Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: edoxjSI+3nfTCp5HM+42LLbwWXtxzP/dbHJ6ZMPZYjs=
Subject key identifier: 27:75:4D:EF:C3:8D:58:DC:FE:E7:EA:3F:34:65:0B:FC:37:35:83:C5
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 01965838EF9EFE3408E3006D682071B1A496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:48 +0000
Manifest this update: Mon 21 Apr 2025 12:00:48 +0000
Manifest next update: Tue 22 Apr 2025 12:00:48 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: WTKSc3ZTfnBaWquSKY+K+JgAYJvAhV20KK2lM38beDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:ef:9e:fe:34:08:e3:00:6d:68:20:71:b1:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Apr 21 12:00:48 2025 GMT
Not After : Apr 22 12:00:48 2025 GMT
Subject: CN=27754defc38d58dcfee7ea3f34650bfc373583c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:19:a6:17:c5:06:bc:95:41:d7:26:c5:66:
5b:29:b7:23:d2:04:69:c0:c4:c3:e1:34:5a:c6:1c:
20:75:d9:d0:8c:4d:34:40:8e:0b:79:15:2c:90:36:
2c:e3:4f:f3:04:92:ac:f1:cf:34:d7:b3:0b:14:e9:
b7:6b:e4:4c:4d:a7:f3:95:73:49:5b:89:57:da:05:
0f:e0:23:48:f4:06:dc:fd:c1:c7:2f:95:77:d0:fc:
2f:ba:ad:ff:82:48:1f:28:33:fb:80:ef:43:a0:40:
69:42:7b:cd:9f:7f:7b:cd:dc:c8:33:8d:d2:b7:04:
35:8c:a5:c6:09:01:e6:f3:19:ce:53:c5:e9:32:d2:
27:37:de:48:df:7d:4d:7c:c8:2d:c3:d3:4e:f2:65:
e7:0d:9e:7b:3d:c5:dd:f1:7f:ad:b1:19:b1:20:a9:
e8:4e:d5:29:56:e0:f7:0f:14:72:b0:a7:68:79:3b:
08:d9:b9:40:6f:d6:27:f7:f2:9d:bd:f2:7c:d6:4c:
6a:9f:0c:7f:25:10:cc:6a:ce:77:0f:05:ce:4d:e5:
47:59:05:1e:cb:31:06:d0:dc:02:a3:6e:ab:e5:cb:
70:78:be:ad:a9:f3:04:a7:9d:a8:58:ed:92:31:52:
24:c3:2b:d5:47:f4:3e:24:cd:3c:b6:0b:ad:d4:38:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:75:4D:EF:C3:8D:58:DC:FE:E7:EA:3F:34:65:0B:FC:37:35:83:C5
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cf:1c:8b:ab:76:fb:84:fb:e7:4d:88:71:4a:a4:a1:ec:79:
65:c4:25:a6:24:ce:dc:4b:05:4f:d6:e6:13:f5:6a:1e:49:e9:
a6:a0:aa:76:22:4f:11:fd:3c:da:2e:b8:1f:0e:d1:7a:bb:6e:
ea:96:76:12:d2:47:76:52:04:9d:a9:67:82:4e:04:cd:a1:5f:
d1:e4:87:75:ee:5b:1d:98:a7:e1:87:31:81:50:c4:4c:5a:72:
81:fd:5b:14:f3:48:b4:00:4e:39:0c:a9:15:d3:e0:2e:50:15:
2e:05:80:da:29:df:eb:d2:d0:ca:77:7f:21:39:61:eb:c0:99:
43:70:09:ce:06:e4:92:02:96:99:b4:eb:3b:38:f6:87:8d:16:
07:d3:8c:4a:89:6d:35:51:bc:05:0e:44:bc:f4:26:2d:8e:b1:
75:c5:3d:2b:b6:8a:dd:fd:dd:75:4b:b3:f2:12:37:3b:79:c6:
9a:9e:ea:bc:b2:32:85:7c:6d:01:81:e6:2d:77:e6:fc:1f:51:
33:7a:72:ec:e8:b4:a6:e8:b2:97:af:35:c6:8a:4f:b0:43:b8:
13:14:c1:49:05:72:07:8a:f4:74:40:99:ec:e5:12:88:97:9d:
ee:39:30:80:07:38:18:88:28:64:31:68:c2:6a:0d:0a:c7:d0:
1e:40:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:09 2025 by rpki-client