d:
6d:98:e1:fc:d5:1c:d0:00:7e:6d:b8:2a:29:30:37:
7c:1b:38:1d:24:ac:b8:94:0e:7d:49:40:47:54:5a:
ad:a9:d7:f8:37:3b:85:91:a0:24:eb:39:10:33:67:
ae:07:3f:85:8b:87:e7:6e:c5:9a:42:c8:b7:4e:34:
f5:c4:ce:5c:43:93:0f:40:c1:d2:6c:b0:57:c2:3f:
3e:39:01:8d:37:26:6a:10:8c:b6:c8:36:0e:f2:24:
d8:46:a5:5c:22:66:a0:b3:74:f5:fb:d3:84:ad:01:
7d:2b:c6:93:2d:10:45:bb:af:25:4c:6b:d3:85:ec:
4b:d4:b8:3e:49:68:8d:8d:b1:61:56:fd:26:d8:de:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:18:AA:0D:27:6F:94:3F:8A:30:25:51:4A:52:8C:19:68:69:63
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:d6:29:36:68:99:ea:88:3e:a7:0e:c1:56:c9:4a:0b:c4:
47:b6:1d:cc:0a:12:7c:35:68:69:22:3d:df:54:54:11:b1:9d:
ca:b2:5f:a0:65:42:2e:74:b8:07:2a:e7:9f:12:d8:01:a4:80:
9a:ee:78:8b:fb:46:50:2c:4d:24:0b:77:9c:b9:00:e6:af:79:
1c:82:fa:b1:fd:cf:f3:2c:f8:bf:89:3a:cf:72:cd:07:1c:16:
3d:2b:05:51:fa:9c:b6:fa:89:33:4f:9c:0f:6f:ce:b1:6b:0d:
8e:1b:8f:8b:50:61:6f:16:a4:af:4d:d1:02:d5:0a:bb:46:d8:
92:85:17:52:36:d8:5b:71:ed:ac:2f:6b:03:87:02:be:33:0e:
eb:8b:81:e3:e9:71:f2:49:36:b2:92:e0:f6:c0:a9:a9:70:53:
7f:45:a4:f4:e7:1e:1d:4e:2c:8e:c0:f7:c2:30:0e:00:69:ac:
3b:a3:98:72:72:95:84:38:b7:17:b7:66:10:48:ea:a1:76:75:
95:62:ce:b8:cf:80:86:66:2b:5b:03:41:21:65:17:91:04:a7:
b0:79:c8:d4:72:67:f6:aa:e6:c4:58:fd:84:88:84:eb:3f:d9:
c1:3c:18:25:e0:55:21:d9:6f:c6:74:31:1b:a6:2b:19:94:10:
8b:31:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:39:10 2025 by rpki-client