Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: 9iHrVRKxAK8bhSnFgd3+Pzk/reX6BsKxmQ+Na3EPJX0=
Subject key identifier: 6E:56:68:74:59:A1:C4:5C:D4:6E:E8:D9:F4:27:32:B9:7B:57:5F:AE
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 01988844A92A9006BF5B65D9957A9CCC8079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 06:00:57 +0000
Manifest this update: Fri 08 Aug 2025 06:00:57 +0000
Manifest next update: Sat 09 Aug 2025 06:00:57 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: OSsxkR0A1x0yeVE9pG2VO9liM23LRXKNRTSmHDSpIy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:a9:2a:90:06:bf:5b:65:d9:95:7a:9c:cc:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Aug 8 06:00:57 2025 GMT
Not After : Aug 9 06:00:57 2025 GMT
Subject: CN=6e56687459a1c45cd46ee8d9f42732b97b575fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:4a:50:d2:40:df:60:eb:ec:79:33:0c:2e:
1c:0f:de:16:51:c5:09:04:fc:8e:d8:d5:18:6a:89:
0e:2e:dd:e1:9c:29:05:52:6b:75:06:52:e9:f5:2b:
bf:47:64:f7:0c:fb:da:d5:dd:61:fc:b6:e9:99:15:
6a:e0:d2:9b:8e:ed:74:9d:c5:0b:6d:be:95:84:07:
b2:ce:d5:00:08:3d:5d:93:3f:08:86:94:44:97:83:
f3:e5:cd:d2:b5:a4:59:de:56:47:d1:4d:79:fd:93:
76:ba:0c:c1:b9:55:60:8a:07:4f:fb:56:37:ab:cc:
28:02:f7:b6:c9:ed:fe:90:4f:e7:90:57:a4:79:cf:
26:cf:0e:0e:95:62:26:6b:c6:09:29:8b:a1:0b:25:
7c:4d:fb:c8:9d:1c:5e:b2:9d:48:29:d7:ed:c9:27:
ee:77:59:0f:f1:e2:01:28:2a:1b:42:b7:51:5f:f4:
56:ef:a7:7d:87:39:09:a9:2f:80:2f:eb:2f:4e:be:
2c:62:4e:50:a7:ec:d0:ec:4a:97:10:ae:1e:96:5d:
dd:e7:d7:6f:f7:60:91:08:0c:7f:a1:74:0e:b0:b1:
40:42:6e:65:c5:8a:e9:37:57:01:08:8c:d3:65:7d:
2b:ac:c6:51:1c:e5:2b:bc:96:05:25:54:4b:59:57:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:68:74:59:A1:C4:5C:D4:6E:E8:D9:F4:27:32:B9:7B:57:5F:AE
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:2a:01:4b:97:f6:a6:10:f7:7e:35:18:59:17:f0:9a:30:
96:45:b6:5d:ab:97:84:9d:a8:ae:2e:36:db:33:ec:57:7c:8a:
09:bf:34:0d:b1:9a:b3:ec:4e:b7:c9:d5:ee:b5:21:ce:af:cd:
df:ef:e1:c5:1f:03:78:f6:e4:b5:f4:d4:f8:92:8f:df:79:a7:
63:79:10:33:5a:fa:1a:81:f6:3e:b4:58:b3:a1:1f:33:7b:57:
7d:cb:5a:fb:64:32:ef:e2:6e:16:e8:a4:03:a5:1d:fb:a6:d3:
37:d6:62:7a:c6:73:aa:7a:64:b4:7c:26:8a:1a:9b:0c:c0:c2:
52:69:a7:f8:6d:96:b1:23:c2:c8:da:26:06:e7:2c:64:e9:3e:
a6:c7:bb:bb:ab:a2:93:d8:c5:35:d9:8e:8f:50:49:19:e2:ca:
0b:18:58:11:d8:fb:fc:b4:10:46:ef:fa:31:07:f1:c2:1e:03:
b5:95:2d:58:51:a3:99:82:8e:40:ea:2f:0f:59:82:97:db:83:
92:61:38:da:65:cf:cc:ef:ab:b1:b6:33:9a:eb:8b:ac:f6:f5:
51:1c:5f:c7:23:3e:86:ab:54:44:27:07:dc:8b:dd:ee:34:66:
8a:02:4d:64:a3:c5:32:38:13:a7:68:e2:a0:f7:97:43:8f:c3:
b0:98:a3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIRKkqkAa/W2XZlXqczIB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz
Yjk0NDIwHhcNMjUwODA4MDYwMDU3WhcNMjUwODA5MDYwMDU3WjAzMTEwLwYDVQQD
Eyg2ZTU2Njg3NDU5YTFjNDVjZDQ2ZWU4ZDlmNDI3MzJiOTdiNTc1ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/tKUNJA32Dr7HkzDC4cD94WUcUJ
BPyO2NUYaokOLt3hnCkFUmt1BlLp9Su/R2T3DPva1d1h/LbpmRVq4NKbju10ncUL
bb6VhAeyztUACD1dkz8IhpREl4Pz5c3StaRZ3lZH0U15/ZN2ugzBuVVgigdP+1Y3
q8woAve2ye3+kE/nkFekec8mzw4OlWIma8YJKYuhCyV8TfvInRxesp1IKdftySfu
d1kP8eIBKCobQrdRX/RW76d9hzkJqS+AL+svTr4sYk5Qp+zQ7EqXEK4ell3d59dv
92CRCAx/oXQOsLFAQm5lxYrpN1cBCIzTZX0rrMZRHOUrvJYFJVRLWVfGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5WaHRZocRc1G7o2fQnMrl7V1+uMB8GA1UdIwQY
MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt
ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2
LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2UqAUuX
9qYQ9341GFkX8JowlkW2XauXhJ2ori422zPsV3yKCb80DbGas+xOt8nV7rUhzq/N
3+/hxR8DePbktfTU+JKP33mnY3kQM1r6GoH2PrRYs6EfM3tXfcta+2Qy7+JuFuik
A6Ud+6bTN9ZiesZzqnpktHwmihqbDMDCUmmn+G2WsSPCyNomBucsZOk+pse7u6ui
k9jFNdmOj1BJGeLKCxhYEdj7/LQQRu/6MQfxwh4DtZUtWFGjmYKOQOovD1mCl9uD
kmE42mXPzO+rsbYzmuuLrPb1URxfxyM+hqtURCcH3Ivd7jRmigJNZKPFMjgTp2ji
oPeXQ4/DsJijog==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:33 2025 by rpki-client