Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: UEfdTTjkJfqincYO7t9ox5LpFWUWhNq23tjojsMcdpg=
Subject key identifier: 24:2C:F5:FE:81:84:EF:78:C0:4C:1D:4A:4A:98:D4:B4:B7:6A:6F:0C
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 0196771EA1852CC585C5FE9335B664DDD81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 12:00:18 +0000
Manifest this update: Sun 27 Apr 2025 12:00:18 +0000
Manifest next update: Mon 28 Apr 2025 12:00:18 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: 252RI3Os6p9NQfvJfz6mOR0LgeJr0ZXROkjBDHxJVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:a1:85:2c:c5:85:c5:fe:93:35:b6:64:dd:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Apr 27 12:00:18 2025 GMT
Not After : Apr 28 12:00:18 2025 GMT
Subject: CN=242cf5fe8184ef78c04c1d4a4a98d4b4b76a6f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:68:78:e8:79:25:9b:75:a9:43:85:35:43:
4c:55:4f:6a:bd:05:60:ca:39:49:2c:78:00:9f:56:
5c:cb:7e:d4:3d:94:67:25:93:3f:54:8b:5c:a7:a3:
7f:c1:52:f3:2f:f0:ff:91:04:33:d4:f9:6d:d1:99:
d3:ea:e3:c5:bc:f2:ed:cc:02:62:a3:25:08:d0:1f:
d2:1a:86:0c:29:69:9c:af:6f:bd:14:a1:41:d6:74:
a1:05:e7:de:09:2f:a3:b9:41:c7:69:d3:b5:94:66:
91:65:0e:8b:1f:fb:71:bc:1f:c2:21:42:d0:2a:5f:
09:9c:c5:a4:ad:a9:0a:fc:77:61:6e:b4:03:24:13:
c9:92:6b:e6:5a:93:f2:ab:a0:12:c7:4f:61:1b:c5:
ae:b1:bf:dd:de:7f:37:80:cb:a6:53:5b:a6:9a:eb:
aa:f4:b2:82:18:e0:7f:40:24:8d:6c:ac:81:12:ae:
f3:f2:d3:b6:4f:c5:b1:46:f2:02:10:45:b1:a0:c3:
6a:f1:1c:f4:37:f7:34:32:b0:1c:c7:6d:7e:91:4d:
87:59:c5:71:b8:f9:82:37:22:4d:37:8e:be:e6:ef:
13:86:02:db:01:ab:7f:ee:fa:6d:9f:73:81:7e:5a:
bb:94:86:df:38:fb:47:18:d5:99:99:5e:0d:5f:b8:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:F5:FE:81:84:EF:78:C0:4C:1D:4A:4A:98:D4:B4:B7:6A:6F:0C
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:d4:76:6a:c0:df:38:04:ce:d7:fb:5a:8b:20:30:67:6a:
b5:ce:bf:d8:b0:12:ac:dd:2e:5e:a4:94:79:a0:43:17:9b:49:
58:a5:d8:1e:bf:90:cd:58:8d:a8:1b:82:33:79:51:8a:9a:64:
f3:18:ec:ac:46:36:50:57:73:56:d3:22:69:52:56:e1:c6:00:
c5:3b:cc:ff:26:8a:a3:da:1f:0e:45:b4:f5:99:be:2d:55:9a:
03:84:5e:35:85:4d:1f:ec:4b:3a:38:cc:ec:d1:f3:0b:7e:e9:
1e:69:ba:06:9b:21:46:ce:ac:51:33:d0:51:87:4c:ab:5e:34:
ad:d8:ac:37:3e:80:0e:0d:44:ab:34:e5:0e:34:9e:cd:24:7c:
9f:7c:33:6c:45:53:60:5b:d4:a1:3e:79:3d:cc:05:80:46:56:
80:f4:34:ea:bb:bb:46:fc:5a:3d:4a:0e:49:4e:27:dd:e3:35:
a5:a8:4e:ca:0d:e2:be:1b:05:b5:d2:c7:b3:81:e6:fc:86:e2:
4e:54:ea:9e:08:fb:43:51:a9:39:7d:2d:5a:e2:de:d6:ed:09:
9a:e1:cc:06:a9:1e:e1:53:39:58:c8:b3:4d:36:58:6a:0f:e8:
0e:d8:af:f4:64:b0:1b:57:29:c2:a2:c2:c4:da:6c:3b:73:85:
23:00:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:54:40 2025 by rpki-client