Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: zhZiEK884AgLiTisq8BQR3l8KV5aNugKEtpKME6Xju8=
Subject key identifier: A8:47:C9:DD:10:D7:AE:73:52:95:8E:9A:37:D2:3B:D9:10:E0:82:0D
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 019827B4FFC798D71F0DDC5F6EDF5415BA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 4A
Signing time: Sun 20 Jul 2025 12:00:30 +0000
Manifest this update: Sun 20 Jul 2025 12:00:30 +0000
Manifest next update: Mon 21 Jul 2025 12:00:30 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: Mmn02WOYER6ja8t6F2wqNM1bWfjxFcrJcSr86WRMbEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b4:ff:c7:98:d7:1f:0d:dc:5f:6e:df:54:15:ba:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Jul 20 12:00:30 2025 GMT
Not After : Jul 21 12:00:30 2025 GMT
Subject: CN=a847c9dd10d7ae7352958e9a37d23bd910e0820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:c9:c5:13:6c:3c:d2:08:bd:0d:d9:dd:cf:
e8:68:b4:da:83:98:d3:20:bd:91:b6:e8:ea:fd:02:
7d:44:38:b5:0d:b2:2c:4a:50:a0:f2:60:cb:6d:09:
b2:eb:62:58:d9:32:d3:a9:8a:d0:a3:db:6f:48:ad:
86:1f:78:71:61:fc:c1:c7:1c:97:39:5d:bf:28:1a:
6b:bb:86:f2:36:37:13:dc:47:cb:a2:85:21:7b:8b:
a7:63:bd:9b:18:2e:62:c2:f8:96:70:7e:1a:30:20:
fd:0c:2d:9d:41:31:7d:7e:4f:90:c0:07:84:b1:45:
21:9e:72:98:bf:1f:f3:7f:4c:77:19:d5:ee:d3:45:
78:fa:f0:56:06:09:c6:5c:6f:62:1f:7e:de:f0:1b:
d9:b4:0a:41:dd:b0:23:e9:5f:44:b4:6e:27:b6:df:
b8:a4:e5:7a:11:51:af:89:48:a6:79:79:28:76:38:
2a:1a:e2:cc:bb:d6:4b:49:c8:4a:b8:42:82:fc:9e:
ee:1a:b6:9b:bf:7d:97:d5:ea:a0:58:2f:f2:61:30:
19:b7:47:20:6e:83:7e:97:cc:22:48:64:12:df:c3:
1a:6f:75:16:36:af:3f:56:6e:79:d6:d4:a8:a1:9d:
dd:d9:93:1e:55:2b:8a:77:19:76:df:8d:8a:5b:d3:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:C9:DD:10:D7:AE:73:52:95:8E:9A:37:D2:3B:D9:10:E0:82:0D
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:4f:bd:94:a1:47:04:e1:cf:ca:ae:49:46:23:1b:5a:56:
93:81:2a:fe:2b:00:83:77:a5:17:d5:23:ba:9f:18:a6:a0:10:
c4:8b:05:7a:42:3a:dd:06:56:e5:79:88:9d:f9:f7:33:84:12:
50:0b:c7:99:fc:66:80:ad:94:19:cc:bf:bc:29:c1:5d:30:38:
80:72:4e:f1:ec:d8:6c:56:c4:09:cc:57:99:c0:44:e9:95:ae:
a4:a4:97:dd:b7:69:fb:f8:e6:b8:e5:b2:2d:18:90:d9:7a:5e:
54:cf:bf:b0:88:cd:4e:2a:b6:91:6e:b6:81:63:eb:17:c3:fe:
07:98:34:70:01:93:fe:b9:41:4a:52:82:ea:f7:b3:39:fd:5b:
66:55:bb:8d:99:d9:28:70:7b:7c:0a:29:7f:0b:ef:98:e3:61:
3d:ce:eb:d2:f1:3d:83:aa:19:80:de:93:e1:ec:f7:e3:38:e4:
41:53:be:3b:b9:fd:c0:39:34:a4:58:9d:59:31:86:e0:3c:9c:
02:b1:40:d5:72:06:6e:19:4a:7c:e4:1c:e0:82:70:3a:df:88:
b7:da:94:7c:fb:af:07:dd:8e:3d:fb:81:66:09:03:2c:8d:7d:
a5:e4:c2:b9:5a:79:bc:bc:b8:ef:61:47:a5:14:fd:78:b1:f2:
5d:9f:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:34 2025 by rpki-client