Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: /ASZJ+ht1/QYurGcyEi3Bic3er1EGlVF9XgW2xhl0L8=
Subject key identifier: CB:F5:F0:9B:FA:A9:34:D1:EF:18:13:40:B5:23:12:26:EA:92:84:01
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0196C49552BFB38112AA025A7D28EC2F42AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 0433
Signing time: Mon 12 May 2025 13:00:42 +0000
Manifest this update: Mon 12 May 2025 13:00:42 +0000
Manifest next update: Tue 13 May 2025 13:00:42 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: ft8yedKYpY6BX8OBmVaTmroHAjgfa8FrPbtB6jQqmBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:52:bf:b3:81:12:aa:02:5a:7d:28:ec:2f:42:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: May 12 13:00:42 2025 GMT
Not After : May 13 13:00:42 2025 GMT
Subject: CN=cbf5f09bfaa934d1ef181340b5231226ea928401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:30:73:a4:a6:08:60:17:63:2c:86:a5:25:
a6:00:bf:a1:f2:14:18:f9:2f:2e:bf:c5:09:e4:a0:
04:ef:35:ba:09:fd:9c:60:a4:fa:52:34:e4:21:a0:
23:3d:8b:30:83:ea:f7:0d:19:bf:78:68:e9:f3:fa:
85:25:bb:8d:72:e5:a0:8f:61:e5:94:54:4f:3b:54:
43:a4:34:1c:e9:5c:71:6d:df:44:ef:df:f6:aa:46:
d6:a7:45:4c:d2:0d:48:01:00:38:b3:e1:ab:9b:df:
4e:05:d4:69:2c:8a:d7:fa:81:92:8f:80:be:46:84:
9d:ea:0b:28:df:99:2e:af:f9:43:bc:51:7e:d1:c2:
97:c0:f9:4c:c0:3b:57:27:2c:00:79:02:de:88:b2:
5e:a6:b8:4f:d1:99:68:24:db:c0:6d:28:8d:52:a2:
71:4d:58:c5:23:e9:fd:d0:1a:47:6b:b6:c7:d6:4e:
c1:e8:e6:9c:8e:0c:a3:52:da:7a:c7:f1:2a:fb:d1:
63:ef:a7:d5:b2:9d:50:39:96:a9:5c:0b:42:fd:76:
29:16:13:68:1c:11:9c:50:f4:4f:08:ca:53:2c:12:
55:ca:fb:cc:f2:82:a9:4c:86:17:5d:39:64:1e:b2:
13:1c:13:a4:44:29:87:ac:13:da:75:8a:61:cc:3b:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:F0:9B:FA:A9:34:D1:EF:18:13:40:B5:23:12:26:EA:92:84:01
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:d6:be:c3:60:26:56:91:b3:dc:f5:6d:38:14:b5:7e:60:
14:c2:a8:07:fe:10:25:ed:ff:ee:7b:6a:9f:32:3d:9e:41:04:
12:9c:82:31:e7:1c:07:f8:cd:85:9f:89:48:06:44:7a:79:30:
36:03:4c:38:25:b2:f0:0d:14:4e:0d:94:0a:38:73:90:ad:5f:
e0:dd:da:5d:09:53:12:46:9e:d6:bb:b8:47:0a:f0:4f:a8:9b:
7e:aa:5e:aa:04:66:eb:fa:2f:f2:1b:0b:81:74:a7:1a:1d:8d:
68:16:cf:a4:cd:f5:3e:ce:07:e1:f3:d4:4e:5e:78:6e:db:9f:
da:1e:12:0f:64:1e:5a:be:f9:c8:c1:bd:7e:7c:6c:9b:e8:f5:
e1:14:29:9d:fc:80:89:ac:8c:64:a8:85:dc:55:dc:a4:91:c1:
94:ba:40:3b:8b:2a:d1:64:81:10:0b:70:da:e3:aa:be:f2:90:
66:66:f9:fc:86:ec:50:e0:e8:48:2b:cd:61:69:18:82:71:2f:
6f:a1:b9:cd:43:41:81:53:33:cd:23:a1:29:7e:72:57:9f:45:
bb:3d:28:5f:63:88:98:17:fc:9d:a6:92:a7:01:cd:19:2c:7e:
75:30:56:71:62:50:d1:ea:4f:94:31:b6:68:b0:46:52:30:49:
c5:97:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:55 2025 by rpki-client