Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: BwgZWvLsG9tDpG/EHrp/uzAeSp4fefFNKJNemlcLxuo=
Subject key identifier: 58:38:71:E1:7B:75:B4:77:11:9A:FC:99:20:A4:DA:47:08:12:35:AB
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0197635F222D91426E96E1FAB11F4FB1C9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0489
Signing time: Thu 12 Jun 2025 09:01:08 +0000
Manifest this update: Thu 12 Jun 2025 09:01:08 +0000
Manifest next update: Fri 13 Jun 2025 09:01:08 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: +VNdKsAWVirJwZAKRddXLJFXtVxosfaqLtTGasg0o+o=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:22:2d:91:42:6e:96:e1:fa:b1:1f:4f:b1:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jun 12 09:01:08 2025 GMT
Not After : Jun 13 09:01:08 2025 GMT
Subject: CN=583871e17b75b477119afc9920a4da47081235ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:22:f2:be:07:ac:33:d8:cf:71:49:5a:d7:
ac:c3:23:1e:ef:48:32:b3:93:ac:68:93:a5:13:8d:
e8:b4:b7:71:a6:0e:22:3c:56:e4:78:0f:ab:ae:81:
99:8b:ac:dd:eb:59:59:61:d0:de:6f:0a:03:cc:94:
d6:04:a3:46:0a:f6:28:85:3e:4d:a1:30:74:8a:f0:
4f:09:7b:d5:00:5a:05:a5:46:78:48:0e:69:10:fc:
5e:d6:91:af:fe:89:a2:c1:68:a0:c2:15:ec:62:8e:
03:cd:4e:02:48:d2:54:67:7e:af:d9:93:9e:dd:6f:
4a:c8:5b:d0:bb:8b:02:af:09:82:74:0a:9f:c9:03:
27:e6:c9:fc:06:81:98:ec:1c:7e:a7:b1:a7:b2:ba:
c3:8f:ab:c0:45:2e:cf:3e:4e:3d:f2:31:4f:a3:e6:
04:2f:3d:a6:9f:23:0c:8b:86:50:e1:8b:57:b2:fa:
ad:f9:cb:b2:c0:a9:94:ae:86:4c:d0:26:dc:bc:ea:
28:2b:44:46:29:24:27:f0:25:67:89:fa:1d:f7:2a:
93:83:32:7d:ed:50:2d:7b:ce:8a:ee:9a:d2:9e:cb:
89:79:e1:54:4e:69:91:86:71:db:91:af:b4:6d:38:
ea:9f:8b:c5:10:40:81:3e:02:73:10:6e:29:f1:26:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:71:E1:7B:75:B4:77:11:9A:FC:99:20:A4:DA:47:08:12:35:AB
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:02:20:21:5b:3f:f5:12:af:2b:99:ba:ac:e3:9f:26:fe:d5:
24:d9:bd:18:68:61:c1:fd:31:c2:1b:75:ca:47:bc:d4:24:32:
fe:b2:61:3f:db:5c:b2:75:4c:98:ca:1f:ea:26:7c:2c:b1:13:
89:1a:ad:30:b2:01:45:07:c2:dd:ba:75:af:6f:16:67:f4:7b:
70:e6:a6:37:35:9f:ca:09:48:ae:78:46:fb:f2:3d:4b:39:e6:
34:1c:67:53:bf:90:77:ea:3c:ee:68:a4:a7:7b:c7:f5:82:2c:
12:45:3d:cf:a0:8d:71:b6:d8:31:d3:16:a9:bc:8a:24:a1:1e:
8f:b3:00:95:d8:a0:46:c6:c1:a4:5a:04:3a:0d:36:9e:72:d7:
29:98:c2:05:b1:2d:48:3c:0d:a6:cd:3e:9f:c3:ca:99:6d:5d:
6e:15:30:21:a1:72:71:2f:3a:28:d6:15:71:d2:83:ed:df:5a:
55:dd:dc:0a:0c:88:58:19:5d:a1:4a:6e:a0:92:21:11:08:13:
05:35:a1:9c:16:84:1f:d7:61:34:de:9f:09:f1:87:5c:20:40:
38:fd:21:2a:fd:e0:3c:a3:4d:da:1f:c6:eb:fd:87:c7:c6:35:
36:62:c6:3b:ff:65:b8:84:d3:54:be:15:7d:75:da:66:60:ec:
4d:c8:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:38:56 2025 by rpki-client