Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: e4AOwZehKSnN2fLl0lPAPWfBfoHHxqD1732JL3UVXvc=
Subject key identifier: 45:5C:FB:35:94:B1:83:27:BF:BE:92:D5:05:AB:F4:3D:4F:66:F4:F5
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0198A04CBEBDFD02C1C581C54A58D501B884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 052D
Signing time: Tue 12 Aug 2025 22:00:40 +0000
Manifest this update: Tue 12 Aug 2025 22:00:40 +0000
Manifest next update: Wed 13 Aug 2025 22:00:40 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: WIyY52BwWpOQOj9GrNYArdzusoQJg/tI8uH3bE2zTxY=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:be:bd:fd:02:c1:c5:81:c5:4a:58:d5:01:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Aug 12 22:00:40 2025 GMT
Not After : Aug 13 22:00:40 2025 GMT
Subject: CN=455cfb3594b18327bfbe92d505abf43d4f66f4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:3d:3d:5f:9e:b4:8f:e5:a4:c5:68:01:fd:
7c:13:09:e2:ca:98:68:72:c5:af:86:8f:29:15:e7:
e3:dc:99:89:ad:83:cb:09:95:2c:32:d3:4b:3a:5e:
95:30:77:91:c6:db:27:69:e2:01:0d:06:52:a2:54:
24:3b:05:3d:e3:77:72:5f:0b:2e:70:3f:69:a5:9b:
0c:58:6c:c2:5b:0e:72:d9:89:0a:fa:d1:7c:62:c6:
40:d4:2a:05:6d:99:fa:47:2a:cf:d5:c9:e9:e6:3c:
68:93:9d:7a:5e:6b:b2:3d:a9:d0:34:c4:a7:d0:0a:
33:ac:a8:2b:30:bb:79:1b:a6:fc:a1:97:79:c4:b0:
2a:3a:ca:13:24:67:78:3a:67:df:50:5b:12:f6:b4:
2b:82:25:8c:cb:f6:74:aa:33:5e:fe:56:cb:12:72:
1f:9e:a0:80:22:b3:1e:91:ec:da:14:f5:95:b1:ac:
70:8c:0b:90:93:03:70:ef:e7:df:7a:9f:8f:43:c3:
8d:ac:2f:95:12:2c:1b:02:6b:ce:28:a6:c7:ff:4d:
65:79:a5:80:14:93:27:d9:d0:af:9d:00:c7:73:ec:
45:6c:f4:0f:39:18:ba:11:f3:a2:ec:1d:43:42:be:
5a:d4:fa:38:93:f3:27:f1:f6:11:25:0c:71:71:88:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:FB:35:94:B1:83:27:BF:BE:92:D5:05:AB:F4:3D:4F:66:F4:F5
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3b:75:f3:55:5f:e9:94:90:78:0f:d3:85:c6:89:4f:ed:7d:
3b:7d:34:5f:58:d6:03:e8:1f:0e:a5:8a:0c:42:0b:58:5f:06:
1b:20:de:ca:33:32:83:f7:11:70:d8:4d:53:99:04:d0:c7:9f:
3d:06:2d:7e:0c:fb:e2:e2:62:b9:99:23:2c:81:32:56:7a:62:
c8:ae:9c:1b:17:c6:69:e6:6f:86:a2:9e:75:61:14:85:d5:62:
0b:91:e2:1c:43:b9:38:f4:8b:6f:72:62:20:a7:9b:1d:38:f9:
56:aa:5e:6f:e3:7c:5b:44:50:95:37:9d:fc:2f:5a:ae:61:86:
be:e2:56:51:c8:bc:12:68:59:18:03:b6:80:81:3c:f6:f2:35:
86:36:11:19:8c:ba:83:ca:c0:bd:26:d1:dd:c2:53:2f:a7:41:
a8:db:ff:21:17:07:93:ff:71:73:96:13:25:15:ae:d4:05:75:
42:ca:f2:13:ab:5b:31:79:ae:37:3b:cf:89:5e:0d:5c:c0:3d:
54:bb:ec:cd:92:11:26:76:64:b1:31:7f:3e:09:6d:7b:0c:9f:
a6:3f:1c:f9:dd:35:b0:8f:a5:69:2c:32:48:12:1e:3d:75:e0:
df:28:a0:ec:a7:84:bb:a6:8f:fc:0d:54:db:2b:1a:89:30:c2:
0d:2d:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:32:09 2025 by rpki-client