Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: Ez/JfhgCDAfwdmZYCefk/t81Xsy7iT2jfZx2TsJo80A=
Subject key identifier: BF:0D:08:5E:6A:52:58:F6:FC:20:11:2F:FD:C8:05:EE:5C:6A:77:9B
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 019921E74A74FF1EC3562629E418D1E04D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: ReBu1TVrnv5Vngs8Hd7/WuKHvxaPMYKKajeG7SD6FSw=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4a:74:ff:1e:c3:56:26:29:e4:18:d1:e0:4d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=bf0d085e6a5258f6fc20112ffdc805ee5c6a779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:88:78:2e:d7:0e:a8:f9:b6:3e:81:85:56:
00:41:97:38:7f:1e:d0:0c:e2:bd:26:63:43:17:d1:
fc:dd:0b:5f:6d:86:61:e8:a4:86:70:be:87:28:7a:
df:ee:84:ca:83:93:ae:ca:04:fe:6e:d8:dc:43:dc:
5a:6f:d7:9d:a5:f1:9a:7f:ff:b8:61:ae:44:ac:24:
1c:bd:f0:52:0b:52:2f:b9:21:98:22:33:f3:32:ee:
8a:36:9c:d7:9c:6f:3a:8a:a7:d8:2f:c7:fd:fe:9c:
f5:b9:9d:52:ba:b1:e3:49:3b:58:51:ac:35:9e:99:
c4:93:ed:3d:2d:b1:9b:f9:21:6c:5a:28:60:5f:26:
61:88:cb:97:b0:0a:d4:cb:38:28:89:a8:36:37:a7:
1b:b5:8f:df:15:cf:d8:a6:e4:b7:da:31:a1:6a:51:
22:5e:b4:aa:b7:27:64:de:42:03:be:ef:b6:60:ae:
03:96:e1:3a:f5:43:cc:a5:81:4a:0e:e5:bc:69:6a:
ed:53:91:50:fa:d5:28:d8:d6:ca:df:ee:85:c8:cb:
2a:de:46:27:fd:a6:ab:de:0d:2d:1b:48:de:11:51:
b3:56:b3:f2:52:6d:18:6a:74:c8:25:ad:48:3e:fe:
9d:b5:ce:9a:a2:48:82:46:ba:7f:09:0e:b0:e4:88:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:08:5E:6A:52:58:F6:FC:20:11:2F:FD:C8:05:EE:5C:6A:77:9B
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:27:07:aa:d0:4a:44:3a:8b:fd:f4:48:86:ec:be:61:fa:
16:ce:5a:b4:dc:4c:56:3f:ed:49:6a:33:87:2e:91:28:51:c6:
fd:86:ac:89:d3:df:16:7a:de:9c:53:6b:cf:09:1e:9e:b0:5c:
5d:7f:54:00:f7:78:e9:63:57:19:e8:c1:a6:23:8f:56:f3:93:
35:6a:a3:25:f3:db:20:e2:5e:18:85:aa:c8:1c:f0:c6:57:44:
6b:44:5a:91:1f:6f:1d:e1:54:d8:42:f5:7d:18:7c:c2:7d:d2:
ab:47:1c:08:21:19:79:d7:44:50:8a:eb:8d:09:f9:09:42:1b:
e1:9b:91:1e:72:2c:9f:84:71:e4:56:fa:b6:9f:8f:3b:e4:61:
89:0d:31:42:24:9d:58:f4:b4:53:a1:3d:5b:13:55:25:c0:b1:
22:89:2b:99:4d:fe:63:7d:d5:e3:49:ec:c4:60:e4:84:0a:df:
55:ac:95:9a:4b:c3:03:e8:8d:2b:cd:51:cd:d5:5b:25:4e:3f:
b6:56:9d:b8:70:39:93:cc:d1:a8:af:26:7f:bc:48:2d:51:7e:
12:f7:8d:be:20:43:a7:19:27:0f:f2:a5:8a:63:23:3f:18:15:
52:b6:db:b9:75:be:4e:f5:f9:06:81:54:f0:0a:4a:a7:fb:4d:
86:6b:af:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh50p0/x7DViYp5BjR4E03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm
M2RhNGEwHhcNMjUwOTA3MDIwMDI5WhcNMjUwOTA4MDIwMDI5WjAzMTEwLwYDVQQD
EyhiZjBkMDg1ZTZhNTI1OGY2ZmMyMDExMmZmZGM4MDVlZTVjNmE3NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlyIeC7XDqj5tj6BhVYAQZc4fx7Q
DOK9JmNDF9H83QtfbYZh6KSGcL6HKHrf7oTKg5OuygT+btjcQ9xab9edpfGaf/+4
Ya5ErCQcvfBSC1IvuSGYIjPzMu6KNpzXnG86iqfYL8f9/pz1uZ1SurHjSTtYUaw1
npnEk+09LbGb+SFsWihgXyZhiMuXsArUyzgoiag2N6cbtY/fFc/YpuS32jGhalEi
XrSqtydk3kIDvu+2YK4DluE69UPMpYFKDuW8aWrtU5FQ+tUo2NbK3+6FyMsq3kYn
/aar3g0tG0jeEVGzVrPyUm0YanTIJa1IPv6dtc6aokiCRrp/CQ6w5IgfYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8NCF5qUlj2/CARL/3IBe5canebMB8GA1UdIwQY
MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt
OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1
LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKesnB6rQ
SkQ6i/30SIbsvmH6Fs5atNxMVj/tSWozhy6RKFHG/YasidPfFnrenFNrzwkenrBc
XX9UAPd46WNXGejBpiOPVvOTNWqjJfPbIOJeGIWqyBzwxldEa0RakR9vHeFU2EL1
fRh8wn3Sq0ccCCEZeddEUIrrjQn5CUIb4ZuRHnIsn4Rx5Fb6tp+PO+RhiQ0xQiSd
WPS0U6E9WxNVJcCxIokrmU3+Y33V40nsxGDkhArfVayVmkvDA+iNK81RzdVbJU4/
tladuHA5k8zRqK8mf7xILVF+EveNviBDpxknD/KlimMjPxgVUrbbuXW+TvX5BoFU
8ApKp/tNhmuv7g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:08 2025 by rpki-client