Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: YKuQ/WSekznX9QcDm6E2BA3/iTOhYuSmIeCaptAhJZc=
Subject key identifier: AE:DB:F1:9A:BF:02:21:BF:8B:77:F0:83:2A:95:53:80:C2:C8:D5:5A
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 0199FEEBC509F0C98F830E5A2575AC21F5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: IwP75m7nS43ytbtGE2lS1+XHR6qDotfxVfVmBWJX4tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c5:09:f0:c9:8f:83:0e:5a:25:75:ac:21:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=aedbf19abf0221bf8b77f0832a955380c2c8d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:ba:0a:57:b0:dd:b4:72:98:78:04:23:65:
30:d7:ae:08:85:81:33:40:f9:df:3b:8a:55:7a:9d:
4a:07:60:0b:e2:c8:92:74:aa:55:e3:a0:e4:a6:71:
43:39:9d:2f:af:79:6b:f7:97:48:e4:09:79:a2:01:
45:dd:cf:1f:5a:50:28:b2:e2:23:7a:b4:2e:34:89:
fa:a5:ba:93:5c:fc:76:3c:0f:7a:9c:94:f7:72:26:
a4:52:39:09:83:9b:61:b8:d4:b0:99:29:3f:7d:98:
12:1a:73:9f:e8:5c:f0:7c:89:ec:3e:15:09:58:b3:
eb:56:16:cb:d6:4d:b2:d8:6e:b3:e0:21:f7:3d:9a:
a7:a8:4e:65:ed:ac:10:68:25:57:c8:f7:35:08:a4:
89:fe:35:ac:68:1a:e8:37:4f:3b:81:77:ab:b8:2a:
f7:9e:1c:bf:18:b5:ab:53:07:68:7d:1b:94:7d:a9:
0f:d5:67:b8:b0:14:c0:75:65:de:ec:46:63:74:fd:
66:e6:d2:de:3b:38:b6:43:97:f3:61:52:4b:bf:e1:
08:1f:d7:a3:10:e1:82:b1:7f:be:22:f0:4c:e9:8a:
b0:62:c5:97:c9:4d:98:7b:5a:df:43:f0:b0:51:ea:
36:fe:60:ab:74:60:3c:40:96:96:a3:b0:0f:14:5a:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:F1:9A:BF:02:21:BF:8B:77:F0:83:2A:95:53:80:C2:C8:D5:5A
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:ad:76:d8:2b:63:d3:07:70:4e:ba:2a:a9:2c:e0:f6:9c:
c2:cd:c6:5b:97:16:8e:c5:42:98:09:41:ce:ee:ba:70:f3:2c:
40:90:cf:75:9c:b1:1e:27:54:e1:17:51:22:f1:0e:ab:ed:a0:
8c:63:f4:8f:b5:df:27:48:c6:06:8f:47:4d:a7:f1:1f:53:e5:
f9:14:39:57:48:c8:33:af:41:83:ce:c7:bf:6a:10:04:75:9b:
1d:da:fb:91:44:6c:0b:7f:f1:fc:b1:01:89:35:9e:02:11:0f:
ad:ab:4b:63:32:12:f0:03:b7:c3:69:8a:8e:88:08:c5:78:98:
96:df:9a:3c:0c:dc:e1:75:9c:41:9b:6a:c1:a9:a9:86:2e:04:
35:fb:45:09:0a:8f:38:d5:77:04:a4:31:7f:36:a3:18:41:7c:
aa:bc:5e:9f:76:7f:a2:cb:ed:36:12:75:bf:df:ee:26:6c:95:
4f:71:76:1f:cd:c3:56:7a:87:cd:a0:85:ff:b8:cd:21:f7:80:
7d:96:0f:8d:c0:ee:4f:40:12:c1:72:49:b6:56:90:30:d6:3b:
da:c7:19:0c:7e:55:ff:d1:1b:0d:59:5d:01:b3:57:96:24:4c:
61:f8:82:de:e8:c7:44:b7:a8:05:58:74:ca:3c:38:23:45:b1:
36:cb:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:31 2025 by rpki-client