Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: KUL8Lah8ySxbActe3Hni4cd7bcfUzdDg9IPhMtys7kU=
Subject key identifier: 58:42:7C:02:2C:CE:53:F0:DB:AD:21:0F:D9:88:72:BF:D3:8A:6E:E9
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 0198D583648308B20D612D97F13CA475FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: zgjcdigw/4BcfwvnE1XlD5iBPpsXSN6nJc6O61hV+9M=)
2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:64:83:08:b2:0d:61:2d:97:f1:3c:a4:75:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=58427c022cce53f0dbad210fd98872bfd38a6ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:92:32:a7:a2:c5:af:c4:eb:55:9e:6e:76:
d8:da:08:12:ea:99:ec:56:f2:a7:43:06:f9:51:0a:
12:df:cf:8e:9f:37:79:ad:e8:18:03:79:92:52:e6:
1c:71:26:76:91:23:c5:ab:12:67:21:cb:92:31:6a:
db:8e:54:6d:f8:68:ca:6e:77:3e:a7:3e:35:31:83:
9f:1c:ce:e0:1f:36:43:1b:c0:05:b8:d3:44:b0:0c:
bd:b7:6a:03:c5:df:44:01:35:f9:29:f1:e8:1d:f2:
e4:79:7a:d1:f8:67:8e:cf:10:f8:4c:00:3f:fc:ee:
41:6c:88:12:5f:d2:51:b9:4f:f3:a4:6a:ce:7d:31:
11:9f:55:3e:0c:6a:1f:de:73:4a:a2:a9:e2:64:d5:
fc:30:1b:ba:9b:04:10:70:2b:13:11:be:60:8e:ea:
61:26:b9:e1:b5:cd:b9:20:78:1b:d8:1a:d7:f9:6a:
a4:7b:0e:fc:ef:4e:a4:1f:5b:e3:3a:7a:b4:f4:8d:
21:6d:11:50:ec:e1:0b:d5:ea:67:e1:e7:25:f3:8f:
64:1f:3a:96:a7:8c:f8:f2:40:f1:62:49:8d:21:8b:
cc:e6:c4:51:40:6d:4e:28:ac:9c:c0:96:2e:5e:12:
d9:2f:3f:78:ba:54:c0:3b:4e:cc:83:5d:bb:c4:7f:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:7C:02:2C:CE:53:F0:DB:AD:21:0F:D9:88:72:BF:D3:8A:6E:E9
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e8:35:7c:99:5b:48:59:45:65:40:3b:cc:8d:46:37:6b:43:
3c:b6:87:d5:25:e1:b0:94:8d:f3:ee:11:22:67:62:fa:59:1b:
75:29:9c:43:bc:e6:a5:7e:29:52:dd:97:ac:aa:fd:72:b9:04:
df:bb:d2:02:6a:07:83:3a:ca:2e:45:37:40:18:34:d7:5a:4c:
3c:a9:aa:b7:11:15:2a:aa:16:c3:c2:99:b0:07:68:68:20:82:
81:24:24:b4:9f:97:c4:67:c0:41:79:ac:c4:bb:38:07:18:e4:
fb:a0:1a:f6:9b:bd:af:2b:ce:fc:7b:1e:7e:e0:b5:9c:7e:a3:
4d:64:bc:58:85:b7:6a:23:88:ca:4c:27:a9:79:e3:8d:d5:66:
2d:41:9d:b4:c0:3b:b9:c8:b9:ba:bc:02:9d:a6:61:6d:9c:9b:
c4:9d:8d:24:f6:57:4e:c1:53:d2:b5:48:7c:92:13:7f:f9:e3:
68:11:fc:9e:64:e5:7e:cc:24:c6:03:dc:ed:e3:17:94:17:4a:
ab:4a:73:df:e8:f5:01:79:17:80:91:c2:ec:be:a6:25:2f:60:
75:cb:93:cb:b1:f9:75:ab:86:13:ee:68:98:62:18:02:cc:54:
17:c7:fc:f8:b2:27:d4:20:d3:c1:e8:13:c2:33:2d:dd:55:c8:
e4:50:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:09 2025 by rpki-client