Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: d9dexqzfLTfGQls5w+0shTZCWB+u/L9nVYBmu8D09VQ=
Subject key identifier: 98:9F:BC:B8:95:F4:9E:32:35:63:2B:4E:6A:D6:FF:A3:6B:E9:58:75
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 0197B7EABC3232074D4B4499C05E5C856E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 04AA
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: PE6PEaOWdaWTx/7sqXXUikWrP2UprRLYNx6h7z47Xs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bc:32:32:07:4d:4b:44:99:c0:5e:5c:85:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=989fbcb895f49e3235632b4e6ad6ffa36be95875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:b3:99:b9:20:3f:8e:7c:2a:1c:77:d0:82:
db:35:67:42:b3:d3:39:ee:f4:6c:a6:fb:6d:9b:3a:
94:fc:0b:75:b9:0a:f7:f6:0e:51:23:08:b3:13:81:
6c:e5:ee:38:6c:3e:5d:82:9f:b6:3b:09:b4:80:ae:
7a:8d:54:b6:a1:c6:e2:d9:00:f4:83:95:8b:f4:8d:
3c:17:5e:1b:34:67:80:c5:5f:5b:c7:96:b2:5c:6d:
0f:5c:9e:6f:5f:20:a2:70:d8:4f:52:69:f3:ce:e4:
e2:41:48:0b:2d:7e:d3:45:a3:c7:f5:a5:93:31:5e:
38:7e:1d:9c:87:b0:49:65:21:ba:12:c6:56:76:3d:
1c:7e:55:92:04:45:07:21:4e:0b:b0:07:72:3e:28:
3f:57:01:6f:97:0a:a2:e9:2c:b0:17:f9:69:69:e1:
d3:fb:0f:a6:f0:e9:7b:49:78:59:41:0b:48:88:97:
3f:c3:74:cc:73:30:7b:29:cb:4a:c4:7a:f3:a0:11:
e5:8f:36:78:8f:68:ae:47:a1:b6:96:aa:e1:a6:d5:
5d:8c:07:90:4f:0d:49:df:12:99:59:b7:5c:cb:f1:
3c:81:f3:fc:ea:fa:1d:c5:4f:93:20:0d:cb:8e:07:
d2:de:d7:34:b9:2d:ec:a5:09:11:43:c4:af:ec:2e:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:BC:B8:95:F4:9E:32:35:63:2B:4E:6A:D6:FF:A3:6B:E9:58:75
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:05:ab:81:3b:94:79:0f:61:b0:66:c7:e7:10:82:c7:7b:79:
50:83:f0:9f:71:9e:02:95:d8:33:8b:b9:cf:8c:0a:2f:db:b2:
54:ff:75:2b:56:fb:52:b1:f0:9e:80:58:53:92:28:cf:62:ff:
b6:a6:0e:fb:b0:69:22:97:15:f2:42:6e:63:c6:9b:c5:47:f0:
d0:1c:be:42:bb:7f:15:8b:49:9d:4b:b2:10:ef:fc:9c:32:e7:
6b:d3:72:6b:25:57:d7:a4:73:af:80:13:69:be:ad:44:14:9e:
38:ab:ea:7a:9f:8c:ab:6b:64:22:45:10:f3:45:58:be:b4:c5:
9f:f8:89:91:cc:31:4e:13:c4:62:95:61:1e:a9:a7:20:e2:c3:
73:39:d7:fa:cd:15:8a:fc:ba:73:43:35:0b:72:80:b9:3e:c6:
02:cb:b7:18:c2:61:40:33:c9:40:30:ca:d3:c3:05:d0:61:1d:
fd:49:03:8b:a8:7c:d3:05:4f:65:c7:39:6c:4c:f0:37:42:42:
20:f6:8b:7e:dc:a7:80:92:f9:82:a4:dc:ec:ac:57:9a:8e:d4:
dc:b2:0c:0b:40:e4:90:c9:93:61:4f:21:d5:f3:03:c0:bb:8e:
5d:fe:4c:17:59:35:f3:32:77:78:96:4f:98:da:53:5a:69:c8:
a0:8b:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:42 2025 by rpki-client