Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: 2faCiFBrUF7GdWw1fof4pcHWrR4Lu6DXHrD47HbJIyI=
Subject key identifier: A1:3D:0A:C8:A2:90:E6:9B:D7:7E:67:13:95:9C:B9:6F:E3:9B:B1:0F
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019747B098812FA8498A815F69C13914098A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 08A9
Signing time: Sat 07 Jun 2025 00:00:45 +0000
Manifest this update: Sat 07 Jun 2025 00:00:45 +0000
Manifest next update: Sun 08 Jun 2025 00:00:45 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: 5wV2a7wAWiKrvg7du/mMh6NmmffxicV1PxWB9U+ZkHU=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:98:81:2f:a8:49:8a:81:5f:69:c1:39:14:09:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Jun 7 00:00:45 2025 GMT
Not After : Jun 8 00:00:45 2025 GMT
Subject: CN=a13d0ac8a290e69bd77e6713959cb96fe39bb10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:7b:23:41:d5:17:9f:4c:36:5b:13:56:4c:
b2:2f:e9:34:f6:44:b9:23:81:9b:f4:44:47:47:12:
04:f5:79:b2:22:6d:0f:5d:b7:e7:37:ba:d9:d5:05:
4f:7f:0f:b2:d2:65:c8:d8:a1:f3:5f:56:e5:27:c5:
52:94:08:74:f9:f8:37:f2:68:9e:a3:b5:b4:fc:9a:
4f:1e:62:95:a0:2f:60:5a:ac:b7:7b:55:e0:4f:9f:
66:3b:a0:f3:83:4b:6f:86:ea:97:e1:64:ed:0f:01:
ad:b3:34:da:47:96:8d:77:63:75:ee:58:49:52:04:
c8:a5:16:ae:76:af:70:a2:9f:44:a0:41:bc:f0:dd:
a7:80:8f:f3:66:9b:6d:fa:41:62:52:46:cd:42:d1:
62:57:a8:d1:32:0e:ee:96:72:de:8c:62:5d:b5:b9:
46:5c:c9:bf:0e:da:96:02:28:bb:20:2c:f2:3e:c9:
94:7a:34:e6:68:51:a4:e0:d7:6f:1a:29:33:97:da:
ae:77:3e:ec:b6:e2:57:de:73:ac:d7:ba:f4:99:a5:
33:a4:27:dd:09:3c:a7:e0:e3:1d:36:c7:16:1f:46:
0c:25:8f:b4:9d:26:d9:c8:a9:88:05:31:c7:96:ad:
88:01:81:22:2b:c8:a5:21:28:72:49:7a:ca:cb:4c:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:0A:C8:A2:90:E6:9B:D7:7E:67:13:95:9C:B9:6F:E3:9B:B1:0F
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:53:35:76:bf:a2:6a:1f:26:84:ca:cc:e9:39:72:7d:5c:af:
fb:e9:69:14:b7:09:32:dc:36:c1:d7:51:3b:10:3b:34:dd:68:
d8:cc:4c:ab:a4:e8:12:f8:a9:74:bf:1f:6e:99:de:70:a8:60:
eb:9b:80:7d:bc:9c:76:43:af:af:36:6b:5c:2a:57:df:a6:c9:
75:24:04:fe:90:d0:af:80:6a:00:b3:d6:7f:92:63:b5:39:3f:
46:92:cd:95:23:45:15:c1:e4:ab:74:98:7d:1a:25:0c:f9:7e:
01:4c:75:6b:a7:38:be:bd:24:82:88:1e:f5:c2:5c:b9:98:87:
35:f5:25:1a:5c:bc:e4:98:04:6a:56:c8:6c:a3:94:f0:44:c0:
bb:23:b8:da:b7:83:4b:80:7f:c2:c6:35:63:30:7d:78:5f:53:
f0:64:ab:72:4e:05:5b:49:a4:90:ff:61:e2:9c:1e:2c:34:5e:
75:6d:9c:f9:56:c4:64:7c:fe:46:65:8c:86:0e:d4:6d:97:f1:
5f:a0:4b:31:1b:ce:4b:b5:af:f2:26:15:2d:a9:b4:1d:85:b1:
bb:11:81:30:0a:d5:1d:ab:80:ce:06:dc:3e:d2:8e:8e:5a:ee:
54:ae:52:34:a3:4f:20:ec:95:51:0c:e6:ac:f6:0d:c0:91:df:
f3:0c:1f:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsJiBL6hJioFfacE5FAmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjUwNjA3MDAwMDQ1WhcNMjUwNjA4MDAwMDQ1WjAzMTEwLwYDVQQD
EyhhMTNkMGFjOGEyOTBlNjliZDc3ZTY3MTM5NTljYjk2ZmUzOWJiMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowJ7I0HVF59MNlsTVkyyL+k09kS5
I4Gb9ERHRxIE9XmyIm0PXbfnN7rZ1QVPfw+y0mXI2KHzX1blJ8VSlAh0+fg38mie
o7W0/JpPHmKVoC9gWqy3e1XgT59mO6Dzg0tvhuqX4WTtDwGtszTaR5aNd2N17lhJ
UgTIpRaudq9wop9EoEG88N2ngI/zZptt+kFiUkbNQtFiV6jRMg7ulnLejGJdtblG
XMm/DtqWAii7ICzyPsmUejTmaFGk4NdvGikzl9qudz7stuJX3nOs17r0maUzpCfd
CTyn4OMdNscWH0YMJY+0nSbZyKmIBTHHlq2IAYEiK8ilIShySXrKy0wpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE9CsiikOab135nE5WcuW/jm7EPMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1M1dr+i
ah8mhMrM6TlyfVyv++lpFLcJMtw2wddROxA7NN1o2MxMq6ToEvipdL8fbpnecKhg
65uAfbycdkOvrzZrXCpX36bJdSQE/pDQr4BqALPWf5JjtTk/RpLNlSNFFcHkq3SY
fRolDPl+AUx1a6c4vr0kgoge9cJcuZiHNfUlGly85JgEalbIbKOU8ETAuyO42reD
S4B/wsY1YzB9eF9T8GSrck4FW0mkkP9h4pweLDRedW2c+VbEZHz+RmWMhg7UbZfx
X6BLMRvOS7Wv8iYVLam0HYWxuxGBMArVHauAzgbcPtKOjlruVK5SNKNPIOyVUQzm
rPYNwJHf8wwfog==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:17 2025 by rpki-client