Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: /cwWUvUgChoLpfxmYJdSpNUcziC5LnVFZhwiJKDuBDo=
Subject key identifier: 76:11:84:2E:22:29:CE:A5:89:7A:B5:6C:BA:4D:B9:6E:3E:44:E1:FC
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 01987DF8107EA04DCF6468A97996C0BAEB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 15DD
Signing time: Wed 06 Aug 2025 06:01:05 +0000
Manifest this update: Wed 06 Aug 2025 06:01:05 +0000
Manifest next update: Thu 07 Aug 2025 06:01:05 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: zIgdq5ZN8kPdfsCSjvgaQLfD2QbVEsKu4qWrnJ46ENI=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:10:7e:a0:4d:cf:64:68:a9:79:96:c0:ba:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Aug 6 06:01:05 2025 GMT
Not After : Aug 7 06:01:05 2025 GMT
Subject: CN=7611842e2229cea5897ab56cba4db96e3e44e1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:d6:63:22:20:2b:5a:7b:4e:b0:21:34:6e:
50:50:dc:4b:20:ab:2c:e2:3d:9a:3f:dd:d9:bf:c2:
1d:32:1e:1c:39:c7:00:de:75:6c:bf:b5:6e:cc:c3:
6a:83:a0:b5:9d:1a:24:68:1a:44:01:60:ce:e2:90:
30:d8:ad:ff:87:5d:9a:3c:8b:78:96:9d:f5:8a:bd:
f5:32:3b:93:73:92:ef:da:dd:e2:05:cc:ab:3c:00:
08:a5:8a:6e:fa:d6:36:0b:79:c6:e3:ba:5c:d4:a2:
4b:d3:e5:50:29:eb:ae:74:4b:ae:1f:43:77:0b:4b:
65:74:0c:04:48:c4:db:e7:e7:dc:c0:a2:f6:d1:45:
20:86:09:83:1b:7e:d2:12:91:5a:f1:f7:24:84:4b:
a4:7f:ab:8f:36:22:d2:45:3a:38:38:bd:e6:89:b6:
a9:a4:51:a3:7d:41:69:07:a7:e2:ee:5c:28:5b:4f:
7e:9f:a3:fd:7f:d9:18:b8:5d:93:89:3e:78:a2:49:
80:af:17:59:3e:48:90:66:d0:36:91:16:42:fa:ea:
8d:c5:63:9e:cf:5d:1d:b1:0d:1d:21:77:51:92:f7:
c3:80:ee:02:0a:3f:a4:6e:20:ae:8b:7c:1c:e0:c5:
8b:ce:c5:59:20:db:b6:e4:e3:16:f0:0c:7c:0e:21:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:84:2E:22:29:CE:A5:89:7A:B5:6C:BA:4D:B9:6E:3E:44:E1:FC
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:ad:ee:99:3e:9c:31:5c:4f:5f:9d:07:ea:cb:37:00:bb:
d7:7e:99:d0:49:68:cb:d2:64:0a:64:43:3e:44:24:ef:2b:12:
58:f8:f8:9f:12:38:29:80:40:fd:e8:cd:2d:4a:93:38:d6:c3:
29:7f:ea:ee:fe:be:5b:c7:06:9e:ef:24:9f:2f:00:3f:aa:a8:
95:3a:37:50:77:42:d3:0c:f9:9f:0f:b8:3f:98:c8:c3:c1:8f:
bd:d8:23:1e:64:56:17:28:2a:9f:dd:4c:a4:36:e5:30:62:c3:
fc:3f:8e:03:6f:54:db:29:a3:52:be:ff:79:25:10:39:4e:a3:
ba:49:0b:b0:82:54:ea:87:bb:cb:ee:0f:12:00:d2:38:79:71:
c0:26:75:8a:61:77:e0:19:d9:f7:8d:c3:52:4f:9d:7d:72:c3:
3d:60:07:97:d2:5b:6b:1a:af:dc:f9:fa:14:d8:34:fa:25:c8:
38:3f:b9:39:23:e4:27:0f:6b:85:92:60:93:6b:91:08:eb:c8:
6b:c5:49:ea:9d:a6:17:52:04:14:d0:75:f7:78:64:2c:e4:02:
e9:f0:a9:3e:7f:d9:f1:ad:67:b9:b8:7e:a8:cf:83:de:9e:f6:
29:4f:d6:14:c8:28:1b:99:51:d8:2c:41:6b:0c:4d:f1:a3:26:
6f:ff:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:42 2025 by rpki-client