Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier: cNX4b8oIOqjwqs6lcta9dDyH8a1+LwGAlPPBbXdJcnA=
Subject key identifier: 8E:E6:11:A5:F0:C2:0D:D9:2E:3B:4B:77:E2:1C:9D:F1:54:DF:24:E6
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 0198CB6EFC6707B608A8C84C3995D3976156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number: 10E4
Signing time: Thu 21 Aug 2025 07:01:45 +0000
Manifest this update: Thu 21 Aug 2025 07:01:45 +0000
Manifest next update: Fri 22 Aug 2025 07:01:45 +0000
Files and hashes: 1: Mx4AtQnh6AIKWnmGqOF-F8HW8ss.roa (hash: EW76XU1IjMRgjQIgnPKUzjQhl2lSomN9600p/tLtfrE=)
2: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: WSU1tddyv1xkZi0ToyZE6MKki1qrxsjWaUT/eATsdFo=)
3: yPXFtrn0h81R8W0oLipH61kFH1o.roa (hash: eYBdrwaJmPevRU6sJYSzkBR7Cz+cr0PwgSUCpdpoee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:6e:fc:67:07:b6:08:a8:c8:4c:39:95:d3:97:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Aug 21 07:01:45 2025 GMT
Not After : Aug 22 07:01:45 2025 GMT
Subject: CN=8ee611a5f0c20dd92e3b4b77e21c9df154df24e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:38:77:bd:94:c9:2a:9a:d3:fc:7d:13:3e:
bd:f5:d5:d4:82:a5:cb:be:7a:27:d3:58:90:bb:8c:
eb:11:ce:55:d1:c5:9a:32:ce:0f:2a:f0:59:7f:43:
ee:d6:e4:a1:e2:0a:47:c2:df:85:f0:5e:2e:91:a5:
32:a3:11:fc:c5:fd:30:f0:01:d2:d1:8a:a9:bc:40:
e0:dd:fb:06:d6:ef:70:03:11:30:4d:df:c5:96:f1:
9c:4f:2a:a7:3b:10:61:b5:87:b5:a6:df:2e:9e:a7:
9a:f9:9f:fe:2b:42:6d:48:ec:2d:a5:45:5f:34:0d:
24:e4:b5:85:96:53:c5:3d:46:3f:7a:59:3b:98:47:
f1:28:d0:ed:b5:d4:04:e0:3d:4f:62:5c:02:7f:70:
7c:87:ad:a7:c7:b9:cc:c4:c3:40:50:ac:c4:38:2b:
4f:de:29:fa:ef:a7:e6:3d:27:14:87:0d:98:13:e4:
2e:68:19:3f:a9:e2:5d:37:1d:62:8c:94:f1:83:99:
3b:aa:8d:c8:ef:7e:07:17:f8:92:00:e7:37:eb:fa:
eb:87:27:8b:b4:f4:20:a3:86:48:46:3d:09:8d:b9:
eb:bd:b5:fc:81:72:fa:8c:4e:ab:d9:ad:02:5d:8b:
fa:1e:65:2b:7f:d9:1b:1a:98:e6:27:64:dd:48:b7:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:11:A5:F0:C2:0D:D9:2E:3B:4B:77:E2:1C:9D:F1:54:DF:24:E6
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:92:6d:ea:ed:f6:4f:44:0c:27:19:70:f8:af:b0:de:e6:
2c:5e:2b:e8:70:88:03:69:d4:71:68:0e:1f:1e:8c:46:bf:9d:
2a:00:0e:d1:a9:b1:af:88:2a:d5:a5:32:c9:91:31:e7:6d:78:
ec:4d:bb:78:be:f9:a4:5b:53:bc:ff:cf:0c:45:24:5f:00:55:
4a:df:d9:d5:96:0d:5c:66:52:6a:56:ef:3f:77:2c:19:3d:77:
a0:d9:6b:21:b8:d5:e2:39:2a:ea:f8:a7:6d:8c:7d:62:c9:a5:
10:bd:53:d5:31:cb:c2:39:50:2d:61:e3:3a:9c:d5:4b:7d:17:
95:a4:c7:36:df:74:4f:c4:ee:89:7c:6e:e7:2f:e3:7c:17:f4:
59:86:41:69:d0:a4:1e:3c:48:22:74:c1:36:51:92:db:7e:42:
f3:7e:a8:b1:73:d2:ba:06:5a:09:a5:21:ac:ef:d1:28:c0:82:
0b:92:ef:24:eb:c8:91:0a:c7:c7:0c:f2:9e:e3:c4:b1:b4:4a:
08:46:54:05:c7:6a:eb:cc:94:8c:29:97:a8:f7:a4:c8:8c:08:
e5:69:75:3a:2b:57:e2:86:2b:dc:c1:4a:a9:a0:55:f5:74:37:
39:53:43:49:1b:5e:f9:25:9d:f0:ae:6f:5d:a7:80:e4:ca:b4:
f3:15:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:06:00 2025 by rpki-client