Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: cpREtVXQCPh/3DUCaij0FYBGB4A3jr+mGUY0yKK7A8w=
Subject key identifier: 40:18:47:F1:24:7E:D6:9E:B5:90:1F:49:C4:43:7B:65:94:49:E8:64
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01984D430FB7A068B3B9B3F39A405F75B938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 19:01:37 +0000
Manifest this update: Sun 27 Jul 2025 19:01:37 +0000
Manifest next update: Mon 28 Jul 2025 19:01:37 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: OzzISv3YZy8r5l4sg6rX4UgwjK25szw4DcGp/kmrQto=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:43:0f:b7:a0:68:b3:b9:b3:f3:9a:40:5f:75:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jul 27 19:01:37 2025 GMT
Not After : Jul 28 19:01:37 2025 GMT
Subject: CN=401847f1247ed69eb5901f49c4437b659449e864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:58:c2:34:f3:8e:ec:f8:a6:67:cb:c3:ba:
64:94:78:23:ab:8a:4e:12:58:cc:0c:5d:2d:24:b3:
38:42:6b:54:f3:ff:27:b6:4c:83:46:70:e6:19:57:
6a:0c:ea:00:7a:82:58:bc:83:89:5c:cf:84:b9:7b:
a1:80:c6:e6:77:87:3b:6a:9b:a6:79:6d:21:41:97:
d2:23:a0:af:db:37:b5:56:5d:13:c9:31:7f:e3:fa:
b6:a8:c2:28:c2:0d:89:c5:2f:ee:fc:92:05:84:81:
fe:d1:9f:19:b1:b4:9e:fa:15:9f:65:eb:80:c0:cb:
c8:9a:68:f6:22:5e:66:74:cc:89:71:50:0a:77:56:
e7:0d:1d:ce:cb:f0:15:ba:5d:e7:d0:f0:e7:2b:7c:
93:2e:7c:4c:5a:76:bd:66:c3:dc:4c:ec:03:d5:7b:
ab:18:aa:b4:37:94:d1:80:07:85:bf:a2:fa:d8:f2:
fa:b1:e8:0c:8e:4e:32:1b:e5:5a:7a:f5:52:ac:72:
30:df:a5:f4:00:58:41:ec:cb:60:79:e4:ef:c6:c4:
ee:e8:a1:50:04:7a:0a:3c:23:75:9a:fd:f4:b6:df:
4a:60:9e:ed:a8:63:ec:f5:6a:22:f2:c5:f5:7c:f6:
13:80:5f:63:6b:56:54:68:ce:3d:e6:e1:eb:22:88:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:47:F1:24:7E:D6:9E:B5:90:1F:49:C4:43:7B:65:94:49:E8:64
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a6:5f:44:ef:7b:86:f6:d7:7a:85:f0:a4:6a:ff:dd:bf:be:
f7:bc:43:fe:f7:5d:f4:22:86:b3:1e:fa:7f:b3:bd:b2:4d:a1:
f8:54:c8:0a:bf:64:8a:9c:41:18:58:ec:39:12:40:7c:1c:9d:
5c:aa:dd:28:e5:15:d6:09:42:77:5e:ff:39:ff:18:4d:89:da:
95:6f:ed:be:ac:c3:59:30:6b:3a:9b:8b:41:f2:27:5c:1f:d7:
e4:a7:6f:c0:ba:2d:a9:04:aa:63:a6:7d:48:68:0e:55:39:26:
15:5e:b4:18:95:49:8e:80:65:ee:2b:79:4c:b2:69:57:91:0e:
b0:ee:be:20:a5:0b:da:6b:2e:9e:49:ff:22:f6:6a:b2:d0:b9:
85:d6:b7:8d:7c:07:ea:36:30:62:aa:17:4c:8a:97:41:d1:70:
52:a7:8e:2f:36:73:f7:de:24:0a:00:ad:33:79:66:52:d0:3a:
7d:cd:81:fc:0e:01:1d:55:a2:7d:78:eb:21:27:60:5b:03:b9:
83:90:1a:7d:f7:b8:a3:5d:3c:6d:c8:27:b0:81:ab:29:ac:ea:
78:7b:3d:b7:08:87:41:58:e9:40:eb:79:ea:6c:69:cc:49:3a:
a9:bb:48:5f:4b:54:4e:4e:eb:97:2b:1d:b5:e5:71:c3:1e:7e:
96:cd:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:05:37 2025 by rpki-client