Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: +gOZl6vzbkSkaU3vGQB8PSZ7Taro/zo1Q1D94qi4CQk=
Subject key identifier: 8D:3B:E8:DF:78:16:F0:FD:2C:AD:FF:3C:4E:1D:76:2B:CB:FE:DA:BA
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 0198D5BC268682B1BFFD40081E0E351D37ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 053E
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: 6C/FGNBbm+7TU7EgJS/6nz3/3P7AI8YvexsdTsOK1sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:26:86:82:b1:bf:fd:40:08:1e:0e:35:1d:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=8d3be8df7816f0fd2cadff3c4e1d762bcbfedaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:8a:fc:49:ab:96:97:1c:43:cd:0f:4f:35:
ca:ea:d1:46:24:e4:b8:5a:22:b3:02:bb:5e:73:67:
1e:06:37:d0:d3:b1:10:a4:79:bc:20:fc:45:d4:d1:
48:4f:bf:86:91:e5:fe:17:72:77:6a:0b:9a:9a:aa:
3c:40:f9:aa:76:4d:66:2c:b2:6e:cd:fe:4d:4e:0e:
0e:d4:c1:4c:d8:2e:7d:50:3f:ff:52:91:ed:93:4d:
9f:96:e8:49:50:dd:6f:27:1c:dd:6d:db:52:16:8a:
42:86:cc:a4:a8:68:12:e3:9f:57:24:ca:fc:14:40:
3e:f2:a9:8f:51:a4:86:79:18:02:cd:3c:e6:c2:77:
58:c0:cf:e3:34:c5:63:ef:f5:66:24:a8:1b:e9:85:
82:57:12:4f:36:c5:05:ba:4e:8e:0f:0e:e1:2f:a0:
40:4d:b1:ca:51:f9:e8:12:1b:11:ba:2b:bc:50:85:
cd:9a:21:e3:7a:83:6b:1f:54:74:1b:4e:c0:26:cb:
82:3d:48:ff:73:b8:0b:14:b9:0f:9c:a4:29:a7:be:
6e:58:ea:e3:5e:01:58:18:41:96:15:2d:8a:70:2f:
d3:fd:f6:38:b5:7d:87:21:52:09:bb:a3:1c:06:6b:
e0:fd:ec:9f:8b:59:be:4e:2e:b2:f0:75:19:c9:b1:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:E8:DF:78:16:F0:FD:2C:AD:FF:3C:4E:1D:76:2B:CB:FE:DA:BA
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0b:9a:3a:1b:e6:73:bc:3d:40:3b:92:78:15:8f:af:78:5e:
04:78:4f:b9:fc:e2:7c:b9:92:10:5e:1b:71:55:31:87:84:26:
3d:fc:95:52:03:08:7a:74:7b:f0:23:85:b9:7b:d1:c6:2f:a7:
01:ab:c5:c9:e4:ea:46:fd:5e:ec:90:c8:54:51:6f:72:68:34:
06:0b:f3:a9:50:0c:f0:13:a6:a1:5b:22:ee:b8:f1:21:70:26:
4f:f7:53:9f:98:64:e5:cd:ac:08:9d:2c:e0:64:50:08:9a:1e:
5d:45:9d:f0:e1:e8:c4:36:a8:96:5a:82:58:14:e2:48:03:c5:
8e:a8:8f:18:74:93:7c:d7:9d:5c:24:0e:20:1b:eb:cb:ea:d8:
9f:35:fe:71:4e:61:64:52:5c:a6:cb:b0:91:ac:1a:d1:e2:be:
db:44:a2:6e:a7:0c:a6:11:3d:f5:18:96:49:7a:2a:51:30:c4:
a8:09:da:82:d4:36:ea:89:98:6b:61:67:fa:57:e6:1a:27:0d:
28:8c:a9:4b:b7:96:d0:4a:07:40:36:b1:6f:fc:b3:1e:b4:87:
5c:9d:ef:8e:1a:5c:6b:c2:90:9d:d6:eb:49:4e:9d:e5:63:3e:
7e:cb:ad:6a:f6:15:00:be:20:7f:58:fc:d5:30:15:5b:09:91:
97:48:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:07 2025 by rpki-client