Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: fVcLx+cqDouZVd87LfVmGDlBuWMO7r0OHEPGoOr/Ay4=
Subject key identifier: 5D:53:FF:B8:9A:09:A8:3F:D6:72:11:9D:86:E4:C0:31:50:33:0A:06
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019922FA584426CF749EBFE095E0B8F9AFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 1466
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: FFr1DWfiV1feAvQlrRzMgblWwkGgbAk8cmPFgdj7QHQ=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:58:44:26:cf:74:9e:bf:e0:95:e0:b8:f9:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=5d53ffb89a09a83fd672119d86e4c03150330a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:23:c6:41:7d:3d:02:4b:5a:c4:7f:9f:47:
6c:24:31:e5:10:c0:a3:25:4a:36:bd:28:36:31:11:
35:32:6a:ad:e7:8b:48:19:e1:48:e5:b1:67:43:68:
e6:70:58:9d:22:0c:86:72:6d:0e:25:66:63:f2:6b:
e6:c5:90:66:58:6d:fd:9e:a5:b2:b6:bd:42:dd:c9:
c7:cc:2c:f2:e4:75:99:d9:86:ed:b6:32:be:6b:d1:
61:e7:b3:89:4d:6d:a2:04:95:e4:8e:03:61:49:c7:
ca:45:0e:13:52:c4:60:ab:eb:a1:3d:0c:bb:21:d1:
00:3a:6b:50:a1:93:65:9a:9e:82:d2:93:e9:88:60:
bc:89:33:ca:5f:58:dd:65:82:4a:75:40:9d:17:a0:
d2:f5:fe:62:1e:84:af:fa:4f:c5:75:dd:77:03:63:
67:6c:2c:34:30:25:91:61:a3:fd:69:db:fb:2d:9f:
3d:f0:4a:f0:5d:7c:52:66:95:49:82:c3:0c:6e:3c:
fc:ac:a8:c1:59:0e:09:e2:63:a0:0c:80:2f:e7:51:
0c:c8:7f:32:41:6e:2c:2c:75:4f:72:71:b9:35:a4:
c1:07:ed:28:93:a3:ba:d4:a5:36:40:4d:11:7c:c2:
c5:83:0d:c8:58:72:03:0a:c2:80:d3:eb:8c:50:08:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:FF:B8:9A:09:A8:3F:D6:72:11:9D:86:E4:C0:31:50:33:0A:06
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:ea:de:aa:7b:62:2d:ec:3a:78:6b:19:15:51:a9:68:11:
62:d7:c4:87:86:ef:91:62:1b:dc:fa:f7:9c:c9:de:d0:a0:67:
26:60:91:3a:30:f0:4f:06:68:99:20:d7:f6:77:e8:37:2d:63:
8b:98:68:38:9b:cb:38:e5:f6:b7:14:39:4a:61:ac:d6:85:a9:
49:42:2a:82:22:77:4d:c9:b3:60:a6:28:2e:7a:ea:f0:6e:32:
36:c5:5c:8f:21:38:5a:9d:c3:b2:40:6c:24:38:8e:8f:5d:1b:
82:e7:d0:1d:76:7c:38:ac:c6:d0:1b:9d:f5:c9:c6:ff:ae:3a:
84:fa:3f:86:f9:c3:c7:5f:0e:44:58:7c:89:c0:eb:d7:76:89:
78:23:33:7c:6e:ab:8c:37:60:f0:e7:0e:b5:90:5a:d3:e9:da:
f1:a0:fe:97:92:85:fc:fb:8b:f1:62:bd:99:d3:d0:f0:84:46:
70:7a:54:99:9d:69:5d:0c:e0:22:90:2e:42:ee:6e:64:29:f9:
c5:8d:ee:e6:c9:42:2d:2c:53:61:f5:3f:d5:52:28:16:ea:40:
78:cc:fe:5a:2b:ca:f0:c4:19:16:94:28:dd:ca:dd:37:a7:01:
08:0d:6e:c5:c7:ef:ab:8d:96:96:fa:64:f0:8c:c0:b0:c9:53:
ad:90:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:39 2025 by rpki-client