
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File: R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier: NXzNMQYE8+I9Tn1IP5KbcaPYzmmULIbO88uM3iXwOVA=
Subject key identifier: FB:8C:2C:80:8F:D5:09:D9:4B:E9:1C:FC:1C:C5:29:FF:5E:0E:DE:89
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer: /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial: 019A232E35B06246590189D7AFBE97B74A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number: 0D86
Signing time: Mon 27 Oct 2025 01:00:22 +0000
Manifest this update: Mon 27 Oct 2025 01:00:22 +0000
Manifest next update: Tue 28 Oct 2025 01:00:22 +0000
Files and hashes: 1: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: DFnZw8/DZC6o08vcMA5pf1Z0gBnHToMKAaHCsjq2hNQ=)
2: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (hash: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:35:b0:62:46:59:01:89:d7:af:be:97:b7:4a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Validity
Not Before: Oct 27 01:00:22 2025 GMT
Not After : Oct 28 01:00:22 2025 GMT
Subject: CN=fb8c2c808fd509d94be91cfc1cc529ff5e0ede89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:91:93:10:74:0f:d7:57:20:40:df:f7:a6:64:
c7:3e:01:7e:ba:5b:43:9a:4b:77:33:6b:89:a4:84:
fd:c3:fa:d0:30:0b:c5:82:87:9f:ae:98:d4:01:a5:
fd:77:de:b5:06:9c:ad:5a:de:64:09:7b:c9:12:a1:
9d:bf:03:c9:29:14:9e:24:68:3a:b1:15:08:b7:c6:
bc:98:b2:3c:66:8c:22:71:fe:b5:86:a3:e8:a3:15:
9e:7c:a9:e4:1b:cb:e8:99:a9:a1:84:ca:33:bb:2a:
a0:f3:c9:d8:08:e7:2b:e7:fb:5f:03:b3:be:38:fc:
07:33:4f:2a:ca:bf:d7:7c:af:3f:29:c5:e9:ec:41:
6b:63:f1:3a:1a:8f:51:b3:62:be:48:96:ce:ff:ba:
0f:f9:ea:0c:e6:7a:cb:6e:a4:58:80:0a:0b:cc:d7:
70:63:4b:07:43:97:f3:fe:9c:62:57:1a:bf:e4:0d:
3e:f5:26:6d:6d:67:40:24:f1:d5:f0:77:7f:ff:14:
01:e9:19:6c:af:dd:d7:ba:f4:44:b0:d2:25:d1:07:
e0:a8:04:e9:75:d0:94:f9:c3:b8:97:08:66:bf:e4:
39:7d:3f:c3:2d:d8:76:22:15:0d:32:3b:7a:d8:a3:
c9:b7:a4:bd:36:04:30:1a:10:79:ba:83:23:58:0b:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:2C:80:8F:D5:09:D9:4B:E9:1C:FC:1C:C5:29:FF:5E:0E:DE:89
X509v3 Authority Key Identifier:
keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:aa:20:41:21:ac:61:b6:c3:ae:02:1a:09:6e:c9:8d:41:
47:a6:cd:ac:22:06:96:86:e7:69:3b:26:57:44:1e:d4:43:32:
f4:a2:4e:ab:a0:b6:3a:d5:2d:75:bf:b9:d1:bc:9d:35:a7:ec:
20:0f:34:e0:ce:a8:bf:c2:84:9d:02:42:b0:e4:36:8f:9d:7a:
02:87:4b:a4:a8:14:b2:11:19:da:ce:6b:78:cc:7a:b0:70:42:
66:85:23:30:af:84:a9:35:8e:6d:c8:e7:d4:18:b7:9f:ff:26:
1f:f0:da:55:44:13:86:10:f5:7e:f2:37:56:c1:e4:94:b7:04:
75:05:34:b1:65:ad:92:1d:14:33:f4:43:51:12:ea:a4:0d:c0:
96:4a:2d:08:93:25:76:0e:76:96:28:4d:cd:0f:3a:2b:2c:7d:
c0:e8:8e:1b:f1:f3:96:10:7a:5a:b9:16:37:cc:7d:04:75:c1:
15:4a:f3:59:3a:10:ec:bf:8f:bf:c0:b3:11:3d:3d:df:93:56:
3d:dd:d8:a9:21:d0:65:2b:61:85:83:33:c7:a8:45:11:11:6a:
9f:d8:e3:e6:7e:54:66:fa:09:3b:7d:8f:8d:b4:23:71:b2:ce:
a3:76:3e:f0:d3:a8:6e:6c:11:32:ef:cc:63:93:6d:7f:01:98:
e4:98:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:09 2025 by rpki-client