Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: ZV48zkU25iIuPiGe4ZHvm4iuEnIvwcOo4twXnT/bxlg=
Subject key identifier: EF:19:24:39:DF:C6:DE:FF:1B:44:88:AD:99:4D:69:EE:72:44:0A:E4
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 0198D4740DA7030ADCC1E3EFA3F69DC7EF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: hBPX2jZzqMo36rM1OYGtAvdN1STePbG+bWvUhQ4qGVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0d:a7:03:0a:dc:c1:e3:ef:a3:f6:9d:c7:ef:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=ef192439dfc6deff1b4488ad994d69ee72440ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:c6:d8:2a:ca:db:5b:66:be:20:d5:d1:70:
04:89:e9:f9:27:e5:7a:c8:6f:a8:ef:22:5b:cd:33:
40:97:32:85:9a:44:4c:c2:81:40:e3:b4:66:d9:9a:
0c:f5:bf:44:e6:c9:f1:b1:8c:01:b0:4d:6b:49:80:
7e:c6:52:cd:3d:4e:bc:a9:39:e1:46:ef:c8:c3:63:
5c:ab:80:7a:6f:e4:29:28:41:d5:05:c2:3e:59:84:
3a:42:84:b5:01:a1:c1:8f:38:dd:db:ea:01:9a:43:
3e:3e:b0:46:b0:33:7f:0e:e3:44:cc:0f:77:8c:88:
06:c9:49:cd:21:57:6f:7f:66:01:a2:1c:f9:7e:ff:
c3:64:ff:ce:95:46:1e:2e:9d:68:be:f2:b2:69:80:
29:50:ea:64:02:ae:1f:a0:55:25:a6:91:f6:f2:34:
5f:35:fe:32:ed:5f:11:17:9a:ee:5f:89:a0:56:5e:
d1:02:61:e3:9f:f9:ba:b7:a4:ec:70:09:dc:80:70:
60:89:55:ff:c4:10:6c:0b:52:f3:6f:77:29:a5:00:
3a:19:60:8e:e8:86:fc:50:62:61:a2:43:4f:3c:f8:
b6:e1:da:86:6a:43:a8:c0:c8:e9:3d:09:88:b0:42:
c3:36:db:28:66:03:33:93:eb:30:f4:30:92:b4:1e:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:24:39:DF:C6:DE:FF:1B:44:88:AD:99:4D:69:EE:72:44:0A:E4
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:c5:ac:c0:75:16:db:9d:71:54:7c:70:3c:68:be:ed:fa:
92:14:52:15:ca:dd:bf:a5:f1:8d:b7:5b:82:12:cc:a9:58:35:
d3:3d:88:86:fb:a4:93:af:69:4b:2a:b5:d6:bc:8c:67:b9:e3:
a4:7d:60:0e:a7:60:2b:45:ed:0b:7d:11:20:cd:0b:e5:df:5a:
9c:65:32:e6:19:94:26:6a:14:f8:f9:c1:d2:d0:51:31:96:44:
41:82:59:f6:76:bd:61:24:53:7b:23:82:cf:8f:51:d2:bd:31:
19:27:7a:03:ae:b2:71:02:06:82:8e:d8:17:e4:ff:c0:d8:94:
35:e7:0f:45:c5:d3:2f:e3:6d:7d:ec:c4:85:8b:49:60:9f:cb:
44:10:4b:c4:41:cf:05:0e:df:4b:91:7f:02:37:cb:bb:70:3c:
4d:56:b9:d4:2d:ce:15:b6:c7:e7:b0:27:4a:06:38:36:a8:27:
00:c4:fc:d9:21:7c:13:5c:db:ff:84:c7:e6:09:1e:10:11:cb:
80:93:74:0f:57:3f:ac:ff:25:54:dc:e6:c6:b8:ef:9d:a7:e6:
2d:95:3c:98:03:01:d8:98:c9:81:67:37:f3:7e:da:07:ff:9d:
d0:03:f7:86:34:50:a5:03:f0:53:46:0e:ab:05:07:42:b9:af:
4b:7a:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:21 2025 by rpki-client