Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: wBTkJJrUCumjr1tsj2/YFAC3c6SVOCmHpnKIhsmBSl0=
Subject key identifier: B7:72:4A:98:F1:0C:A1:4E:B1:76:C3:DA:41:80:AD:E8:AA:30:36:60
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 01987306E51FFE7FC4FABBB8947E90F24E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 03:01:28 +0000
Manifest this update: Mon 04 Aug 2025 03:01:28 +0000
Manifest next update: Tue 05 Aug 2025 03:01:28 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: njc+VeYR2p6SjQO/BCydQr7NAPMjrtCCA4HVJ6lrDEs=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:e5:1f:fe:7f:c4:fa:bb:b8:94:7e:90:f2:4e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Aug 4 03:01:28 2025 GMT
Not After : Aug 5 03:01:28 2025 GMT
Subject: CN=b7724a98f10ca14eb176c3da4180ade8aa303660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:32:5e:c0:00:62:c6:00:1f:e7:60:f1:01:
dd:ec:c1:70:63:d0:b1:0c:3c:69:c5:c0:c0:b5:fb:
fb:6e:2d:5e:fc:fd:3f:bd:a1:b8:2f:23:fc:94:51:
db:8c:d0:0c:15:19:15:93:d7:5a:54:cc:6d:de:5a:
9f:42:e6:dd:d2:2b:a2:60:bd:11:16:16:23:b7:c2:
23:5f:08:d5:8f:5c:9d:5c:fa:ae:25:1c:55:ef:39:
05:95:69:ae:0d:45:4d:38:50:86:56:d6:9b:b9:28:
b6:36:d0:d6:fc:17:40:b3:b1:d6:66:52:cb:8c:94:
32:7a:48:b0:2f:f6:9d:09:52:9c:a1:69:a6:48:a7:
66:18:c3:07:7e:88:78:91:85:14:06:30:d5:7c:43:
f2:24:a8:c7:9c:80:31:0f:8f:a4:fe:d4:f1:25:2f:
49:c7:c6:f9:be:19:a5:ef:11:e1:77:07:4a:9a:a8:
90:c8:2f:6a:6a:b2:7f:f7:e5:92:07:b3:d5:ae:5a:
95:d4:16:d8:9f:38:09:81:ec:c7:49:e3:49:66:f2:
3a:8d:72:5b:3f:98:4e:e3:44:19:43:f1:f0:ac:e7:
a2:93:8d:44:03:f8:18:06:c2:17:c4:8c:04:bc:f4:
7a:ec:6d:1d:f2:10:df:cb:58:ab:cb:c6:ff:2c:5a:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:4A:98:F1:0C:A1:4E:B1:76:C3:DA:41:80:AD:E8:AA:30:36:60
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fe:83:99:59:3b:9b:8f:6e:f3:ac:37:19:8a:60:c0:6d:c5:
1b:04:4a:39:d8:8e:c4:4b:0f:09:a5:ed:2a:11:d8:27:fa:e5:
cf:07:90:e9:73:53:fd:7f:ed:36:45:94:9e:ac:ff:0c:4b:77:
bc:eb:54:00:10:07:0c:3e:00:46:11:12:16:bb:b9:53:a0:a1:
7c:f6:71:30:1f:35:96:7d:7b:8d:80:ba:f7:58:b5:dc:fb:d6:
52:d7:56:1c:ea:74:09:88:52:5b:02:47:bc:e9:30:44:b0:3c:
b9:3b:f2:ac:8a:b7:6b:7c:d5:6b:ad:e5:11:40:9e:30:68:44:
aa:42:e3:51:80:23:c9:8e:70:43:75:27:47:1a:79:a5:02:8b:
c4:cc:fd:88:81:e3:5f:b4:6d:d0:58:1f:f3:58:46:f0:3b:60:
85:1b:15:e7:d3:8c:a1:65:d5:19:b0:81:63:52:75:99:b4:54:
50:bd:e9:fc:83:77:76:a3:19:d6:50:2b:63:c2:5e:01:5e:7c:
90:2e:2c:a9:ab:ee:1f:e4:c3:87:6c:44:cd:a5:ef:6a:c7:09:
c4:38:f0:12:57:d2:51:48:b0:72:40:69:8f:60:1c:80:21:f8:
a8:69:e9:bf:5c:50:18:23:f7:17:64:b1:e4:4c:3f:c9:2b:dd:
2c:5b:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:08 2025 by rpki-client