Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: lW18kKnryX+B0MbKs8EYX0kDyJAOkuB3JKrpKXzLG6c=
Subject key identifier: F5:E8:90:AB:9E:E1:E1:5E:1C:B6:6F:39:87:2B:0F:E7:08:FB:1A:83
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 0196B4EB4E7A9E53BB6D111BF408177DF467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 12:00:41 +0000
Manifest this update: Fri 09 May 2025 12:00:41 +0000
Manifest next update: Sat 10 May 2025 12:00:41 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: ULpP4TOTeuoRd8Dm2E+NKEz+o4L8U5WTEQ1XeXWTQ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:4e:7a:9e:53:bb:6d:11:1b:f4:08:17:7d:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: May 9 12:00:41 2025 GMT
Not After : May 10 12:00:41 2025 GMT
Subject: CN=f5e890ab9ee1e15e1cb66f39872b0fe708fb1a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:03:fe:58:a9:72:ec:d4:49:aa:3a:13:dd:
f9:cf:51:36:28:5c:ae:29:05:68:ee:9d:5c:0f:72:
4e:78:22:55:bc:14:7e:e7:bd:75:bc:b3:b2:9b:d5:
d6:1b:89:b9:b3:78:f9:68:96:0a:43:e7:2a:db:46:
77:c4:59:d7:a4:95:65:aa:30:ae:47:60:7d:52:f1:
e0:0b:49:27:f4:b6:7a:1f:3d:6a:bd:ef:6e:29:36:
e9:5b:e6:ce:cc:fd:fa:ad:15:ec:16:5a:6a:87:d1:
37:a5:34:1e:fc:3e:8c:9e:b7:d6:67:e1:76:f8:e7:
0e:4f:5f:0a:0c:5a:ac:ac:43:37:fc:7b:08:5c:b1:
77:1f:4a:5c:04:b2:d1:4f:fb:7f:9e:49:5a:47:d1:
51:c1:9d:16:67:75:51:89:6d:de:55:0c:5b:71:b7:
e8:e1:7b:78:fc:db:ee:d3:87:9c:73:bf:ec:bc:26:
aa:c7:94:c4:e3:92:10:e7:dc:ed:ce:ed:4e:74:87:
0e:b6:7d:d9:0a:64:b2:8e:b8:70:b8:f0:34:08:f5:
a1:4c:14:2f:aa:97:55:7e:50:05:4c:af:84:cf:35:
a7:56:72:16:25:0f:91:d9:e8:41:ee:0e:5e:1f:57:
ba:8a:9e:bb:f5:cf:64:60:53:d4:8d:19:39:82:fa:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:90:AB:9E:E1:E1:5E:1C:B6:6F:39:87:2B:0F:E7:08:FB:1A:83
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:c9:72:a0:01:eb:5d:0a:7a:8f:37:39:d1:ae:2a:ca:c3:
f5:9c:66:c8:01:bb:a6:36:43:c3:ce:f8:5f:2b:c8:94:00:6c:
0c:83:c2:8a:02:d1:d7:a9:2a:01:df:db:b6:10:2b:4e:bd:89:
6f:56:8b:99:08:b0:13:a1:70:e9:c1:07:79:ce:c2:a6:11:6b:
53:e8:bb:ea:8a:67:30:89:84:7c:99:a1:30:17:f6:eb:87:93:
63:ba:ec:20:72:64:01:7c:30:f9:f7:89:ad:89:b1:04:86:46:
0c:f5:a8:89:b9:74:d2:28:35:35:b1:5d:41:42:58:88:b9:9c:
6c:d4:b0:b4:2d:2e:86:5b:e0:6b:47:8a:62:bd:cd:17:38:21:
39:2b:47:46:f6:b4:e4:42:a7:4b:bd:74:03:47:62:0e:f9:f4:
06:a9:79:37:b3:87:45:2f:13:b7:11:0e:83:97:9e:8f:06:4c:
3c:39:42:fd:35:7d:4f:b2:3f:10:a5:c1:f2:e6:82:e4:83:7d:
44:fd:be:fe:b9:91:42:ab:2c:c4:e0:21:10:d4:ed:8a:26:df:
48:17:20:bf:ad:ce:11:07:30:41:63:5c:b2:fb:a4:c4:b3:f8:
98:7f:23:7a:fd:91:4f:17:78:ed:4d:81:8b:51:1f:fd:66:0b:
3a:8a:f3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa06056nlO7bREb9AgXffRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0
NDAzNmYwHhcNMjUwNTA5MTIwMDQxWhcNMjUwNTEwMTIwMDQxWjAzMTEwLwYDVQQD
EyhmNWU4OTBhYjllZTFlMTVlMWNiNjZmMzk4NzJiMGZlNzA4ZmIxYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmloD/lipcuzUSao6E935z1E2KFyu
KQVo7p1cD3JOeCJVvBR+5711vLOym9XWG4m5s3j5aJYKQ+cq20Z3xFnXpJVlqjCu
R2B9UvHgC0kn9LZ6Hz1qve9uKTbpW+bOzP36rRXsFlpqh9E3pTQe/D6MnrfWZ+F2
+OcOT18KDFqsrEM3/HsIXLF3H0pcBLLRT/t/nklaR9FRwZ0WZ3VRiW3eVQxbcbfo
4Xt4/Nvu04ecc7/svCaqx5TE45IQ59ztzu1OdIcOtn3ZCmSyjrhwuPA0CPWhTBQv
qpdVflAFTK+EzzWnVnIWJQ+R2ehB7g5eH1e6ip679c9kYFPUjRk5gvpgMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXokKue4eFeHLZvOYcrD+cI+xqDMB8GA1UdIwQY
MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt
NzI3YjFiNTgzZWI2LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2
LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOPJcqAB
610Keo83OdGuKsrD9ZxmyAG7pjZDw874XyvIlABsDIPCigLR16kqAd/bthArTr2J
b1aLmQiwE6Fw6cEHec7CphFrU+i76opnMImEfJmhMBf264eTY7rsIHJkAXww+feJ
rYmxBIZGDPWoibl00ig1NbFdQUJYiLmcbNSwtC0uhlvga0eKYr3NFzghOStHRva0
5EKnS710A0diDvn0Bql5N7OHRS8TtxEOg5eejwZMPDlC/TV9T7I/EKXB8uaC5IN9
RP2+/rmRQqssxOAhENTtiibfSBcgv63OEQcwQWNcsvukxLP4mH8jev2RTxd47U2B
i1Ef/WYLOorzGg==
-----END CERTIFICATE-----
Generated at Fri May 9 17:36:42 2025 by rpki-client