Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: hvIbEU97KQ2ULs86BNIEV1iLyhB0hflBiu3MAN/DpWg=
Subject key identifier: 75:6B:23:81:BA:41:B3:B5:F5:6A:EA:A6:0B:41:56:D0:29:68:FB:FB
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 01987AC049D57987BC299FA4D23F29A3CF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 15:01:18 +0000
Manifest this update: Tue 05 Aug 2025 15:01:18 +0000
Manifest next update: Wed 06 Aug 2025 15:01:18 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: RCmRMfFEVkJBhSaQieset4eGStaCzrD4UiLfgApLHgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:49:d5:79:87:bc:29:9f:a4:d2:3f:29:a3:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Aug 5 15:01:18 2025 GMT
Not After : Aug 6 15:01:18 2025 GMT
Subject: CN=756b2381ba41b3b5f56aeaa60b4156d02968fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:c4:01:21:f1:91:2d:78:9e:e9:58:76:bc:
13:f2:02:d7:45:05:ba:11:46:bd:31:68:d9:15:4e:
22:68:49:fa:46:20:c9:43:3e:02:a3:b6:15:be:61:
3d:3c:9a:03:3f:43:db:6c:ef:a6:63:de:05:8e:61:
67:cc:c7:f9:4e:ea:3a:3e:cb:b5:01:02:8c:39:02:
b1:b6:ab:b1:d5:7a:13:21:0f:87:79:b1:aa:10:ab:
08:6c:ff:29:78:19:ce:d2:f7:5e:05:81:c5:d9:65:
bf:56:1f:0e:3c:87:72:29:5d:58:db:8f:fd:e6:3d:
a9:3a:f7:5a:1d:4d:cc:c5:f0:e1:60:93:ed:d4:1b:
67:3f:12:bb:fb:ae:b4:96:36:e1:36:2a:b7:57:11:
97:8f:5c:c1:24:97:1b:44:55:a5:e8:45:73:82:f3:
67:7f:2a:9f:ef:a1:b4:ed:79:64:81:d5:b2:e4:16:
a9:0e:b8:7c:56:5c:bd:9d:10:d5:06:5c:63:a3:23:
9c:92:a0:18:cb:19:28:1e:2f:02:40:b0:41:73:14:
a3:47:c0:6c:f1:ae:4a:3d:61:c5:83:46:5c:f1:a9:
2d:33:6c:a2:23:61:c1:16:b2:fd:29:49:48:fc:3c:
1a:c2:5c:66:d3:11:59:e2:7d:d9:58:cc:0f:42:0f:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:23:81:BA:41:B3:B5:F5:6A:EA:A6:0B:41:56:D0:29:68:FB:FB
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:99:12:70:b9:2a:b0:ea:d4:9b:40:d3:f0:94:be:b0:a7:
26:dc:b1:04:5a:24:3d:91:96:b1:dd:4f:ca:de:f2:39:43:d0:
e0:48:47:b5:95:1e:af:c1:a8:e8:d8:1a:0b:b6:ac:af:cb:85:
d0:59:be:6c:cd:0b:38:32:ac:df:80:35:66:b2:b7:fa:7f:1e:
6a:e4:1b:8a:a3:0f:05:3a:a5:c0:6f:50:b6:60:49:5f:1f:cf:
ac:6f:d1:13:e1:68:d5:04:93:70:67:07:52:ac:ea:a6:9b:76:
27:80:46:cc:67:88:28:fb:16:bc:1a:d3:7a:0d:74:3a:48:35:
e1:78:e5:e7:8b:89:e9:2f:dd:69:19:33:a1:04:d7:57:d6:cf:
a1:9d:57:53:0c:ce:8d:3a:8e:22:a1:0b:41:d1:3c:3d:ac:c5:
c9:31:04:30:54:aa:fe:c7:5f:42:76:b8:85:b8:3f:e3:36:4d:
5d:48:f6:c2:89:ca:4c:c0:36:20:dc:f4:84:b2:da:6c:f3:95:
8b:41:14:4e:5f:76:b5:d5:21:8d:db:cf:f5:fa:63:f9:20:36:
3e:d1:99:86:b5:8e:f3:b8:fa:86:07:2f:37:55:10:2f:f2:d1:
41:a4:0f:aa:0c:ef:dd:b8:05:83:89:1c:4e:80:ad:1f:82:c7:
13:a3:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:55 2025 by rpki-client