Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: a0tLUUCUXALC0M0n8NrOfWnDrJi3Qciut0HDGHU3oMs=
Subject key identifier: 5F:14:7C:AB:E6:A4:E8:5A:E0:29:DF:46:68:2C:83:7E:78:93:01:6B
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 01974E57BD5DC093FC37B88750D88026A12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 1004
Signing time: Sun 08 Jun 2025 07:01:02 +0000
Manifest this update: Sun 08 Jun 2025 07:01:02 +0000
Manifest next update: Mon 09 Jun 2025 07:01:02 +0000
Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: stnjaDqg46jYlkapIf0ce//dMtLa+ZM+1wJ1my31Pow=)
2: _Pgq84jrEp-zxajAzOXZ5wVPIRA.roa (hash: EbB6LGcx8MIH+W1ZkKFUETSvGMpVK6Hy6dyclc0VHiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:bd:5d:c0:93:fc:37:b8:87:50:d8:80:26:a1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jun 8 07:01:02 2025 GMT
Not After : Jun 9 07:01:02 2025 GMT
Subject: CN=5f147cabe6a4e85ae029df46682c837e7893016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:27:bf:1c:0b:8c:92:f7:17:f9:90:9c:cb:
90:75:a0:b7:fe:66:06:38:10:65:9b:0e:2f:b4:cb:
bf:37:23:c5:6e:99:73:99:d5:f6:8e:2a:33:8b:c5:
1c:fb:ee:a7:fd:68:7c:d6:42:ff:13:8c:cb:6f:46:
42:af:db:f7:07:f9:09:7f:56:0b:21:71:53:84:db:
62:87:58:ea:e9:56:6c:e9:56:31:12:4d:77:5e:65:
48:18:36:df:e5:bd:17:f9:73:0f:77:c8:21:ff:5c:
b8:18:34:79:89:52:61:33:a9:cb:53:65:39:ce:43:
ad:3c:91:87:14:bb:c5:87:5a:78:70:15:21:01:de:
b1:bb:c9:ad:84:62:51:b7:13:82:8e:bf:f5:cb:f7:
86:26:52:e8:b0:d2:b6:7d:d0:47:e2:d0:53:14:0d:
51:79:0f:71:84:4b:d3:4c:79:3b:58:b4:16:60:20:
82:66:95:f2:2f:57:d2:bc:a6:5d:ff:12:a4:ce:7d:
e4:ea:fa:81:5f:c8:df:98:05:ba:b4:b4:51:09:37:
10:cf:53:7c:70:37:a6:15:75:dc:13:24:3e:f6:3f:
07:30:32:a2:47:a2:9e:07:95:4e:b0:0a:d2:30:14:
ba:8b:be:09:d7:57:fd:f7:e7:b4:0b:1d:83:c1:4c:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:7C:AB:E6:A4:E8:5A:E0:29:DF:46:68:2C:83:7E:78:93:01:6B
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:f4:db:c1:d0:be:1c:f1:aa:8c:54:d2:40:39:4a:c7:05:
26:c8:ce:9c:f7:18:a3:e8:46:f8:bb:49:86:58:25:26:ae:6d:
40:8c:1e:6e:12:43:0e:c2:33:c1:f8:44:67:f0:a8:61:c8:87:
cc:f2:05:c3:3e:85:32:de:98:cd:d5:65:2a:f3:c9:27:52:3e:
47:67:7d:ef:7f:2d:5d:c3:3f:00:0d:df:b3:a6:dd:18:1f:18:
c5:30:ea:ba:23:c2:8c:67:23:8a:7a:29:67:a3:d2:50:ae:6d:
9e:01:9b:4a:6f:8c:59:8c:75:ba:df:c6:0d:ba:bb:93:3b:ab:
6e:f8:61:07:63:5d:cc:f8:fb:97:11:89:82:5d:ff:70:a3:5f:
86:d2:75:ef:66:f2:50:aa:da:4f:a0:83:f8:7a:99:31:e3:78:
79:89:de:d0:4f:e7:fb:7b:40:53:00:01:af:1e:f8:48:ae:42:
3e:1f:1f:12:ca:85:c9:f9:47:c8:9c:d6:88:e7:8e:b4:4e:33:
bd:5b:d6:81:a2:26:31:07:f4:41:a2:46:23:0c:b9:11:eb:20:
fe:bf:8a:b4:44:97:34:9c:91:a4:a4:2c:49:b5:f0:48:aa:35:
cf:97:df:b0:c8:f4:d0:05:79:63:4b:8d:bc:d9:3d:94:98:53:
8d:31:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:48:26 2025 by rpki-client