Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier: CGDM7hyDWgXKx8wgGDT2jHV1QVucS34i+da+v5cPGKw=
Subject key identifier: 50:4D:5B:18:FC:02:CA:14:EF:F9:43:34:7E:3B:17:E4:61:8A:99:4B
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial: 0197B820E95202D1AF9FCAE8AC19FBD89B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number: 048D
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: ZVXU0rgVCdTCgixwZORetrUGkr7FrI+ap23NZm3gRjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e9:52:02:d1:af:9f:ca:e8:ac:19:fb:d8:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=504d5b18fc02ca14eff943347e3b17e4618a994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:5f:6b:ae:da:cf:a7:54:ff:04:04:df:34:
ed:2f:24:51:5a:26:0e:f3:57:c7:74:c3:7a:1c:7c:
be:b9:de:ed:7d:76:ac:8c:31:47:29:c4:2f:b3:92:
2e:e3:fd:2d:2b:c9:db:f5:12:19:61:09:2e:4a:03:
0e:ec:77:5c:df:a2:a9:af:3a:c3:98:78:dc:c8:00:
0a:39:f0:1a:8a:c4:a2:95:a9:9c:2f:8a:ec:2e:0f:
fd:16:c1:d4:4e:49:bc:86:8c:be:ff:70:07:50:15:
af:34:cf:f4:73:18:2f:58:4b:c0:17:31:a7:62:01:
cb:be:6d:08:0f:73:9d:ef:ba:58:2c:b1:6c:d8:a7:
48:ea:0d:97:16:96:9f:e2:3c:75:91:e5:8c:99:7c:
b4:d3:b7:4e:10:80:8a:ff:f5:e9:e5:d8:e5:59:5c:
6e:b8:f0:e7:0e:ec:78:13:f9:53:de:7d:17:53:75:
b9:b4:b1:76:6f:06:12:f1:84:d1:0e:4d:98:39:2c:
04:f7:6c:bb:67:da:c4:c9:ab:97:52:e3:e4:c1:63:
10:eb:c8:4c:ea:93:de:06:3c:9c:98:9b:93:b0:52:
4b:df:d5:e5:e1:e8:a5:66:10:72:c7:6d:7e:f8:da:
ac:fa:e3:f3:1e:8a:f8:48:51:9c:1c:bc:2e:af:af:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:5B:18:FC:02:CA:14:EF:F9:43:34:7E:3B:17:E4:61:8A:99:4B
X509v3 Authority Key Identifier:
keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ad:c9:5a:e5:ca:6e:35:c2:34:83:f6:0e:ca:9b:f8:dd:ef:
12:dd:59:6b:70:f0:29:92:f1:98:c0:b2:49:7b:bc:84:f1:1a:
d4:96:90:a4:75:72:ae:0a:b5:cd:5c:68:0f:ac:1a:7a:52:0c:
72:a0:ac:45:ca:57:7e:e1:b5:b0:f0:f3:c0:05:bd:bd:74:b4:
44:10:e2:83:ea:f2:ea:e3:47:90:73:c4:d7:f4:b3:2e:ea:33:
f4:b6:dc:a3:61:4b:cf:5b:3a:27:77:63:3b:66:28:4b:70:b4:
8f:15:f1:ce:17:d2:78:e7:81:72:2a:2c:a2:a2:42:41:49:2f:
ec:46:38:e4:c0:db:09:a9:f9:4b:da:8f:28:95:e0:24:b3:cf:
70:ea:aa:84:bb:97:8d:2d:a3:e6:45:ab:c5:19:96:40:9e:1b:
39:70:86:53:99:e5:c6:1b:c9:50:ed:f6:e7:02:eb:ac:14:22:
9e:21:b0:80:43:48:12:1c:1c:bc:c0:b3:f0:a2:0b:02:16:c6:
ba:60:af:e7:57:9d:96:f8:d9:60:12:05:39:ac:b0:99:21:e2:
bd:81:b0:63:a5:e3:8b:ce:48:df:cc:fe:b8:48:08:38:c4:34:
01:f7:32:75:a6:d3:34:75:f4:7d:76:e5:76:db:23:55:cd:c5:
97:69:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:59 2025 by rpki-client