Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: 4cirAJrOj0DDdl1nQPFVEDZRCS1+ZWN1pbdlA24XgRo=
Subject key identifier: 50:9B:9C:74:7C:F5:09:5B:6C:A9:FE:E5:7A:67:BB:CE:64:A8:B2:F9
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 0198469B1CA7348B2EEAC1D6DF1D5C9023BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 12:00:27 +0000
Manifest this update: Sat 26 Jul 2025 12:00:27 +0000
Manifest next update: Sun 27 Jul 2025 12:00:27 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: 3gzA3jdqhE9SF4gnmexnGOUUdaj5ZZpdubWTFc4PB7k=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:1c:a7:34:8b:2e:ea:c1:d6:df:1d:5c:90:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Jul 26 12:00:27 2025 GMT
Not After : Jul 27 12:00:27 2025 GMT
Subject: CN=509b9c747cf5095b6ca9fee57a67bbce64a8b2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:57:74:fd:9c:1b:45:e5:c9:46:41:03:4a:fb:
49:18:d9:91:ed:dc:f5:c9:89:26:f6:1a:20:71:36:
e0:b3:77:94:df:fb:e5:43:a3:fa:82:25:71:32:3e:
73:23:38:e4:6d:44:a8:dc:53:2d:fa:61:fb:7b:cd:
dd:08:ec:2a:78:04:36:a5:1d:1f:cf:20:aa:78:d6:
2c:6d:cf:9b:e5:72:9d:2f:38:ee:5d:fc:36:a2:dd:
8c:3e:b7:e9:fb:bc:7a:24:82:8c:9f:ad:d8:0d:ed:
12:c6:e7:30:2f:dd:fc:68:3b:fa:48:cc:55:96:e3:
39:22:41:29:76:36:61:6f:e2:e4:ee:e1:b0:5a:84:
e8:41:da:f4:c0:a8:37:73:95:a9:d9:27:b3:4e:59:
a2:12:24:9f:38:1a:17:e6:d8:bb:be:01:13:c0:a1:
b6:a3:d4:74:9f:2b:8b:b8:ca:d6:f4:c7:f7:3b:9c:
37:32:51:94:5a:27:50:1b:ce:da:40:22:f6:f1:06:
50:b4:ea:64:0e:83:01:53:bd:e1:bd:fe:89:cd:1d:
aa:6d:7a:b0:27:e3:d8:e9:46:c4:ca:e3:69:9e:54:
0f:b4:01:3a:60:39:20:11:37:3c:58:25:01:49:0f:
96:7b:6b:70:d5:c3:5a:6f:22:fc:3b:a6:dd:ee:d3:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:9C:74:7C:F5:09:5B:6C:A9:FE:E5:7A:67:BB:CE:64:A8:B2:F9
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7f:04:fa:b5:af:d6:02:80:e5:7a:9d:ab:74:7f:fa:bd:16:
3b:0a:13:72:6d:77:f1:90:41:30:e3:68:71:ae:ef:58:71:6e:
f4:8f:e6:d7:bc:91:fd:6a:c5:70:6c:dd:a2:d7:1d:01:a5:74:
5a:50:93:13:f3:9e:17:0b:d1:05:10:19:52:0d:29:b5:1e:cf:
08:6e:d8:44:d5:9c:76:56:41:df:59:19:dc:4b:30:55:bf:61:
91:b0:5c:46:18:2c:bd:30:8f:3f:38:ce:d2:4a:96:9b:c4:e1:
80:8e:c9:85:44:3d:a3:5e:14:1b:67:06:8f:79:6e:1b:72:31:
ae:9f:65:64:bb:1d:55:eb:b9:3a:f8:60:f9:70:e5:ee:dd:2d:
cf:4c:a5:5d:0b:8d:f6:ee:29:76:07:c7:1a:65:16:26:83:68:
85:eb:b0:89:5e:73:ea:5f:6a:94:6e:84:d3:f8:7c:2d:2c:67:
60:64:8c:b4:f6:47:85:07:17:46:9a:b1:4a:1e:ca:f6:bf:15:
5e:69:bd:78:c6:38:b8:0a:7e:d7:31:ed:e5:71:76:92:56:2f:
ff:50:1a:3a:31:0f:0c:ac:93:b2:6a:3c:08:bb:b0:76:cf:29:
f0:83:49:38:5f:f4:1f:ef:9e:6c:72:3c:2f:71:04:2c:82:4f:
99:98:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:49 2025 by rpki-client