Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: 7Y2/DCIbNogoDaPKj4qVqBetlAceR8FJzRsOL3xqDlg=
Subject key identifier: 37:39:6A:73:E9:AE:C6:AF:EF:9F:C5:B8:AA:DA:F2:B5:E3:8C:2D:10
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019A70DC27800001A635856CED7DD2261E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: 2M6a8LDCt1FPSvIEmVAmfg7h3btWC1ndR3XKZ6QVkTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:27:80:00:01:a6:35:85:6c:ed:7d:d2:26:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=37396a73e9aec6afef9fc5b8aadaf2b5e38c2d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:e4:be:83:e2:8d:bd:c7:a0:98:b9:ac:97:
02:22:af:b0:ab:2e:12:b5:cc:2c:6f:f7:bc:92:0c:
87:fc:d1:08:91:5a:d4:a0:55:d7:31:eb:01:5e:76:
ef:3e:77:40:68:77:2a:45:a6:b0:60:93:e4:5e:b1:
58:1e:37:20:aa:15:45:11:07:72:a5:7d:69:dc:72:
6d:aa:0f:71:66:44:53:dc:c3:7f:5f:8c:30:8a:94:
7f:37:56:05:4e:02:99:31:12:c7:ca:ce:2e:75:fa:
1b:b2:9b:cb:2e:db:c1:d5:c4:47:9d:f8:09:d2:a8:
70:dc:ff:d6:21:8f:34:62:d6:99:d0:c2:07:93:e1:
99:df:39:32:11:14:4f:03:21:c2:df:b1:f3:26:93:
ac:ae:76:b0:18:e5:b3:27:84:29:e5:f3:6a:da:12:
d3:01:84:79:36:0e:34:a6:24:dc:9f:1c:a9:c5:de:
ae:51:87:c3:90:f3:01:5b:0c:ab:8e:99:ee:95:af:
6b:ae:73:7c:76:78:3f:34:35:cc:25:31:05:cd:53:
7c:5c:d0:eb:d8:d9:c1:b0:dc:3c:0d:c2:6a:92:e5:
94:69:31:07:d1:b4:ca:14:24:0d:23:12:e5:93:22:
35:45:8c:24:a7:1f:23:9d:b7:17:79:a0:87:0c:ea:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:6A:73:E9:AE:C6:AF:EF:9F:C5:B8:AA:DA:F2:B5:E3:8C:2D:10
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:cb:75:a5:14:d1:23:f1:8e:c9:9f:f3:74:80:15:06:b7:
5e:b6:ef:bf:6c:f0:86:25:cb:15:38:69:8c:c4:32:4f:13:40:
fd:67:5f:e8:fa:92:ed:95:a2:9a:fa:ad:23:50:b8:e3:69:47:
ed:07:02:9e:5c:c7:f6:7d:c7:57:79:2d:41:f4:90:1c:c6:27:
b8:57:02:10:8d:7c:38:21:e1:8c:43:9b:73:fd:da:03:ea:38:
1c:41:82:45:b4:fe:64:4a:cc:2f:9a:af:48:05:7b:fd:18:34:
dc:69:12:5a:1f:79:7d:8c:a8:86:88:71:f4:42:8b:bc:24:c1:
87:77:e1:91:74:2b:a6:26:fd:ef:dc:b8:ee:1f:06:83:4e:2e:
3a:87:9f:29:d7:2b:d8:72:9b:10:8e:a6:8c:b6:d6:0a:76:a9:
b3:e5:f0:c6:fb:6a:5d:5b:88:47:75:3b:de:f3:b9:a4:15:21:
df:89:ef:03:0b:91:ad:a5:33:d1:42:e3:33:4f:22:54:70:98:
c3:b5:04:75:8a:14:55:6e:7f:c2:c1:b4:d1:1c:80:d3:6d:7e:
d7:ac:99:96:cd:48:33:27:cd:fa:f4:ff:b5:07:d5:14:f0:d0:
e2:54:db:5f:7b:83:6e:75:2f:97:ea:93:38:1a:e7:93:b0:0b:
05:58:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client