Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: TeKgF1RjvCbFmDIJJCK430S5wv+woQ9NjV8RNQXPkes=
Subject key identifier: 05:01:AE:23:08:D0:1B:86:56:53:EB:12:0F:BE:61:7B:DB:7C:36:88
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019748F9EEA84F551E3B67AE8EC357692E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 153D
Signing time: Sat 07 Jun 2025 06:00:28 +0000
Manifest this update: Sat 07 Jun 2025 06:00:28 +0000
Manifest next update: Sun 08 Jun 2025 06:00:28 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: Bsp1f+20W6OH8mmF7q36++q6zXWZdTtsx4ywWw724lY=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ee:a8:4f:55:1e:3b:67:ae:8e:c3:57:69:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jun 7 06:00:28 2025 GMT
Not After : Jun 8 06:00:28 2025 GMT
Subject: CN=0501ae2308d01b865653eb120fbe617bdb7c3688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:ad:cf:81:b5:21:d7:d6:f8:b9:ab:05:ea:
d9:46:af:1c:35:42:0b:34:39:63:30:f2:6d:d3:e9:
ca:0a:fd:0e:c9:94:7b:38:a1:5c:a4:7c:fe:03:d4:
f3:80:b9:c0:38:b7:bb:6d:91:7a:d3:6b:44:e3:60:
b7:33:49:a4:47:5c:1a:2f:c4:60:54:c2:f8:db:dd:
71:28:eb:e7:fe:c6:11:7f:3d:08:d0:f3:a4:9f:73:
13:b7:f1:df:a0:23:1f:59:bb:d9:86:98:8e:ae:a5:
ae:b8:e8:2d:1b:f4:87:a6:d0:50:bd:cd:7f:58:20:
46:c1:03:69:7b:86:5f:26:74:11:3c:ba:c3:40:c0:
03:02:ab:f3:3c:58:cb:b4:4a:50:19:71:72:86:db:
11:57:97:b4:42:60:06:35:9f:85:79:cf:c7:97:7c:
5d:7b:9c:9b:1f:92:69:29:b5:22:73:1d:35:4d:b5:
8a:2e:41:14:58:19:5f:66:ea:78:fb:6b:0c:ce:27:
8d:f5:88:6f:9d:ac:03:21:fd:79:c8:28:f9:00:ce:
be:9e:2e:ae:82:e7:e0:67:93:bd:82:3d:76:9e:48:
1d:df:d7:9a:b3:c7:aa:8c:7c:75:58:9f:ba:f2:4a:
7f:4b:1d:48:d7:d7:98:2e:46:93:8a:e0:ba:04:18:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:AE:23:08:D0:1B:86:56:53:EB:12:0F:BE:61:7B:DB:7C:36:88
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:95:11:21:6f:39:c0:97:42:e4:c2:e0:94:1d:c3:2e:51:85:
51:a3:e2:95:f3:a9:70:6c:65:29:25:0b:d4:9a:b5:02:bc:86:
35:4e:49:83:59:b3:29:c5:48:d8:f1:fc:a3:ef:bc:7e:69:89:
fb:76:ab:1b:d9:c0:c7:39:c9:1d:11:47:6c:40:b2:11:dd:15:
e7:3f:bd:9b:88:7b:ab:c6:8e:2e:de:ea:2c:86:73:43:5c:06:
93:02:bb:53:6a:9d:5a:1b:08:9a:e5:31:a8:8c:54:cb:f8:86:
cf:bc:fc:7c:83:66:5d:3b:46:e3:8a:25:2f:73:5d:01:71:75:
da:cd:bb:26:80:9f:3a:10:10:de:8d:67:7f:38:fc:a5:b6:b3:
63:42:4d:15:49:18:33:19:87:29:2f:2e:c1:87:b0:1a:f2:d1:
bc:ea:13:34:21:b7:f5:17:c2:7e:55:82:99:a9:4e:1a:bf:39:
2d:19:7c:81:e5:45:aa:3b:bb:2c:5b:d2:fa:6e:1e:30:92:8f:
9d:10:8c:4f:05:5a:0b:a0:b3:b0:f9:06:59:d4:88:60:70:52:
f4:e3:bd:c8:2a:ea:6c:61:d3:74:47:0a:cd:a9:22:bf:a8:f7:
25:b0:9c:22:b3:fd:b7:cd:0e:9d:02:04:aa:70:df:dc:20:b3:
34:1a:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:05 2025 by rpki-client