Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: mRwTGq9U7qAjzWbW5NLm8d9XM1yomSnMDdhRnsAa7wI=
Subject key identifier: 92:F4:5F:DD:56:A7:24:8C:8D:C4:98:CB:AE:3D:FE:A1:99:08:35:8C
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 0198D6CD60BDE70CB215F053B9B46E8D6262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 03AF
Signing time: Sat 23 Aug 2025 12:00:40 +0000
Manifest this update: Sat 23 Aug 2025 12:00:40 +0000
Manifest next update: Sun 24 Aug 2025 12:00:40 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: +xnMGc4Lj49Qp/m+dwZQuCvIx/X036u/feusIYzbpec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:60:bd:e7:0c:b2:15:f0:53:b9:b4:6e:8d:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Aug 23 12:00:40 2025 GMT
Not After : Aug 24 12:00:40 2025 GMT
Subject: CN=92f45fdd56a7248c8dc498cbae3dfea19908358c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:c4:63:37:27:06:f6:eb:f1:18:a4:f0:f0:
b7:6e:47:33:da:2b:d1:c7:42:56:a8:99:1d:62:2f:
79:35:d9:5e:a0:02:61:53:d1:a4:56:b3:d5:08:ee:
27:06:e3:75:7e:4f:13:96:af:16:48:50:94:07:2f:
0b:cb:8f:09:79:ba:72:80:a7:45:31:89:43:54:36:
4d:be:93:6a:f3:9e:f1:fa:b6:df:c5:50:8e:93:1b:
15:8c:30:b9:1b:1f:bf:28:c0:9e:64:e5:9c:c9:ad:
b7:4c:09:5a:ea:d8:9b:5b:be:3e:9f:5b:5b:03:48:
57:3b:c0:d2:14:8f:64:f2:bc:6c:5c:27:ed:4b:c7:
df:52:67:41:6e:02:eb:86:59:25:cd:46:d8:db:b4:
7d:f5:d5:e5:1b:d4:f8:c0:5a:fc:7b:13:d4:6d:8e:
34:1d:f3:8e:4c:32:64:d3:e8:96:48:7b:01:13:60:
ef:27:f1:c7:3c:67:35:85:27:87:b1:eb:d4:47:81:
c6:35:19:b3:46:34:05:b3:92:bf:93:54:f4:1c:c4:
3f:12:8d:3f:ac:cd:7c:1b:26:fa:95:58:f8:a8:8b:
10:c3:7a:24:d5:38:cb:08:30:fb:55:ff:84:36:25:
ec:35:cf:a6:23:6b:80:45:36:8c:cb:8f:65:db:4f:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:5F:DD:56:A7:24:8C:8D:C4:98:CB:AE:3D:FE:A1:99:08:35:8C
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:f4:63:4c:92:ee:dd:05:9b:15:24:b2:91:77:a0:95:65:
c9:5a:c4:10:da:31:41:8c:9f:eb:69:f4:96:d3:82:3f:7b:aa:
4e:c2:32:93:44:d9:24:e8:69:15:5b:eb:68:79:59:44:81:d1:
75:08:7b:09:e6:51:9f:5c:2e:6d:b0:92:fa:95:78:7f:e0:30:
f7:67:79:fe:cc:2a:8b:b7:99:e1:9f:7b:f5:4f:c5:c2:66:dc:
a0:b0:2e:e6:f3:37:9b:51:6a:2b:99:5c:cd:92:c4:da:31:83:
b9:87:a3:10:a5:fc:be:68:d5:54:20:4b:9b:7a:b1:de:bf:5b:
19:41:5e:3f:05:ea:fa:5b:38:31:b7:d1:b7:95:0a:f5:2e:ca:
9f:d3:fd:4e:0e:f0:41:66:c4:c2:53:1b:5e:49:cd:1b:30:21:
57:67:40:37:4d:ca:10:07:ce:f7:ef:93:54:88:a7:ec:0d:bb:
22:81:c7:2d:09:05:52:82:5d:9d:bc:c4:34:f6:f4:bd:c5:49:
0a:fc:0c:03:ff:14:96:4c:d9:ec:f2:ea:db:83:fa:ec:95:85:
41:62:fe:a6:39:9b:57:a0:fb:fa:3d:fb:b8:fb:c0:63:9c:63:
e2:e4:b2:61:db:7c:97:99:db:6a:11:db:bc:4e:9b:f7:35:d9:
e5:62:52:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzWC95wyyFfBTubRujWJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGUwMjk3M2RjMDVlYzNjNmJiZjZlNTdiN2Q2YTRjZWVm
ODE4NWUwHhcNMjUwODIzMTIwMDQwWhcNMjUwODI0MTIwMDQwWjAzMTEwLwYDVQQD
Eyg5MmY0NWZkZDU2YTcyNDhjOGRjNDk4Y2JhZTNkZmVhMTk5MDgzNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TfEYzcnBvbr8Rik8PC3bkcz2ivR
x0JWqJkdYi95NdleoAJhU9GkVrPVCO4nBuN1fk8Tlq8WSFCUBy8Ly48JebpygKdF
MYlDVDZNvpNq857x+rbfxVCOkxsVjDC5Gx+/KMCeZOWcya23TAla6tibW74+n1tb
A0hXO8DSFI9k8rxsXCftS8ffUmdBbgLrhlklzUbY27R99dXlG9T4wFr8exPUbY40
HfOOTDJk0+iWSHsBE2DvJ/HHPGc1hSeHsevUR4HGNRmzRjQFs5K/k1T0HMQ/Eo0/
rM18Gyb6lVj4qIsQw3ok1TjLCDD7Vf+ENiXsNc+mI2uARTaMy49l209XMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL0X91WpySMjcSYy649/qGZCDWMMB8GA1UdIwQY
MBaAFJTeApc9wF7Dxrv25Xt9akzu+BheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2Qt
ZDQ5ZDFmNTczOWVkLzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2QtZDQ5ZDFmNTczOWVk
LzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBv0Y0yS
7t0FmxUkspF3oJVlyVrEENoxQYyf62n0ltOCP3uqTsIyk0TZJOhpFVvraHlZRIHR
dQh7CeZRn1wubbCS+pV4f+Aw92d5/swqi7eZ4Z979U/FwmbcoLAu5vM3m1FqK5lc
zZLE2jGDuYejEKX8vmjVVCBLm3qx3r9bGUFePwXq+ls4MbfRt5UK9S7Kn9P9Tg7w
QWbEwlMbXknNGzAhV2dAN03KEAfO9++TVIin7A27IoHHLQkFUoJdnbzENPb0vcVJ
CvwMA/8UlkzZ7PLq24P67JWFQWL+pjmbV6D7+j37uPvAY5xj4uSyYdt8l5nbahHb
vE6b9zXZ5WJScw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:43 2025 by rpki-client