Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: v/OBtfUiIuPb4PfDzZKmG3W5GBjxOagweZNk+lcc0+Q=
Subject key identifier: F2:90:87:1A:0A:D0:F4:E4:F0:C4:0D:4C:F5:09:7E:6D:B3:5D:3C:F0
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 0197703EC2977A359C3ADCC3AF64C5FFB55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 21:00:50 +0000
Manifest this update: Sat 14 Jun 2025 21:00:50 +0000
Manifest next update: Sun 15 Jun 2025 21:00:50 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: VCzlC5qDjfsA9k6J2jP7SdV1C4J7/6vfUQOU8z0ifNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:c2:97:7a:35:9c:3a:dc:c3:af:64:c5:ff:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Jun 14 21:00:50 2025 GMT
Not After : Jun 15 21:00:50 2025 GMT
Subject: CN=f290871a0ad0f4e4f0c40d4cf5097e6db35d3cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:90:1b:b8:2c:25:f0:be:86:1c:03:c1:92:51:
59:81:cb:06:1b:fb:1a:45:7a:08:22:f9:23:be:4b:
a9:03:70:11:b0:fd:4e:29:c9:45:dc:76:88:87:9e:
98:12:de:2d:1d:af:f2:24:23:42:cc:24:07:ae:eb:
08:70:25:64:4a:55:79:fc:8a:86:01:8a:03:a6:ed:
49:d1:3c:12:d8:35:55:f0:59:c5:99:fd:ea:4b:a3:
96:76:82:24:89:39:ad:2f:8e:9b:b6:4a:80:d6:83:
12:a1:1c:0e:11:c5:28:4d:82:a2:54:5d:86:fd:df:
c0:22:8a:c3:c5:83:74:8b:98:14:2a:ec:ce:50:1d:
13:f2:89:a7:01:0f:53:eb:92:e3:6c:f0:51:e9:c6:
1f:ea:f8:f5:b7:68:71:2b:2e:9b:87:01:ef:a2:24:
a0:75:2e:9e:8b:d8:9f:32:19:77:2d:71:ad:36:e2:
f7:fe:e7:df:6e:18:3e:51:70:be:a1:62:9c:10:42:
3d:a9:c4:a6:21:be:05:92:a9:70:45:43:cc:93:46:
47:24:eb:64:2d:be:61:bb:0e:3e:7c:8c:a4:5d:7a:
bd:4c:ab:83:52:36:36:4c:e3:d6:08:3d:2e:fd:73:
c7:c9:3d:df:b9:9d:88:a4:48:cd:e8:c3:5e:6f:83:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:87:1A:0A:D0:F4:E4:F0:C4:0D:4C:F5:09:7E:6D:B3:5D:3C:F0
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:49:f6:23:26:1a:57:1e:40:2c:8f:48:df:04:3c:38:46:
ad:b1:1d:3a:ab:f4:4f:26:f9:69:21:69:f2:1f:98:95:4b:3b:
66:36:14:1a:93:dd:85:8f:82:77:64:4f:13:41:9f:b9:43:c6:
98:19:bd:48:4d:f2:3f:36:ec:0d:18:a9:dc:13:1f:40:16:82:
c1:76:7f:46:9b:0b:b9:df:0c:47:ac:34:d6:83:86:6e:e7:b6:
e3:72:a0:83:b8:59:50:cd:42:ff:ec:25:35:70:dd:26:75:f4:
91:30:56:b2:69:de:34:b9:37:17:a9:2e:09:c9:1c:ee:7d:9e:
68:d8:f5:11:62:b6:6b:ac:98:9f:f2:30:5b:36:b1:13:26:19:
b6:22:e4:d4:19:c6:88:09:dd:65:1b:82:2f:ab:67:68:38:f2:
2c:b5:82:e2:1b:ab:c4:a9:94:f5:fa:2b:6f:5d:2e:7f:00:b3:
18:b2:d0:f8:47:9d:1e:af:0d:94:c1:2b:47:8d:fe:68:68:a9:
df:1e:80:ce:f8:45:b9:2d:43:51:7f:8d:f6:36:a5:66:f4:82:
19:09:3f:4a:1f:29:cd:7f:95:c1:9d:e6:2f:0a:58:e0:98:c1:
bc:99:7d:bf:55:33:53:9f:fe:be:04:79:13:8e:7d:94:f5:92:
a4:93:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:25:15 2025 by rpki-client