Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: FChjTCOYoaj6PqoZjjeVq7elx//0kWK6LHpVtl/d85c=
Subject key identifier: 64:77:8A:EB:41:41:CF:81:EC:1E:E3:E3:62:37:E1:0E:FA:FF:48:F8
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 01984A77C4C66B7CF08E4471D00B5C5E1266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:19 +0000
Manifest this update: Sun 27 Jul 2025 06:00:19 +0000
Manifest next update: Mon 28 Jul 2025 06:00:19 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: A/YYx7IMZoeF9a7tkRYtrBkP0RSiOjaHB6lb0t/Ov80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c4:c6:6b:7c:f0:8e:44:71:d0:0b:5c:5e:12:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Jul 27 06:00:19 2025 GMT
Not After : Jul 28 06:00:19 2025 GMT
Subject: CN=64778aeb4141cf81ec1ee3e36237e10efaff48f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:57:0f:ed:b2:b6:08:6b:77:d1:b6:f5:71:
f0:e7:64:13:30:34:30:60:74:10:35:e5:88:8b:45:
55:e8:31:87:a4:b8:7e:1b:17:a9:ca:f9:89:7d:1f:
4e:bc:6d:cf:41:97:60:8c:36:ee:66:19:ef:76:66:
e8:35:b5:39:b1:46:f1:bb:9a:a5:98:6a:4c:8b:81:
61:c5:8d:34:1f:fe:e9:7c:d5:ea:ac:ce:31:c0:0e:
72:7b:1b:13:3f:ca:84:1c:39:c6:00:a1:82:dd:20:
44:7b:81:5e:33:18:a3:67:c9:9c:af:76:32:4d:7f:
8c:db:48:ff:e1:a2:77:85:c3:03:03:89:10:e7:b8:
36:76:54:d7:df:92:6d:a7:e7:87:8f:b8:1c:c2:40:
fd:63:76:92:25:f2:e3:02:a2:a6:e7:f3:92:5d:66:
67:14:bf:a5:65:97:ac:16:65:7d:66:21:3d:43:aa:
30:35:aa:59:78:ee:f5:94:ec:4b:53:58:39:1d:1b:
9c:f1:5a:fd:b5:af:15:8e:4e:92:8f:af:cc:22:1c:
e1:ca:7d:1d:41:c6:7f:1d:a5:a5:85:8d:3b:a5:ed:
07:1d:5d:4b:f7:d6:a6:fb:4d:5e:61:ae:a6:03:01:
59:97:73:47:60:ad:fe:f1:35:24:a7:b8:48:3f:a5:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:8A:EB:41:41:CF:81:EC:1E:E3:E3:62:37:E1:0E:FA:FF:48:F8
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:a7:3e:0a:99:a6:14:86:43:8a:c4:b4:da:f5:b4:15:f4:
bf:cb:38:65:5f:9c:23:da:12:16:73:f2:6e:10:a6:03:a6:07:
ba:bc:84:a4:ae:2d:36:6b:2a:1d:57:fc:7c:62:c7:33:cf:fa:
b2:12:f7:f0:e8:65:69:69:4e:e4:65:c7:ec:65:13:63:33:c2:
4a:d4:08:43:3e:4c:ea:21:bc:15:08:bd:82:7c:78:a9:cf:bf:
43:37:b2:5f:dd:83:bb:2d:3b:72:87:16:6d:e1:72:a0:b7:24:
19:75:c9:d5:cf:32:28:c5:00:3a:02:e4:5a:00:02:9e:c4:2a:
c6:0b:eb:05:cd:aa:35:09:11:a0:68:e4:f0:e9:d4:38:8a:db:
ae:ef:72:f7:6b:50:35:ab:da:2f:50:3c:b3:a7:25:b8:8d:94:
40:a2:d4:43:18:60:b4:40:1d:76:50:2b:16:8a:1e:13:48:7f:
55:ed:77:33:80:fa:ed:ac:82:96:ef:1d:21:4d:fa:85:77:31:
6b:bf:ee:52:5b:d8:c6:66:ee:10:16:4a:09:29:74:ae:fb:cc:
d7:0e:74:3c:d5:b0:df:69:ef:b4:3b:b3:da:16:5e:dd:6b:d2:
75:ff:49:39:06:87:7b:15:2d:e2:72:b8:8f:f8:83:14:ec:c4:
a4:48:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:04 2025 by rpki-client