
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: 7wpFIHThJESImNgVl2Iyq/nNy6QcnMZdccSiW+jMu00=
Subject key identifier: 4D:CA:C2:8F:6B:B3:7F:1F:69:46:33:27:92:F2:1B:68:BB:69:E8:51
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 0197B820DDA30C5FB5580027C94CB2D1CC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 45
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: dGhGtCSEHvS/7H3OinfnQP6XOiuRktg4/iVnksimYDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:a3:0c:5f:b5:58:00:27:c9:4c:b2:d1:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=4dcac28f6bb37f1f6946332792f21b68bb69e851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:d9:9e:71:0c:41:69:d5:33:24:7e:79:02:
07:ee:af:39:22:3c:60:cb:54:8a:7d:0a:60:da:75:
5f:e6:df:04:fc:2a:75:cc:a6:65:7f:be:6b:33:1c:
47:b1:cc:07:bf:a7:53:fd:54:15:c3:19:65:93:13:
4c:bb:ec:a5:8d:f5:1f:e0:05:39:7e:07:16:10:38:
c1:93:f1:3d:52:2a:d5:d4:ba:f9:0f:b7:ff:0d:3c:
ef:e6:d5:e7:dc:e1:57:af:a3:61:70:3b:e7:00:d2:
c3:a2:e9:53:b9:9c:cc:60:bd:1f:b9:56:97:07:16:
db:bd:6d:dc:34:4f:a4:6b:90:5c:99:30:08:b6:a9:
fd:a4:b9:c5:00:88:8e:a9:93:68:aa:1e:cf:ad:34:
70:00:3b:6e:97:8c:05:f5:50:0a:e4:23:b1:4c:78:
99:df:36:47:0e:b3:38:cd:a5:6e:a9:e2:e1:42:83:
73:5a:30:03:8e:13:bd:6b:62:6c:bc:13:08:02:12:
34:b2:ae:59:ca:61:a1:56:42:1d:e9:3b:f4:85:30:
6d:cc:dd:cd:2d:59:40:53:88:96:19:e8:06:2c:cf:
fd:43:84:5b:99:f9:7d:3e:f6:59:ef:b9:d6:4d:d9:
e0:cb:27:4f:e8:83:ee:72:50:9d:b5:80:e0:6c:af:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:C2:8F:6B:B3:7F:1F:69:46:33:27:92:F2:1B:68:BB:69:E8:51
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2d:b8:4c:76:82:0b:b9:08:f0:77:be:c0:a5:e0:d4:5c:7f:
1f:3c:dd:18:af:0d:af:25:6b:f6:12:f2:cb:51:e8:6f:5a:7d:
1a:d8:17:b2:4c:0f:b2:86:83:e2:8b:49:aa:cc:5d:d1:1e:db:
bc:7a:6a:c9:b3:75:c0:49:97:b1:53:b7:de:7a:95:e9:54:b2:
e0:f5:16:f0:07:fe:8f:33:ed:9a:35:8e:74:11:3f:bc:c7:db:
fa:fb:c4:af:a6:97:a4:75:1e:6c:ff:ee:ab:fb:7b:24:4b:fe:
ea:50:00:85:aa:6d:1d:64:93:45:eb:ea:61:91:9b:6d:84:07:
d2:98:e8:da:ea:74:27:59:c6:74:6f:c7:38:0d:c9:09:04:f5:
35:95:6d:c9:a7:c1:35:a6:fe:11:45:46:8e:a8:11:b5:ff:d2:
b9:23:13:62:c5:a6:4f:ac:82:36:47:e6:83:9d:9c:93:f9:9a:
9f:5f:43:25:62:81:33:31:2d:7e:dd:2a:5f:39:05:e6:22:82:
36:4c:2e:26:cb:48:4a:cc:23:28:d5:22:7c:e9:2a:49:d7:00:
b4:f5:da:1c:89:f1:76:df:45:f3:b8:1a:b7:50:a9:30:2b:2e:
0a:6d:06:c4:dc:a7:f3:e4:29:22:d2:a2:15:66:f1:bc:04:bf:
be:6d:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:45 2025 by rpki-client