Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: 0rMWC9cs1izty9F396snjxTajbGrrBF84L0YyGS0jPY=
Subject key identifier: 19:AD:FB:CC:FC:7E:98:03:DB:DA:B9:E1:14:4A:FB:E8:66:F5:B6:F8
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 019846D2889670F6F905AD0A97503279AA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 04FB
Signing time: Sat 26 Jul 2025 13:00:59 +0000
Manifest this update: Sat 26 Jul 2025 13:00:59 +0000
Manifest next update: Sun 27 Jul 2025 13:00:59 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: 41sftcSFn4j1syZdwE9fjMdhZYSVvVOdAssn2MnS9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:88:96:70:f6:f9:05:ad:0a:97:50:32:79:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Jul 26 13:00:59 2025 GMT
Not After : Jul 27 13:00:59 2025 GMT
Subject: CN=19adfbccfc7e9803dbdab9e1144afbe866f5b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:cc:7e:16:a4:43:40:a7:37:1d:b5:5f:aa:
da:14:bf:40:3c:21:f7:b9:74:40:8e:59:0a:2e:92:
74:37:8f:eb:55:c0:15:b2:a2:4b:36:f7:b9:88:6e:
b6:be:53:33:12:10:e0:58:eb:dd:c1:92:64:ef:50:
11:ab:4c:4d:57:31:35:dc:b6:50:14:ca:53:7c:3e:
d6:10:07:ff:7b:c0:c0:72:9d:9d:54:11:90:c2:16:
5d:9b:6a:79:fc:59:89:64:81:45:14:a4:0a:22:76:
dc:b9:a0:34:20:62:ae:f8:e9:c8:77:cd:db:50:ed:
d9:f3:ac:89:ab:97:82:a2:b5:ff:59:a0:3b:35:d9:
c9:65:a9:b1:ab:bb:57:d7:00:c6:32:89:5d:bd:bc:
e3:30:fd:a6:8a:fd:24:5b:08:3d:29:bb:0f:ae:24:
68:d5:bc:cb:d3:94:46:3c:7d:9a:ca:e2:13:3d:bc:
3e:69:c6:20:2d:d6:eb:e4:00:b3:98:5f:64:05:b2:
94:92:1b:d8:72:07:55:26:3e:8a:66:39:90:43:4e:
dd:cd:b6:56:7f:54:22:fe:42:46:ef:56:86:85:57:
41:7a:0e:58:69:0a:5c:25:06:26:3c:09:38:b6:ed:
d7:aa:5d:31:22:bf:94:a9:86:5c:fd:8a:e9:86:01:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:FB:CC:FC:7E:98:03:DB:DA:B9:E1:14:4A:FB:E8:66:F5:B6:F8
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:31:0b:18:97:ca:4b:14:0f:ff:13:9a:b0:f9:45:ce:fa:
1b:cd:21:f9:72:64:79:8e:e7:d7:85:85:37:6b:c5:01:3b:66:
93:4e:f8:78:81:b2:15:6d:c8:b0:98:88:fe:c2:2e:ae:76:31:
55:cc:96:ef:ed:22:ff:cc:13:4f:87:46:f4:83:7b:cc:ba:b9:
93:c0:88:3e:79:0c:87:53:ea:51:f3:fc:02:89:e5:c9:be:6e:
5b:2c:57:e9:6f:6a:b4:0b:99:ca:d8:d9:33:ec:ba:82:6f:3d:
78:35:17:c9:f6:97:8e:9d:14:82:77:18:46:1d:6e:c9:77:d8:
45:9f:30:43:c0:39:6c:f2:ed:6c:f2:d0:a3:a9:55:09:76:23:
3d:38:a6:a1:fa:87:f0:70:b0:1f:b4:e2:27:a6:be:29:ed:cb:
1b:8f:11:15:e3:c6:66:33:3c:30:ad:9a:f1:89:7b:41:ee:03:
6e:59:a3:6f:b6:ae:87:3f:2e:bb:83:a5:eb:84:0b:75:7d:a4:
d8:cf:f0:d0:0f:52:89:35:91:cb:ce:1f:91:cb:62:15:92:71:
9f:76:ab:37:b3:c1:20:1d:21:5a:1f:78:f9:d0:e1:d4:14:bc:
7d:2b:4c:8e:a9:67:9e:4d:fa:fa:f9:47:64:12:fc:60:62:fe:
74:46:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:10 2025 by rpki-client