Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: bcgKn3yn5LFGYObsidsqAAtLcjlpBrA9VnSz40ypprM=
Subject key identifier: E7:8E:D5:B0:58:E0:19:29:9F:7A:4E:C0:9C:F4:9D:ED:D5:CA:B8:53
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 0198D73B83B7AC2FF608C808FE1823E72263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: mDNalcDxyx7nNwrohvIZAMfA0NTjHGS2EQRUBE9hkXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:83:b7:ac:2f:f6:08:c8:08:fe:18:23:e7:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=e78ed5b058e019299f7a4ec09cf49dedd5cab853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:90:25:50:01:18:cd:54:98:2d:4c:e2:58:
68:a4:6b:a8:f1:d6:10:81:b8:c0:12:8e:ec:9a:8c:
05:25:80:6b:69:17:8c:67:60:84:34:cb:b4:c0:df:
41:1b:63:87:7d:7f:22:cf:77:37:b8:2f:95:9b:98:
1a:a2:2a:8d:33:60:0d:f6:f6:55:6b:7e:dd:8f:d0:
69:d1:91:f4:67:e4:8b:0a:97:43:d6:48:59:b5:36:
6c:fe:f7:16:de:18:81:85:32:34:a7:64:3a:88:2c:
a0:ec:f5:c3:4f:36:de:93:b4:73:c1:76:b2:ae:38:
7a:5c:af:2e:98:a0:15:75:95:07:45:54:80:82:ec:
6d:31:c5:e9:4e:04:9a:a2:4c:c6:27:26:53:37:e4:
d3:ff:86:aa:28:ce:2f:ba:3f:2c:a8:9f:cf:5c:fd:
75:2e:af:e2:08:aa:04:e8:ae:05:a7:49:bb:fb:fe:
6d:3b:22:56:eb:48:21:74:04:37:65:61:aa:6d:57:
0e:5c:ff:54:c6:ad:1f:8c:09:68:c6:25:67:dd:72:
3a:20:83:65:fe:bd:40:89:72:fc:ef:c3:df:88:61:
e2:bb:91:82:34:3a:78:4a:e0:b0:af:2e:87:fa:68:
0b:44:4a:8c:c8:3a:cb:fb:7c:4e:8c:06:3d:a9:a5:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:D5:B0:58:E0:19:29:9F:7A:4E:C0:9C:F4:9D:ED:D5:CA:B8:53
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:d9:9c:1b:33:86:3b:a0:3d:8c:98:da:c1:92:42:cc:fb:
66:cc:49:b1:bf:f2:22:94:28:e8:87:ba:25:63:3d:e7:c3:12:
7a:0e:54:a3:02:3c:95:cb:cb:64:97:8c:84:c6:92:44:e4:8e:
cb:67:cd:db:8f:45:c0:94:b6:38:85:71:c2:6f:92:9a:28:9d:
5c:dd:e2:4e:29:85:30:b6:b2:eb:05:fd:11:c9:ca:a1:f1:ca:
62:cb:a2:4c:e7:44:9d:24:21:05:41:c9:af:a2:98:13:d7:aa:
38:5c:6d:91:67:f9:1d:b4:14:5f:65:e7:61:93:0e:62:be:e6:
75:2e:7c:91:e1:57:a8:1e:03:a1:6a:5a:fb:ec:d3:ed:f6:7f:
f3:19:55:57:8a:f7:31:2b:a8:40:ca:7c:00:d0:8f:3a:48:a3:
fa:a3:eb:9c:49:44:5e:35:57:4f:94:33:46:1d:d9:76:b0:d1:
65:6b:09:f9:04:67:e9:9e:55:e9:1b:9b:1d:02:db:bd:af:ef:
3a:f2:18:70:c9:11:ec:67:02:26:53:57:29:00:e3:8c:2a:aa:
fa:04:67:bf:62:bd:d0:1e:ff:43:31:40:80:cc:04:c6:d6:b5:
f6:1e:40:af:0f:9e:4f:bb:86:18:c4:1f:20:f0:6d:73:11:1b:
5a:c3:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:37:52 2025 by rpki-client