Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: eltIYZj3lDoVFc9chrx1DaRCQdBaMOkRH60XB124iVw=
Subject key identifier: AA:E7:50:D8:1F:9F:12:37:C3:65:63:60:1F:52:F8:56:61:E2:25:C6
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0198D7731975674517476A467EC2C9E78356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 15:01:41 +0000
Manifest this update: Sat 23 Aug 2025 15:01:41 +0000
Manifest next update: Sun 24 Aug 2025 15:01:41 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: pqd5bNTaVG6yu3FXZZMk+99loL/Kjcy4gfiF5MsxfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:19:75:67:45:17:47:6a:46:7e:c2:c9:e7:83:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Aug 23 15:01:41 2025 GMT
Not After : Aug 24 15:01:41 2025 GMT
Subject: CN=aae750d81f9f1237c36563601f52f85661e225c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:90:0f:67:21:d1:9e:c2:ee:e6:18:95:6f:
47:e6:c7:4d:6f:65:5d:76:87:c1:09:8d:e6:e8:10:
ec:89:0e:c2:b3:95:67:76:64:80:8f:4b:55:1f:96:
d9:d8:ae:21:9d:06:fc:a7:fd:9d:69:f0:bd:ce:2a:
f3:63:a1:cd:9c:8d:a4:a4:83:ec:44:ae:2c:d3:94:
18:13:1a:58:d1:76:18:4f:d2:50:fb:1f:3c:7e:e7:
8d:31:0b:8f:57:d3:62:e6:dc:f0:2a:54:0d:65:0f:
76:be:a7:db:5c:4c:09:52:b5:3e:fd:7d:57:84:7c:
e6:cc:89:a3:6a:7d:50:e8:af:3b:9b:d9:de:63:06:
90:44:f0:bc:89:b9:3c:57:f7:8d:62:2d:32:64:c3:
f1:78:11:69:46:ba:ec:8e:1b:e2:9d:3e:b2:9f:18:
3b:29:bc:8e:d3:de:51:fd:ea:97:2c:d9:1a:e8:69:
ed:17:9a:e7:43:d8:c0:75:08:f1:97:7f:2b:eb:88:
29:cd:21:ef:81:3f:e2:0a:3b:2d:6b:f2:65:ae:88:
63:78:8b:c8:b4:ec:69:4e:24:3f:9c:f5:cd:bb:96:
7a:aa:88:43:bc:86:e6:af:b6:e3:66:e9:bd:0c:0a:
52:df:55:85:62:66:5c:fb:fc:19:a8:db:a3:9d:50:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:50:D8:1F:9F:12:37:C3:65:63:60:1F:52:F8:56:61:E2:25:C6
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6e:85:7d:b3:2b:e8:e4:e3:76:86:0c:6d:7f:a6:80:9d:72:
46:d0:62:0b:4b:43:b2:ea:e8:cd:d3:b8:c2:ed:99:32:c3:07:
d7:51:37:29:50:14:15:b2:2f:0b:f6:5b:51:0c:1e:0f:a0:44:
bd:7d:bc:31:16:26:aa:34:a8:c5:4d:3c:00:12:ca:be:10:bb:
ac:b3:f4:e4:2d:88:7e:09:09:2e:10:b8:ce:99:1f:27:f4:8a:
57:e1:e8:c1:cc:a4:7e:e1:fb:8e:59:1a:2f:c2:ed:d5:21:06:
8a:79:3e:06:b2:19:1d:37:bd:12:1b:06:80:96:d5:6f:00:75:
2a:a6:90:bf:14:98:a5:73:8d:22:30:76:db:f1:d1:fc:66:65:
06:b5:d0:78:b6:0f:bb:5b:39:df:e7:07:49:96:20:c1:c2:d5:
c0:6d:22:be:18:90:27:c8:e4:9e:a5:54:f6:60:a3:ab:9b:2a:
a7:c5:39:66:49:f1:57:1b:94:c4:30:bc:1b:ad:d0:25:3b:b3:
fe:e0:bb:25:f0:09:d5:5b:d8:36:d1:3b:19:dc:cf:69:5a:8c:
1e:78:c6:f5:18:5e:df:aa:c7:03:ea:04:08:01:8f:38:bd:c3:
06:e5:44:8c:e4:46:5c:7d:58:63:56:cf:2e:ae:f4:d4:f6:7e:
49:4b:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:32 2025 by rpki-client