Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: ilqc7e1WcCEM65JhQi1Lf8GUOULPXxAzZGtO5iVT1uc=
Subject key identifier: 3B:2B:C7:5F:0B:F2:D4:CF:FF:04:D8:7E:AD:2B:9C:97:D1:30:AB:FD
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 0198D4A7F2DC562349995F0C91E4E37B3B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0C47
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: vHAmWMbvQU7fKLVshIe3ne2j83o4ZjhCtRsbhI+QcJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f2:dc:56:23:49:99:5f:0c:91:e4:e3:7b:3b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=3b2bc75f0bf2d4cfff04d87ead2b9c97d130abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:90:a6:f8:e6:d8:62:0f:eb:e6:c8:c3:79:
7e:88:7e:a6:11:c5:57:65:1e:b8:65:52:ff:94:28:
a1:01:c4:ee:90:9b:5e:07:3b:fc:42:25:ca:d6:02:
82:a4:c0:b1:b3:dc:80:a5:05:12:c3:5a:98:4c:90:
62:7e:7d:27:ae:83:cf:9e:3d:eb:95:7c:f6:e5:0b:
f0:2a:98:0e:a1:8f:23:ef:25:e0:1f:61:eb:f5:8a:
cc:11:38:b6:30:c6:9e:ef:bf:0d:41:07:4a:c5:ba:
20:f8:35:5a:87:68:f1:a6:2f:1f:c8:15:18:21:e6:
cb:8b:96:d3:25:89:9c:e4:5f:14:99:d2:28:9d:d4:
b5:dc:e2:15:9d:71:ca:6a:e3:1a:ec:f0:01:a3:e2:
ee:17:4c:3c:bb:3c:26:fc:2f:dd:69:95:79:8d:41:
5d:48:77:d2:3d:18:de:f0:45:c6:0c:5c:d0:36:d1:
7e:33:a6:e6:6c:47:84:23:37:bf:63:8d:95:20:c5:
ff:fe:15:ed:94:a8:51:9b:42:a2:f2:43:95:d0:63:
51:66:6e:2a:8e:c5:32:28:ab:15:5e:cb:11:9e:35:
bc:70:de:b5:e3:a7:b1:8d:16:80:09:a8:79:05:3a:
fa:90:a3:60:a5:0e:df:57:31:cb:ba:aa:fa:91:76:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:C7:5F:0B:F2:D4:CF:FF:04:D8:7E:AD:2B:9C:97:D1:30:AB:FD
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:e5:64:73:93:5c:5c:51:42:04:55:42:29:33:a1:a9:0a:
68:cb:60:7a:51:a3:e5:a3:84:45:8b:1d:a6:22:c2:7b:d1:3f:
e7:f2:7e:22:25:40:a1:73:1f:4e:7b:48:a2:2f:7c:c1:e2:7f:
dc:de:a3:aa:18:a9:e7:59:bb:15:91:3c:ba:33:f3:1f:0e:5e:
6f:2b:aa:92:32:8a:87:9e:16:70:02:df:7e:bf:65:a1:ee:39:
64:be:dc:fe:4c:2c:e4:5f:44:1d:94:4a:29:c2:f5:37:8a:b1:
ce:3c:1a:b0:67:0f:13:c4:4e:48:60:14:1c:43:87:eb:e6:70:
2e:66:f8:4b:6e:ee:d0:e7:32:0b:3f:82:0e:14:57:f3:5b:c4:
e5:01:50:66:84:51:70:05:fb:6b:02:37:e4:96:d6:d8:4b:6f:
fb:d8:9c:5b:89:66:7a:0a:0f:db:fc:46:35:94:0b:a6:29:e0:
c8:aa:39:3c:ed:9f:55:79:13:5a:ca:26:6c:58:ad:3a:20:f2:
95:b0:18:ac:33:92:69:03:2e:45:35:89:0e:3e:cb:53:e5:a9:
28:b9:45:ae:5c:c0:30:41:70:b4:9e:98:1b:59:f8:c3:2f:10:
eb:92:8f:b2:c7:85:05:79:49:97:f6:17:7e:97:66:ce:c6:f4:
6c:d1:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:13 2025 by rpki-client