Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: 69iEXKjK9GLAjFD2CAaKgiQNAQNehKcuhrrsAr1GfIY=
Subject key identifier: C7:F4:59:6E:46:A0:A3:4F:2C:71:94:8B:E6:49:45:70:0B:49:74:E1
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019769CEDD4C2928ED135AA745BE23C97567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 154E
Signing time: Fri 13 Jun 2025 15:00:54 +0000
Manifest this update: Fri 13 Jun 2025 15:00:54 +0000
Manifest next update: Sat 14 Jun 2025 15:00:54 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 9uOi1a4OMOavFpDuGlu8+en7/0dDx9FbEaljeLPOub8=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:dd:4c:29:28:ed:13:5a:a7:45:be:23:c9:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jun 13 15:00:54 2025 GMT
Not After : Jun 14 15:00:54 2025 GMT
Subject: CN=c7f4596e46a0a34f2c71948be64945700b4974e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:3f:bf:54:46:cb:0a:f1:3a:d9:a2:f9:2c:
49:1e:8e:41:6d:c4:88:71:16:6a:ad:09:67:51:a4:
d7:8b:81:81:b0:5d:7f:4d:17:1c:cf:3e:e1:54:62:
18:a2:76:65:15:01:39:a3:ee:d6:7d:a5:32:b7:83:
97:b7:3e:6d:86:16:af:6e:ad:31:90:32:02:84:7f:
cf:ac:dd:1f:0b:de:68:88:0a:df:d5:b7:d0:42:a2:
bb:43:25:c6:3e:d8:1f:7a:49:de:0f:15:0c:51:bb:
cd:ad:03:51:67:1d:7d:fc:9e:0e:03:37:d0:9a:e9:
f5:c5:a4:0e:11:e2:81:80:76:1e:f6:04:da:40:a1:
87:14:43:5e:37:1f:af:0e:31:44:cb:c9:63:52:cf:
42:cc:1b:7f:9c:70:0b:ea:7c:ad:f7:d2:2c:ff:d7:
d2:b1:ec:ed:a9:3f:fc:bf:27:d3:5d:fb:e2:1e:5b:
36:ce:dc:f5:85:41:7c:7b:e7:ad:af:70:b7:02:aa:
61:06:5a:e2:34:4b:2d:f8:d6:13:ba:09:73:2b:0e:
f5:4f:9b:50:f9:1c:79:d2:04:f2:0f:ab:85:3a:7a:
f3:a6:18:0f:6a:f8:b5:99:bb:0a:ca:bf:b0:ad:c9:
01:e4:00:9a:23:88:d1:c4:3e:25:54:56:34:08:90:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:59:6E:46:A0:A3:4F:2C:71:94:8B:E6:49:45:70:0B:49:74:E1
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:77:9d:a8:5b:58:fb:07:bf:92:38:8e:cb:6d:b1:cc:48:24:
1c:ac:6c:51:6d:71:9b:d8:5b:20:68:c4:d3:3e:e8:1a:19:3a:
de:46:05:f2:fa:90:39:79:18:09:4e:05:f0:50:3d:e8:22:81:
3c:00:31:0e:f1:31:47:26:dd:7a:f3:63:d5:57:9c:98:91:52:
00:33:26:4f:4a:36:99:ca:79:f8:35:4b:b0:64:dc:0a:ed:08:
5d:8e:8b:9f:41:07:12:fc:83:72:5d:ea:ec:08:00:7c:08:e3:
6e:b5:fc:52:b5:4c:cb:27:8a:f1:29:46:f6:d3:92:d7:ec:a1:
57:63:e6:c1:95:ff:75:dc:33:dd:e3:20:45:00:fa:7d:30:d4:
91:b2:22:71:56:fc:96:a9:b6:de:82:29:8f:62:4e:d2:78:b5:
04:30:70:18:f7:a1:94:63:82:23:70:1a:c3:08:2b:27:ee:40:
ae:5f:49:4b:39:91:af:96:a1:ae:7e:af:12:65:02:31:c8:01:
5d:b8:87:0f:17:11:c6:5b:d1:7f:c5:b7:7f:27:34:da:f9:03:
49:7e:46:9e:84:54:50:f0:36:06:76:64:b5:f6:88:08:fc:54:
37:7f:26:12:36:84:21:37:71:a4:b8:81:ba:b2:fa:98:81:74:
d7:87:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:27 2025 by rpki-client