
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: HfrY3Fp9pHyxTWVoAu87HQVM0xIvd+nOR7a/XJpn16I=
Subject key identifier: 41:8A:90:12:C4:4C:1C:89:D4:20:82:31:F3:DB:3B:D4:1A:A4:8B:EA
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019873E3D154C90FB1D533D472EF91575752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 07C2
Signing time: Mon 04 Aug 2025 07:02:46 +0000
Manifest this update: Mon 04 Aug 2025 07:02:46 +0000
Manifest next update: Tue 05 Aug 2025 07:02:46 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: Ifg2vyf2eUItI4KywwuhzGqizkneeZ+LONcOo0KHcMg=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d1:54:c9:0f:b1:d5:33:d4:72:ef:91:57:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Aug 4 07:02:46 2025 GMT
Not After : Aug 5 07:02:46 2025 GMT
Subject: CN=418a9012c44c1c89d4208231f3db3bd41aa48bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:b3:8a:77:c5:17:40:59:dc:28:97:fe:a4:
42:7c:4d:cc:c4:6b:68:95:30:16:5a:b6:85:02:22:
85:bb:c0:9b:43:a8:74:d1:b7:ff:6c:9f:ea:33:1d:
0d:9d:2d:6a:49:e9:2d:db:64:22:30:2f:11:de:e5:
3c:36:a5:09:a2:73:b3:f5:54:0a:96:6a:f6:82:e7:
9c:7f:bc:e4:21:7d:23:be:0e:92:a5:43:55:06:b3:
b5:5b:be:9a:09:a9:64:32:dc:a8:85:cb:a4:84:1d:
bb:1e:e1:a6:40:e5:87:23:41:5a:82:da:6a:80:bf:
47:68:20:84:4a:0b:c9:f8:59:45:28:e9:2e:16:66:
64:40:b1:d6:6d:ec:68:a7:49:1a:a3:b8:72:73:fb:
8e:cb:6e:e3:8c:57:93:5c:df:e1:7a:17:58:17:9b:
89:0e:ff:ed:a2:6b:1d:98:01:4c:ed:ad:2c:52:19:
9f:d1:e1:1f:13:62:4d:4b:7e:73:ab:e0:d3:0c:d3:
6f:9b:c8:e7:f8:55:7d:83:1b:59:d2:10:44:b2:03:
b2:e8:18:e8:b9:55:02:ff:1d:44:b0:df:33:72:94:
a3:05:77:83:d6:4b:8f:53:0a:d0:8f:9e:0c:61:79:
7c:8f:cc:40:c4:98:d4:b6:41:73:6e:94:51:e6:e6:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:90:12:C4:4C:1C:89:D4:20:82:31:F3:DB:3B:D4:1A:A4:8B:EA
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:18:6a:10:26:23:eb:a3:fe:54:d8:d5:a8:0d:85:9a:a8:e6:
92:a7:63:13:50:dc:08:05:d2:68:cf:32:0c:2f:db:ae:45:4a:
71:86:c0:78:de:a2:81:3a:8c:e0:0a:83:2a:0e:28:f9:ed:ef:
e6:c4:99:e1:4c:74:0b:a5:2b:29:b3:20:a5:ab:8a:f2:fa:e4:
74:b9:8c:30:3c:6a:14:3e:d8:c4:86:68:f1:f6:dd:ba:25:e1:
a8:63:44:2e:1a:9d:d2:a7:30:8b:60:6e:44:fc:29:25:dd:b4:
d6:4a:13:b9:24:e8:1e:20:2b:2f:14:52:3e:6c:88:b4:0b:8a:
40:45:a0:7e:64:c9:3e:94:a6:0f:33:3d:dd:1a:09:4d:72:f7:
8e:b5:ba:35:26:aa:c4:48:13:e8:90:8e:bb:25:04:3a:03:56:
4a:e8:e8:11:e6:06:2c:5b:12:a5:d9:31:02:c6:50:8c:56:af:
48:bb:47:6a:2e:1b:8f:92:0b:e0:f7:00:67:f6:bb:06:59:f0:
af:61:e5:a4:75:b5:87:48:1f:6a:56:6b:e6:c3:99:5d:ec:a1:
eb:27:c6:0d:e3:19:cd:ba:b4:2d:5c:ff:a1:97:5e:e7:4e:89:
62:4a:41:7b:69:f8:8b:ba:5b:16:c8:8e:a9:5a:f0:0a:c1:28:
0b:b2:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:02 2025 by rpki-client