Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: QXmOrvrEEgq76RInq8xYBZqJaXYQ/Tvt0dm+0MObM9k=
Subject key identifier: C6:DB:CD:4B:FE:E4:00:C5:E3:9F:B8:35:B6:A8:56:90:E5:3B:A2:6E
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 01987CE5222FFBE948C6F374A552AD64B303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 01:00:47 +0000
Manifest this update: Wed 06 Aug 2025 01:00:47 +0000
Manifest next update: Thu 07 Aug 2025 01:00:47 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: hOkpN0q7hF4rU4zS0wGCLlmFgQ9qd3tLjEs0oS6Rodc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:22:2f:fb:e9:48:c6:f3:74:a5:52:ad:64:b3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Aug 6 01:00:47 2025 GMT
Not After : Aug 7 01:00:47 2025 GMT
Subject: CN=c6dbcd4bfee400c5e39fb835b6a85690e53ba26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:87:fb:d2:53:2f:d2:f8:75:ba:e1:bd:c0:
b8:72:f4:b2:41:02:16:cf:2d:31:f9:93:5a:58:b6:
cd:25:03:b8:ca:23:ae:0d:9c:08:ff:a4:9e:a3:9d:
b7:18:bf:56:80:70:8f:b2:27:2c:86:b5:27:09:21:
97:29:e3:ce:c3:e4:5a:3a:df:23:16:ed:60:78:c1:
d5:6a:58:32:d0:06:d2:a6:23:59:e6:c0:8f:4f:11:
b7:ce:70:d4:f8:85:da:b3:8b:09:eb:2d:62:a7:ea:
7b:f1:84:71:05:4d:2a:ae:40:eb:2b:f9:0e:49:18:
e0:63:c6:36:0e:6a:9c:be:6f:c1:d6:54:7e:5f:53:
a7:23:cc:64:3c:c4:d1:32:b5:6a:c3:a1:1a:58:5b:
6f:d1:93:e5:1f:02:50:33:3f:80:95:14:25:e7:f9:
1b:05:b4:f9:7c:60:c0:e8:59:5f:22:30:5f:55:07:
ab:86:34:b6:1a:dc:44:67:e7:df:c6:ed:fc:e4:8f:
9f:50:b7:35:79:9d:da:3d:a3:20:d7:f6:68:3c:00:
f1:ec:67:8d:6f:2c:bd:91:08:cc:df:80:f1:e4:62:
6b:91:cb:84:2e:b0:71:ca:48:7b:bc:84:75:8a:86:
c9:d1:f0:d6:b3:a7:7a:bc:15:1d:13:c8:d5:19:c2:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:CD:4B:FE:E4:00:C5:E3:9F:B8:35:B6:A8:56:90:E5:3B:A2:6E
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6d:ac:80:a9:a0:18:87:84:bc:97:99:51:d1:81:02:33:d0:
3a:80:1d:89:fe:7f:7b:e6:8e:08:aa:f5:ef:ff:f2:19:d0:d6:
35:b7:f2:35:84:43:67:7e:dd:1e:ba:5d:39:95:6d:e6:b7:87:
61:8d:fe:c1:31:4e:46:5e:ca:c0:71:62:a8:fc:6d:89:33:f3:
9e:18:84:bd:e3:4b:11:46:b2:dc:be:74:e9:5c:f0:61:be:4f:
37:35:ba:c5:4d:4d:60:3f:18:0c:f5:9b:07:91:6f:7c:9c:8e:
1f:ba:d5:25:90:fe:4a:02:03:52:fb:7d:71:ac:23:ed:54:8f:
3f:25:6a:cb:a4:7c:bd:b7:e4:70:f8:47:08:a7:63:04:af:74:
f4:71:dc:0d:61:61:6d:b2:13:04:e3:92:5c:75:d9:ee:3f:ab:
aa:c9:46:17:05:a1:5c:80:9e:d9:18:8d:8e:13:b9:4d:be:e0:
cb:fe:64:58:0e:a5:36:09:1f:99:87:19:ee:2a:b7:b0:b8:b7:
17:2c:c5:67:3f:d7:c9:79:89:63:4e:cc:79:4f:89:78:98:de:
84:57:12:9a:05:4c:16:f5:ef:62:95:33:63:27:48:fc:8c:45:
00:3e:b8:09:a1:64:22:45:44:b8:78:07:ff:d4:fb:e3:65:cf:
be:19:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:45 2025 by rpki-client