Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: KcC4Aa/K8bWO6/YRd0ypVDBjfvXdLeB+WnFIg0rzFHw=
Subject key identifier: C8:A6:3D:C4:6A:BD:7E:C2:1B:F0:E7:A8:85:79:E1:14:85:4A:B9:F0
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 01976885134076451A3B611B2824A9EE0307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 09:00:41 +0000
Manifest this update: Fri 13 Jun 2025 09:00:41 +0000
Manifest next update: Sat 14 Jun 2025 09:00:41 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: Mm5nPh6izqUjMScBaCXFrkZObYU7D4fcb00aMebFz1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:13:40:76:45:1a:3b:61:1b:28:24:a9:ee:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jun 13 09:00:41 2025 GMT
Not After : Jun 14 09:00:41 2025 GMT
Subject: CN=c8a63dc46abd7ec21bf0e7a88579e114854ab9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:aa:7e:33:cf:2a:27:3e:2a:92:61:67:13:
69:1c:d9:e5:36:ec:a4:e7:0d:a1:14:cf:2b:37:52:
ad:63:9f:be:fc:f7:02:e2:71:98:67:a8:84:12:86:
c4:81:8b:99:b4:24:ac:60:7d:b4:ff:5d:13:ae:a9:
99:3c:7e:7b:b9:7b:6a:9e:47:d5:1f:b7:9c:6b:06:
02:af:58:3b:03:6f:9b:44:a9:22:06:a8:e1:47:f3:
63:82:66:66:72:0e:bc:07:76:24:ef:94:d7:b8:b2:
5b:a0:c4:d6:6f:96:39:73:58:bf:5f:02:32:c4:8c:
d0:37:f9:ef:60:5b:05:72:96:a8:ca:f6:c5:11:ec:
14:d2:55:f8:24:3c:3c:e8:15:53:c4:e7:97:9d:4d:
bc:0a:9e:fc:04:49:70:fc:69:dd:f9:4d:47:e4:dc:
00:cd:9b:6f:27:48:89:7b:14:9d:23:df:b1:92:3f:
f3:6c:ef:36:12:76:06:0e:17:d1:6a:3d:db:a9:72:
0d:57:d0:03:e3:4c:d7:f4:0b:e6:1a:96:08:a9:65:
e4:5b:99:3e:b7:85:e8:76:7f:54:9d:40:e2:dc:c7:
30:b9:13:77:ac:c3:5e:d5:45:31:98:c2:da:f4:b9:
11:ae:a6:6b:ae:db:68:50:64:bf:59:35:82:07:7d:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:3D:C4:6A:BD:7E:C2:1B:F0:E7:A8:85:79:E1:14:85:4A:B9:F0
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d5:25:4e:72:47:d7:12:92:cf:0b:d0:d5:c5:5b:8f:24:f7:
10:4d:19:90:93:47:5f:34:51:cf:56:22:dd:11:98:2e:cd:4f:
06:d7:41:bc:55:1a:eb:9f:ab:ea:e0:60:aa:b9:bb:1f:44:c7:
a1:55:ab:49:71:d4:58:47:d1:ad:06:56:e4:56:1b:a6:e8:fa:
d4:5e:a4:79:f3:a3:90:79:8d:d9:3f:e6:fd:03:e4:30:87:f2:
45:64:22:5f:0f:7e:a5:5a:4a:d4:5f:ee:10:51:6b:51:b7:55:
22:63:64:d6:3b:3f:b8:6d:2e:ed:3b:1c:9d:60:6a:d0:47:72:
d2:9f:9e:a5:5c:36:85:9d:fe:0d:fe:6d:8e:9b:01:fd:aa:58:
e8:9e:76:90:7f:71:0e:b3:85:1b:e6:43:3e:c9:50:7f:4a:2d:
bd:11:5f:b2:81:5a:92:ee:03:f6:c4:06:c0:dc:13:13:ef:b1:
4a:41:dc:26:a0:5b:0b:9e:51:b3:7a:b6:36:67:e3:ee:33:c1:
23:05:ea:b7:25:6a:01:1e:06:91:3a:99:2a:28:38:c9:7d:66:
da:83:75:9c:c2:56:9a:f6:f0:4f:65:71:2a:8f:87:04:80:80:
f4:03:12:0e:d9:39:59:0d:c1:5c:d3:76:2f:2b:8d:73:b4:ab:
f7:b4:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:33 2025 by rpki-client