
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier: g8KMQMb2snG7AN6a2iONChbgb3TnE3NM2iV0NIhNJlg=
Subject key identifier: 6B:ED:F6:18:8C:31:6F:52:78:C5:7E:65:37:41:9C:F3:5B:9F:B9:49
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer: /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial: 0198D705F5344EEB2B6C0F269CDB8F4712A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number: 0449
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: 81zr3thwL+WKW0aUR7OgA06I4uz8mBpSKT9mgS5RICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f5:34:4e:eb:2b:6c:0f:26:9c:db:8f:47:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=6bedf6188c316f5278c57e6537419cf35b9fb949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:21:61:c3:e4:fb:23:38:bb:37:6a:d7:a2:
79:c1:b2:31:e5:63:99:e0:57:27:42:0b:81:76:d0:
cd:99:00:60:28:9f:a7:c2:ad:41:36:93:11:23:39:
02:59:dd:3d:6e:75:1e:ea:1e:46:a0:e7:4c:27:be:
3e:27:a7:f9:1b:93:12:5d:f2:53:f6:c9:b8:af:da:
9e:00:fd:63:d0:78:a8:91:04:5d:79:f7:1a:25:02:
48:da:86:7d:25:6a:65:f3:d0:f7:d5:f5:cb:db:26:
6c:53:f1:a5:65:33:be:34:d3:04:65:96:53:78:d8:
40:1d:d5:44:7e:49:7e:fb:d1:6c:d8:fe:1a:f0:5d:
cb:32:8d:b8:c8:7f:ea:30:5c:6c:ab:ab:91:88:a9:
d4:98:dc:b4:b5:f1:55:44:9c:ef:b3:d2:5e:7a:3d:
a7:63:19:05:85:c5:79:46:6b:35:f8:93:e3:32:b7:
0b:08:5e:8a:0d:b9:58:65:98:2c:59:e4:49:75:83:
85:b4:92:f7:50:92:56:79:e9:1d:7b:72:4c:4e:89:
c2:8c:40:ba:f0:2a:3e:9e:4c:d8:d6:72:2f:6d:aa:
ae:0b:78:69:cf:23:7a:a7:26:2e:7e:5d:62:15:48:
3d:1f:f6:03:24:69:9b:c6:41:16:66:a6:2e:3a:aa:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:F6:18:8C:31:6F:52:78:C5:7E:65:37:41:9C:F3:5B:9F:B9:49
X509v3 Authority Key Identifier:
keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cc:84:15:68:ae:02:45:6e:0f:e7:38:de:68:69:c6:d1:7f:
86:ac:bf:bc:a5:c0:48:df:5e:06:ba:6c:a2:8e:62:0b:e4:81:
f9:02:6d:7b:c8:81:64:8a:fe:65:d1:0d:e4:e8:1d:bb:31:bb:
52:83:23:8c:1a:20:0e:43:8c:43:b7:7d:c4:ad:1a:37:43:5e:
e4:d2:5d:a4:8a:55:c4:7d:b6:64:83:cd:f4:87:87:a4:8a:25:
39:b6:35:c1:90:3c:44:42:b2:c7:a6:df:28:30:40:cc:15:e0:
9e:fd:d6:a3:59:20:98:67:b8:c3:96:77:57:4c:0e:71:96:24:
98:a5:e2:18:c5:5e:74:16:90:34:8a:9c:e8:4c:30:e2:d9:86:
be:91:92:a3:cc:fc:54:32:bc:0f:25:8d:3b:cd:b9:cb:c5:b8:
d5:81:7c:dd:eb:ce:03:dc:82:57:da:83:5b:64:14:e1:84:b2:
f0:8f:e6:f0:79:ca:21:67:c4:9b:df:bf:3e:82:89:62:d7:f0:
20:53:60:06:1a:9a:ab:44:13:07:ba:0f:61:53:74:4a:90:8b:
af:a3:c3:ed:af:3a:27:fc:ec:b1:e5:3c:7d:8a:29:91:37:f7:
1e:32:6f:33:c5:a7:86:0e:1e:7a:35:f6:cb:ab:2a:07:e0:16:
10:59:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:41 2025 by rpki-client