Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: 9L7WW067usUNbeusemhCnSEpqXshQXdpN5AZUjb8UQQ=
Subject key identifier: D7:CD:C9:58:C9:6F:AC:00:AD:62:CD:16:70:90:28:58:ED:38:BD:90
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0199FCFD1C109D59F8109D319BD203CB8CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: GRKA2GiPIdHDzriUGsJJtezNMTpsBAjDzVJtyHPIOBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1c:10:9d:59:f8:10:9d:31:9b:d2:03:cb:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=d7cdc958c96fac00ad62cd1670902858ed38bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:ca:db:ec:84:ae:fc:89:62:d3:3b:92:f5:
43:97:0d:9c:ba:ce:8c:32:84:8d:aa:d2:5f:b7:d3:
42:80:5b:8a:b3:f3:ab:e8:eb:ae:ba:67:da:df:44:
43:75:69:ec:b4:b0:a2:5b:42:fa:ae:72:e6:2b:59:
39:80:41:38:06:88:1d:fc:e1:67:51:e0:59:11:5f:
18:e8:4f:0e:65:7b:98:c4:d6:ee:ae:9a:ef:8c:84:
f5:2f:0a:ec:3d:89:83:ab:ae:61:e6:58:c1:49:aa:
a0:dd:34:e1:d1:05:e9:73:79:0e:ce:a7:f4:5f:9e:
18:e0:08:3f:c7:d4:c8:5c:f0:97:f6:6c:1d:fb:cb:
47:f1:b6:d1:da:03:64:33:70:8b:1a:65:74:1e:93:
42:0c:e9:32:16:5e:4b:18:04:c6:7e:e6:cd:48:22:
5d:48:e9:60:f6:92:29:86:9f:90:1a:79:92:2e:0a:
5d:97:79:ae:55:4d:57:58:33:22:f4:1c:a6:e5:a5:
10:dd:04:22:a4:fd:d0:a9:81:f4:d2:8e:ba:5b:7a:
ff:e6:62:b9:3d:c8:8e:a9:5e:b7:77:c0:ec:b2:8b:
78:5b:34:00:b0:ec:ec:1c:f6:e5:57:15:a4:bc:b7:
2d:66:27:02:25:f0:4d:81:fc:8d:ed:18:28:3b:97:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:C9:58:C9:6F:AC:00:AD:62:CD:16:70:90:28:58:ED:38:BD:90
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:dd:9d:0d:82:d9:67:27:6d:15:9c:de:a8:52:1b:a0:ac:
a8:bd:11:3a:6e:b1:e8:93:a5:8b:e3:a0:92:94:f1:3e:e1:b8:
ea:5b:2a:b1:e7:f9:31:bf:57:f9:0e:21:4c:b0:1e:c4:bf:71:
5f:28:1d:c4:97:ee:b3:0a:24:cb:86:50:32:a9:84:e3:9d:83:
6c:59:6e:38:59:55:92:d0:a6:8b:2d:45:cc:cf:0e:22:4b:ed:
6a:b1:ee:2e:a9:c7:27:c3:f2:73:4e:19:3d:5d:34:68:cb:6d:
53:28:23:30:17:d3:d5:67:c3:e6:06:ee:93:c4:21:d8:7e:d5:
bc:ed:51:a0:3a:82:43:0d:6f:af:04:6b:5b:94:ed:37:49:ea:
3f:79:f4:8f:41:77:27:4d:01:58:06:f9:2b:3a:20:f8:f6:69:
20:6e:58:c7:46:15:3d:87:5d:35:88:e1:71:22:37:13:9b:56:
0a:78:a9:6d:dd:c0:e4:fc:96:db:ea:e9:6c:1a:07:8e:32:49:
41:f9:c9:4f:5c:81:78:43:6a:06:05:91:98:fd:24:24:dd:cf:
52:a8:2e:67:82:67:d9:23:1b:33:cf:d6:a8:e1:d8:e6:74:c8:
48:bb:df:9d:1b:28:d9:94:1f:8a:f9:70:22:6a:d7:1f:b4:04:
27:16:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:21 2025 by rpki-client