Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier: MScSJFwEWUERuZtqua2WviY6q8vDktveNmlzDWPw7Is=
Subject key identifier: 2B:31:73:6B:01:A3:BB:E6:4A:B7:F3:86:CB:78:C6:DC:57:19:CF:DB
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 019A07806D95B3D01B2BEF85A2893CBD68EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number: 118A
Signing time: Tue 21 Oct 2025 16:00:48 +0000
Manifest this update: Tue 21 Oct 2025 16:00:48 +0000
Manifest next update: Wed 22 Oct 2025 16:00:48 +0000
Files and hashes: 1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: HBwPgVyPbdHudspxkL79TvVPsaNeXvUwLEQYQCydRpU=)
2: eHF54uKQrEeekWWH_bk3xsW-Htc.roa (hash: GCtfeaQZsRf+af6PmTpPG0z7r0Odgf6s1wYbvYbHxOo=)
3: ploZ02rlnfRi7ZfIa7yOIhfkagI.roa (hash: R6taM/cNraH8uQShx/CW4Jm1BZ928c9xtETqvasyMTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:6d:95:b3:d0:1b:2b:ef:85:a2:89:3c:bd:68:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Oct 21 16:00:48 2025 GMT
Not After : Oct 22 16:00:48 2025 GMT
Subject: CN=2b31736b01a3bbe64ab7f386cb78c6dc5719cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:f3:d6:04:75:ed:61:c6:2e:a1:41:c2:4c:
e9:fa:58:0e:9e:68:8c:13:92:0b:29:5c:cb:8a:47:
5f:36:57:13:be:58:0f:11:39:59:e7:99:85:d5:5f:
cc:5e:a7:ef:dc:fb:55:f2:97:44:fd:26:1e:8a:6e:
fb:6d:44:83:3e:c9:01:fa:bc:da:53:2d:81:2f:4a:
ee:cf:b6:d7:b0:ea:8b:92:1e:0c:b6:5b:55:60:7a:
35:56:4b:10:2b:70:e2:01:c0:3d:15:19:3c:32:06:
6c:32:b4:59:22:a6:fb:91:4e:64:24:d8:66:63:e3:
7f:1e:f5:ea:50:31:60:f0:c7:e2:e8:57:3b:74:11:
d8:c2:ab:3a:1b:43:95:1c:11:5c:1e:2a:3b:7b:53:
bc:ab:f2:ec:27:8c:dc:e4:7a:04:b0:56:04:e3:a9:
8e:7b:36:b8:bb:53:ae:10:87:6a:d6:20:56:40:c0:
ed:82:10:1e:10:72:f1:9f:7d:b1:fc:c1:1d:5a:7b:
ae:8f:50:0e:fe:4c:46:35:3c:0d:73:9a:1a:a8:70:
60:b1:6b:05:87:b4:65:78:cd:1c:80:d8:89:4b:3b:
bb:ac:dd:af:0b:0c:b8:5e:5d:66:d3:5d:24:5b:42:
3b:40:12:45:86:e9:50:b8:bd:ac:2d:f8:e5:1a:d5:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:73:6B:01:A3:BB:E6:4A:B7:F3:86:CB:78:C6:DC:57:19:CF:DB
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:30:47:cf:50:5d:67:73:8b:22:28:65:f4:19:f0:1d:a1:
57:44:da:a4:59:72:91:0b:ef:50:c7:9c:70:6a:85:d4:52:96:
99:81:51:54:54:2b:3b:8a:73:86:96:11:a5:dd:88:32:eb:71:
e4:7b:c2:b5:7b:d0:bc:17:f2:dc:82:4d:b8:0b:13:a7:ba:99:
be:f3:3e:22:de:af:e2:9d:87:30:ea:5b:09:61:ef:81:c3:d5:
9b:79:76:3f:eb:50:d1:5e:b0:54:0c:1c:37:bd:11:a4:17:ab:
27:fc:84:bb:39:3b:54:ba:47:a1:c2:55:b4:19:f2:f5:07:75:
86:95:b5:0b:c8:d3:a8:f1:69:8a:ea:7d:d8:a0:22:2c:82:15:
b4:9e:7b:0c:86:da:fa:17:1f:8e:fd:32:22:d9:15:41:2b:2c:
3f:5e:2e:5d:01:73:7c:3a:38:6c:cc:ea:fb:f8:53:4f:b6:21:
43:36:bc:98:9c:3d:56:04:a4:3f:0c:9c:d0:a6:31:ad:2f:08:
80:28:39:bd:5a:62:81:36:4e:9d:b9:3d:f6:11:05:c8:da:1f:
f6:7a:26:de:6d:63:a1:42:82:9d:a5:08:08:8e:38:5a:6f:eb:
62:ab:08:4c:ec:05:36:f7:82:26:ff:69:21:90:07:e2:79:b7:
2e:4b:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:36:13 2025 by rpki-client