Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: r18783GYLK5P+TUHJNjOPNLcip/OJE4FPbbo7tj3Wbw=
Subject key identifier: BF:4E:6B:8C:AC:96:EC:8D:9E:E5:04:5E:13:7E:02:E7:66:9C:AD:52
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 01984588899F8E8EBDD78CA9544E049654EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 07AA
Signing time: Sat 26 Jul 2025 07:00:32 +0000
Manifest this update: Sat 26 Jul 2025 07:00:32 +0000
Manifest next update: Sun 27 Jul 2025 07:00:32 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: h+XdZhAxHx82bvllno1EL9faHXLxHnGKyoX2c0j7nss=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:89:9f:8e:8e:bd:d7:8c:a9:54:4e:04:96:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jul 26 07:00:32 2025 GMT
Not After : Jul 27 07:00:32 2025 GMT
Subject: CN=bf4e6b8cac96ec8d9ee5045e137e02e7669cad52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:41:1d:d9:49:8e:8f:dc:25:a0:16:4e:a6:
a7:b1:28:f3:99:ca:c8:41:4b:4a:13:b4:23:3d:c1:
a6:3a:3a:d5:d5:db:88:35:6a:4c:6a:cf:cc:46:19:
f3:0e:c0:f5:72:02:6e:af:81:02:91:a9:2b:86:e8:
56:af:4c:b7:04:ee:24:3f:4e:8c:09:c5:ae:db:15:
e5:f7:6d:20:02:b2:db:24:3d:72:02:6d:da:cd:4d:
6b:60:5e:f2:2a:21:5e:70:1a:7e:4a:8e:d2:8b:f8:
df:c3:7f:0b:90:e2:62:3a:1f:e1:ff:61:95:cf:93:
3d:45:13:1b:07:51:54:33:80:0a:9c:d2:4d:c2:05:
11:bc:e9:b4:cc:b6:0d:28:37:46:12:8d:bc:19:78:
45:63:38:95:8e:4e:c2:78:89:2b:55:e4:57:39:2d:
bb:ee:dd:bc:5c:91:27:14:2a:b7:77:0c:d9:8f:a6:
a4:77:3c:58:e2:07:d7:75:1e:b5:62:8f:f5:11:d8:
47:9e:df:4f:98:96:ef:62:30:ec:bd:3d:f5:d2:d4:
bd:58:9e:e9:59:26:c0:75:a1:94:81:e3:76:ea:52:
7d:15:d8:db:5b:ca:65:6c:81:f3:87:c5:58:0b:aa:
e5:84:50:da:7b:91:d2:03:91:ae:e0:46:36:77:81:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:6B:8C:AC:96:EC:8D:9E:E5:04:5E:13:7E:02:E7:66:9C:AD:52
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:23:14:c1:bf:ce:18:ce:65:c7:ca:13:d2:47:2c:2f:4c:
47:c4:b6:e4:66:fa:16:08:f5:f1:73:1e:c6:d3:05:97:e5:d1:
cf:32:52:94:c5:61:f0:ef:f8:74:87:8e:ae:e9:f7:59:7c:a9:
b0:67:c3:b3:a0:ed:62:0c:80:4b:50:4a:0b:37:3c:2f:c9:d1:
cd:da:3c:87:68:1a:49:13:ce:53:88:ce:0a:c9:a4:16:9d:6c:
e2:bc:7b:9f:7c:01:a0:2c:c5:41:b6:12:81:dc:a9:40:d8:39:
f5:34:ea:4b:c7:41:b4:fa:ea:b3:29:4d:cf:71:e5:4b:a9:58:
2f:ad:ae:1b:cc:ef:bb:f9:c8:31:e2:2e:72:39:58:85:c6:b1:
9a:05:36:5b:e6:26:17:ee:8f:d9:fc:4d:30:42:22:f8:12:1a:
28:26:2f:d6:d3:be:03:f7:0f:31:fa:2d:56:04:fe:5a:b9:8e:
c8:08:27:e7:18:2b:45:94:ab:31:6f:9e:f7:ca:91:b7:d7:d6:
bc:1c:47:83:b8:6d:bd:d7:25:51:86:d9:99:d2:1a:b9:a5:ac:
86:13:c6:c1:a6:d2:7f:ca:c8:e9:ed:ca:97:5c:76:1b:4c:cb:
5b:75:39:99:02:b8:a3:02:20:d4:55:9b:18:38:63:3f:b2:8a:
81:0c:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:34 2025 by rpki-client