Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: x60VlSqFmTwkqcbxUIPVo/D3+vrbGUzb4sXb27kkkbM=
Subject key identifier: 42:9E:0B:78:F4:90:C1:EC:D1:33:54:15:31:AE:A1:5F:5F:A7:66:7B
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 019748C301A626316DE00EB8A1D012E40120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:28 +0000
Manifest this update: Sat 07 Jun 2025 05:00:28 +0000
Manifest next update: Sun 08 Jun 2025 05:00:28 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: tvpM43PRDhZpK7zejtshfckAtLNInp/iJUxRRTfWpro=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:01:a6:26:31:6d:e0:0e:b8:a1:d0:12:e4:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Jun 7 05:00:28 2025 GMT
Not After : Jun 8 05:00:28 2025 GMT
Subject: CN=429e0b78f490c1ecd133541531aea15f5fa7667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:8d:04:a0:c0:a1:b4:82:ce:38:85:02:be:
45:f6:89:dd:35:da:a8:61:d0:6d:60:05:96:a3:cf:
7c:94:07:d0:2f:d8:5c:c8:6a:57:9b:9c:b4:73:25:
c1:95:83:0b:70:2d:47:a5:41:3f:c6:c0:0d:73:1c:
8c:7d:87:9c:3b:ae:93:59:a3:41:5c:0e:e4:f2:0d:
90:d2:da:05:0e:7a:bd:9f:87:3c:b0:cf:ec:d0:cd:
d5:2d:10:27:23:5d:35:97:3b:b6:32:cd:8c:98:c8:
52:f3:c1:be:cd:0b:50:6b:b8:4c:62:16:0a:66:d6:
d1:47:57:6e:92:8d:8b:9e:da:46:89:d2:cb:77:da:
8a:b9:53:f9:78:b9:81:7a:ae:bd:33:e7:5c:b1:f9:
86:26:df:b0:77:fd:96:08:f0:f5:42:f0:6b:c7:5c:
f3:a1:5e:5d:00:89:66:d4:c0:56:3a:75:14:d9:98:
f0:fe:4a:30:09:5b:72:21:d3:f3:e5:bd:e0:e5:65:
e4:73:98:37:1b:ab:91:88:41:a1:70:5c:cb:1f:3c:
f3:61:bc:8c:96:73:87:8f:0b:37:16:51:99:da:ae:
a0:5e:c0:22:01:3f:fe:cb:ad:f2:e7:de:99:87:10:
62:48:69:4e:e0:c8:9b:28:94:58:d6:80:2f:1f:1f:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:0B:78:F4:90:C1:EC:D1:33:54:15:31:AE:A1:5F:5F:A7:66:7B
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:c0:35:1e:d5:5a:49:95:d6:21:20:ab:e5:fe:ce:2f:68:
3d:45:31:7c:c4:25:9b:26:55:45:1a:9e:17:2f:7b:91:2c:9a:
f6:da:66:8a:df:f7:d3:0b:e0:05:3e:56:f4:1c:bf:b7:9e:eb:
9a:b7:7f:06:74:38:6e:56:ae:60:fb:50:18:1b:35:fa:78:af:
bb:11:62:86:63:6c:c7:1c:b7:02:b2:de:f7:17:1f:f3:68:3e:
3d:0b:e1:84:86:f9:55:80:c2:cc:31:7b:ff:3f:b6:fe:3b:fd:
12:72:d1:59:62:1a:28:74:c3:59:93:8a:06:2e:c1:4d:45:61:
fc:03:0a:15:eb:a5:34:48:64:23:6e:87:45:b5:9c:80:25:dd:
f6:c0:ec:9f:16:53:8f:12:67:76:7f:67:6b:15:dc:2c:cc:d1:
80:cf:dd:cc:d5:e9:78:24:45:7d:76:cd:3a:80:79:f0:c5:4f:
3b:dd:4c:21:21:af:a3:c5:4d:53:48:7d:29:ea:04:12:7f:f8:
f0:d4:99:a3:0d:e7:1c:41:20:62:ac:a8:4f:bf:02:e7:7c:02:
37:ba:69:3d:de:04:50:a4:6e:08:78:5c:a7:a4:f4:ff:a6:56:
ca:f8:af:a4:99:68:49:0e:21:9a:7e:57:10:5d:60:97:2c:29:
d6:0b:ca:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwwGmJjFt4A64odAS5AEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm
M2RhNGEwHhcNMjUwNjA3MDUwMDI4WhcNMjUwNjA4MDUwMDI4WjAzMTEwLwYDVQQD
Eyg0MjllMGI3OGY0OTBjMWVjZDEzMzU0MTUzMWFlYTE1ZjVmYTc2NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnyNBKDAobSCzjiFAr5F9ondNdqo
YdBtYAWWo898lAfQL9hcyGpXm5y0cyXBlYMLcC1HpUE/xsANcxyMfYecO66TWaNB
XA7k8g2Q0toFDnq9n4c8sM/s0M3VLRAnI101lzu2Ms2MmMhS88G+zQtQa7hMYhYK
ZtbRR1duko2LntpGidLLd9qKuVP5eLmBeq69M+dcsfmGJt+wd/2WCPD1QvBrx1zz
oV5dAIlm1MBWOnUU2Zjw/kowCVtyIdPz5b3g5WXkc5g3G6uRiEGhcFzLHzzzYbyM
lnOHjws3FlGZ2q6gXsAiAT/+y63y596ZhxBiSGlO4MibKJRY1oAvHx+eOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKeC3j0kMHs0TNUFTGuoV9fp2Z7MB8GA1UdIwQY
MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt
OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1
LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTbANR7V
WkmV1iEgq+X+zi9oPUUxfMQlmyZVRRqeFy97kSya9tpmit/30wvgBT5W9By/t57r
mrd/BnQ4blauYPtQGBs1+nivuxFihmNsxxy3ArLe9xcf82g+PQvhhIb5VYDCzDF7
/z+2/jv9EnLRWWIaKHTDWZOKBi7BTUVh/AMKFeulNEhkI26HRbWcgCXd9sDsnxZT
jxJndn9naxXcLMzRgM/dzNXpeCRFfXbNOoB58MVPO91MISGvo8VNU0h9KeoEEn/4
8NSZow3nHEEgYqyoT78C53wCN7ppPd4EUKRuCHhcp6T0/6ZWyvivpJloSQ4hmn5X
EF1glywp1gvKVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:41 2025 by rpki-client