Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: UmrPv6/AkMIw7IBpp+DhN76GsZOhLzoicZRn+OPUYIM=
Subject key identifier: B1:AD:F0:FC:72:BA:08:DD:82:33:89:2A:5A:29:9C:41:9C:45:40:AD
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0197B5C4CC2A3B4304E4182C94A03119C5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 09:01:02 +0000
Manifest this update: Sat 28 Jun 2025 09:01:02 +0000
Manifest next update: Sun 29 Jun 2025 09:01:02 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: BuE48YSw29miRILqKF8QY+DXLifigDNxwiODdmN7qXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:cc:2a:3b:43:04:e4:18:2c:94:a0:31:19:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jun 28 09:01:02 2025 GMT
Not After : Jun 29 09:01:02 2025 GMT
Subject: CN=b1adf0fc72ba08dd8233892a5a299c419c4540ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:c5:c6:ba:0c:86:4c:a3:a8:13:ea:51:3b:
3a:e7:1a:d3:ae:66:89:23:83:cf:30:fa:e4:3f:0b:
08:12:9d:50:97:ac:02:5d:c2:79:81:3a:0d:55:de:
27:b9:de:b0:e0:13:ef:2e:a4:2f:b7:a8:cd:8a:48:
39:77:27:fd:09:49:39:46:b4:2d:f1:67:e5:51:ae:
98:8f:05:64:17:c4:f0:05:3b:ee:a4:7f:a6:75:ff:
df:72:d0:a3:08:e7:61:5a:f1:ee:da:c9:76:a4:85:
21:21:b1:8d:6d:21:f6:90:b2:3a:85:bf:27:aa:4f:
02:c2:8b:5f:f3:50:1d:83:fc:9c:86:8b:ba:1d:09:
89:3c:b5:bc:ed:d0:a5:15:64:7b:99:ec:38:f6:5f:
8f:e0:05:e4:2b:8e:e8:ce:a3:9d:b6:23:f9:5c:23:
60:85:aa:fa:c7:df:56:bf:b1:f1:15:a9:b9:9d:66:
08:fd:20:dd:84:d5:c2:96:5b:46:62:67:53:9c:63:
a6:89:26:f2:0a:bc:55:b3:a4:51:7a:77:de:e6:92:
02:e2:bb:a6:34:95:8b:19:e4:1b:f1:40:43:58:37:
6e:e9:dc:ec:80:68:ec:f3:b2:d4:93:ab:92:a3:65:
d2:a5:87:46:5d:96:6a:20:1f:a4:4f:48:1b:b4:bf:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:F0:FC:72:BA:08:DD:82:33:89:2A:5A:29:9C:41:9C:45:40:AD
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ee:2e:33:c8:35:ce:38:ab:f8:bf:da:86:d9:88:1b:a9:34:
d9:27:f3:be:9d:a6:01:9c:83:79:a5:1a:c5:6f:26:39:08:b4:
f1:72:62:89:74:7f:2a:00:0c:49:13:3a:96:e9:e1:1b:fb:74:
7e:2b:0b:ec:49:98:07:94:b7:a8:23:23:d0:4a:45:14:c8:49:
28:ec:ab:d4:d0:17:48:df:51:5d:f4:dd:49:cd:62:55:4a:8b:
f4:63:e0:95:ba:96:82:bc:fa:ba:26:a9:c9:6e:25:c8:35:7a:
5f:35:33:66:90:4c:b4:05:af:2e:c7:28:66:f8:ce:86:9a:b3:
d8:48:65:c7:fe:d3:20:0e:3a:17:b0:9a:23:a8:4d:c0:a1:7d:
73:e9:81:53:51:c2:dd:04:85:ae:05:00:77:04:b3:79:c8:5a:
60:d8:3a:8a:d6:13:11:14:d4:ca:95:e1:eb:27:27:96:c4:ef:
4f:9a:9b:62:31:f0:c8:75:42:2b:4c:03:0e:cc:1f:37:b6:e4:
93:27:c8:ad:f6:dc:ab:35:f8:f1:cc:11:86:6c:be:c5:d8:38:
66:0e:87:b0:88:e4:c6:b0:61:f2:0b:cd:88:dd:05:d3:4f:c1:
7f:a4:4b:ed:5f:25:df:f7:80:46:60:a2:bc:b1:8c:49:98:a4:
63:19:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:31 2025 by rpki-client