Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: c4PagHVQNdOhDotklwUDaqwhwGPg0wnesGTA39yEV9s=
Subject key identifier: 33:5E:94:C1:22:B7:37:03:0E:B2:9E:A1:51:68:D5:77:ED:42:9D:C7
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 0198C610BE4E79A9ED7FBD1CE054F9DBE6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 096F
Signing time: Wed 20 Aug 2025 06:00:42 +0000
Manifest this update: Wed 20 Aug 2025 06:00:42 +0000
Manifest next update: Thu 21 Aug 2025 06:00:42 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: cQWkVosG/2ekKs1jp6OaUCw4hY8DRO1M6stGud3f06Y=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:be:4e:79:a9:ed:7f:bd:1c:e0:54:f9:db:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Aug 20 06:00:42 2025 GMT
Not After : Aug 21 06:00:42 2025 GMT
Subject: CN=335e94c122b737030eb29ea15168d577ed429dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:d3:39:af:06:b4:6d:b6:75:71:fc:2f:fb:
f2:12:10:ac:30:e7:73:02:0b:88:89:9c:58:17:76:
4f:91:72:1f:26:ca:64:1e:75:cd:6b:3a:84:95:83:
06:2b:ac:25:38:34:3e:af:e7:bb:eb:2d:e7:03:be:
4e:21:c6:0c:78:9f:a1:5d:4e:d5:5d:c9:1e:77:11:
02:13:0a:0e:1a:3f:98:65:a2:77:92:db:52:60:95:
b0:f0:c8:e4:1c:72:6c:dc:73:54:4d:22:d1:68:e6:
66:4b:50:8b:96:a7:2c:4c:92:48:42:9c:df:ea:d4:
81:9a:e8:e5:2f:0c:4c:17:58:65:0e:b2:84:bf:d9:
7e:fb:1a:c7:ab:70:a8:a9:5f:6d:52:73:6c:44:88:
cf:79:92:26:0d:34:17:88:5d:e5:c2:21:c0:39:d4:
4d:e6:e6:1a:5d:c8:67:81:92:b6:e9:59:d0:a2:af:
4e:bb:78:2b:90:5c:a8:79:8f:b5:6d:7b:e2:47:3a:
0f:02:ed:42:ea:fd:4a:de:4a:88:9d:0f:13:75:37:
15:c6:65:fe:46:29:b2:71:7c:85:17:66:42:0a:ed:
92:cf:d9:c8:8b:f1:78:8f:e6:df:1d:16:91:e8:7b:
b4:af:c2:2a:c6:97:4b:53:7c:64:91:50:c0:94:35:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:94:C1:22:B7:37:03:0E:B2:9E:A1:51:68:D5:77:ED:42:9D:C7
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:3b:d8:32:1e:ca:30:5a:95:ce:40:1e:be:d7:ab:d9:aa:
60:8a:97:e3:69:03:55:72:e0:81:27:57:eb:8d:06:8d:db:37:
9e:de:de:88:57:d9:54:5e:8e:9c:ff:12:51:a1:5a:31:71:8a:
df:ad:19:3d:fc:33:de:95:ec:5b:e1:b8:a4:57:ed:21:61:a3:
c9:09:11:e1:06:50:93:e0:77:33:69:ec:51:20:21:8e:38:11:
e8:e3:c0:84:67:10:b8:7e:34:cc:e3:cb:78:dd:48:81:5b:e6:
cc:b3:75:1c:8d:ec:eb:ae:48:1d:73:be:bc:b5:e0:a4:17:3e:
1d:6d:5e:d3:68:9b:64:bf:8c:18:fc:67:5c:0a:ac:69:6c:94:
dc:9a:da:cc:dc:dc:74:e4:c5:87:43:0f:2f:ed:cd:8b:63:b5:
a5:8c:85:e0:e3:75:6d:a3:3d:b4:db:85:9d:69:44:d3:0b:65:
42:45:e2:f2:6a:6c:88:4b:8e:c1:da:da:9e:ea:b4:27:e4:2e:
47:9a:ed:03:76:81:97:43:9d:ff:68:cc:02:3d:8e:54:26:67:
c5:e2:83:e7:20:4f:bd:4a:44:db:bd:d3:8b:ca:f8:af:1c:58:
66:47:ba:20:6b:a2:2c:62:5f:eb:f4:6b:c6:3d:80:3f:eb:af:
c2:dd:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:51:47 2025 by rpki-client