Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: +Nnc3cOQaeT1TpyJjSuIZrIo69iT4NF6SjYSB8cdiU8=
Subject key identifier: B8:C4:2E:33:FA:AA:B9:47:1E:2D:15:32:BD:93:9A:C4:7C:23:8B:01
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 01984889C85A98582489DC014412516F8145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 21:00:45 +0000
Manifest this update: Sat 26 Jul 2025 21:00:45 +0000
Manifest next update: Sun 27 Jul 2025 21:00:45 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: ccb+tWXyMxEbdAaki7x7MsPh8nf7TZ6k8ERshCRUd2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:c8:5a:98:58:24:89:dc:01:44:12:51:6f:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jul 26 21:00:45 2025 GMT
Not After : Jul 27 21:00:45 2025 GMT
Subject: CN=b8c42e33faaab9471e2d1532bd939ac47c238b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:66:76:5a:04:5e:8d:63:22:96:88:b7:5a:
40:bb:48:7d:b5:ea:8e:5f:b2:b9:58:86:0f:e7:d7:
1e:9c:78:b8:d5:31:cc:99:cf:11:93:40:15:14:43:
e6:ae:3b:80:0c:1e:cd:56:61:05:92:f6:00:11:fa:
5b:89:9a:2c:a2:43:c4:76:88:8e:38:79:2a:7c:6f:
16:42:f6:3f:df:4c:2b:fe:70:b3:a7:78:6e:dc:cb:
d2:19:1b:09:0f:07:8a:ae:5c:a0:9e:b9:1a:60:65:
87:ae:5d:62:57:2f:86:cc:c6:46:91:8b:2f:f3:03:
89:a4:d1:60:54:d6:0d:0b:40:df:77:5e:aa:ae:8b:
05:56:c9:1b:cd:bd:cd:af:55:6a:4f:88:27:34:28:
92:cb:ab:22:1c:44:7c:30:28:b9:ca:99:8d:ef:3c:
2c:3c:68:8b:bd:51:ec:f3:26:34:dc:b2:f4:0b:dc:
bd:9e:f9:5c:fa:5e:5b:99:d9:ff:e3:3a:08:4e:68:
35:de:ea:17:3d:ed:c8:72:eb:0c:00:fb:60:d6:b4:
b6:f0:b8:4b:91:44:77:93:48:90:17:6b:4b:49:80:
89:a3:b5:6a:d8:b7:82:95:d7:d7:a8:2f:e6:53:ac:
7c:76:1b:b2:53:83:f9:c4:09:ae:33:8b:d8:6f:41:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:2E:33:FA:AA:B9:47:1E:2D:15:32:BD:93:9A:C4:7C:23:8B:01
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:71:4b:1e:7c:44:c6:3f:d8:8a:b0:c4:61:9e:e0:c6:a0:7c:
cb:36:5a:47:86:c2:4c:05:63:52:c2:bc:e7:39:5c:68:ee:41:
c9:e3:18:b6:21:7d:0f:70:fc:68:e1:25:f1:83:33:0f:70:d2:
35:41:5a:6d:59:e0:a4:e0:7d:60:a9:ab:6d:c3:e0:4e:50:ed:
7f:3b:e9:09:88:3f:6c:71:52:fd:aa:bb:64:ad:a6:38:69:91:
ed:4e:de:7b:fa:67:03:61:5c:f8:55:09:1e:ea:8e:66:51:2e:
ba:11:5c:f0:98:4d:f5:17:27:36:a0:96:2e:c2:fd:3a:32:ac:
5c:b0:b5:7d:55:64:bb:ec:b5:ff:7a:cf:64:8a:35:b2:33:32:
0c:be:d7:58:e9:2f:fc:56:c6:00:ba:b4:fd:1d:99:1b:16:c7:
84:ce:9d:04:f8:59:b2:75:b3:0c:14:86:0d:a2:bb:93:96:b9:
ed:5a:cb:d8:72:fd:1a:fa:74:d6:b8:f2:b3:18:29:84:81:07:
7a:dc:4c:bb:ed:c7:52:80:81:f1:8d:bc:e3:56:cc:6d:e5:42:
b7:ec:82:4a:88:8b:f6:3b:11:dd:53:db:ff:2d:ae:f9:67:cb:
20:c2:5d:4c:62:6a:6c:1e:5d:4d:c2:a3:a9:8b:9e:ae:e9:32:
04:87:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:57 2025 by rpki-client