Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: qqyRlm0O2GK5pfnVzwvMvKszudQl+2WuQy9njQiColc=
Subject key identifier: CD:BC:A5:EE:F9:6C:88:09:4A:E1:BE:3A:38:F7:CE:E4:68:98:BE:0A
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0197B7EAAE11E881C4587670F9051A6BF372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 04B1
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: 6ACKi7ZPhrT9BSNFH+M+wyrxWgnZL3W8tfc8AmDv2t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ae:11:e8:81:c4:58:76:70:f9:05:1a:6b:f3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=cdbca5eef96c88094ae1be3a38f7cee46898be0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:38:90:11:b4:45:ca:2b:bc:83:07:4a:93:
6c:2d:f7:d6:af:27:b7:e2:18:19:48:25:f6:95:30:
b3:56:90:1b:94:e9:2f:93:7f:f1:cf:16:1d:4a:3d:
bd:b2:21:37:ae:d5:99:ed:3a:1b:06:04:63:6b:6d:
43:f1:4c:25:84:56:00:2c:5a:bc:09:03:1e:ee:4f:
71:34:9f:98:4f:39:10:51:23:5c:7d:58:1b:aa:47:
64:6d:f0:cc:ba:ec:06:92:71:9d:e7:d4:3f:58:f5:
39:6a:d5:da:34:ad:68:d1:64:11:93:f8:44:6e:38:
cb:46:01:a4:ca:7c:f1:e2:23:87:3d:4c:90:79:ac:
a4:15:80:dd:50:f5:ea:ca:db:15:02:9f:47:5d:aa:
79:18:b2:ad:4d:56:38:ee:48:b2:14:df:f7:22:48:
0b:0e:ed:9c:d6:6d:3c:b6:49:f1:29:d3:f7:11:0d:
21:1d:5d:eb:f0:fb:84:b4:fd:e4:0e:13:2e:31:48:
f8:1c:01:a3:c6:a3:6f:ef:27:56:a6:d2:0b:83:75:
eb:8a:b8:c0:ae:0a:3e:81:f2:2f:5b:73:84:a2:41:
66:7d:d5:24:dd:87:3b:ab:95:a8:06:6f:1e:c3:24:
47:8b:a2:83:ea:79:cc:96:50:84:fe:3f:c5:6f:6c:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:A5:EE:F9:6C:88:09:4A:E1:BE:3A:38:F7:CE:E4:68:98:BE:0A
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:66:da:0b:b7:1a:ad:a7:8b:9c:42:a3:b6:71:f9:23:64:
7b:4d:85:6e:d0:3d:da:82:15:12:10:56:c1:0e:b8:bf:ba:e8:
b8:0f:8a:4e:8e:fb:d9:ad:09:4b:eb:cf:79:b6:9a:f5:d8:6a:
46:25:90:53:ef:09:43:7d:1e:8a:94:cb:1e:42:b0:e5:34:8f:
44:a9:6c:31:f7:b0:63:ca:a9:7d:78:97:df:3a:81:20:8d:aa:
cc:21:71:1b:41:4e:b1:d2:73:55:32:da:c2:dd:7e:a1:94:2a:
9c:d4:cb:76:50:3b:4f:08:e0:82:6d:5e:cd:bd:c8:0b:77:49:
8e:86:66:4b:58:e2:e0:32:a5:b4:17:dd:ea:cd:35:a4:48:08:
22:18:6d:45:98:ba:b1:e0:c0:f9:7f:60:1c:54:56:2f:1d:d9:
79:d7:b5:b4:01:48:2a:aa:e5:b3:ec:90:04:ab:77:31:8f:9f:
e9:ee:c7:68:71:ac:c9:4c:c1:b1:00:b3:ba:63:be:8f:2e:4f:
b6:5c:de:c2:b1:3b:90:ab:4b:3b:e4:1f:5f:f9:86:1c:18:03:
fa:65:33:92:b1:a0:8e:c5:4b:57:2e:c5:e2:ef:4c:0d:ae:b1:
c5:6b:d9:de:50:2f:a0:86:ca:b6:2f:18:a1:ad:d3:6d:8c:82:
27:19:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:00 2025 by rpki-client