Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: lYQwThiPxUeer97tKnpZuc/j1Ln/2KHLuD0JVe+z4Rc=
Subject key identifier: BB:D4:79:E5:5D:DB:B3:3E:B4:AE:5F:97:79:C3:16:7B:54:D7:49:EA
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019848C068263F29444EB15B0929CBF6EAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 04F5
Signing time: Sat 26 Jul 2025 22:00:25 +0000
Manifest this update: Sat 26 Jul 2025 22:00:25 +0000
Manifest next update: Sun 27 Jul 2025 22:00:25 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: nAib6Z1ZG0tpdl8T9LfuufYzZSdYo6d9D0oCDIk5fGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:68:26:3f:29:44:4e:b1:5b:09:29:cb:f6:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jul 26 22:00:25 2025 GMT
Not After : Jul 27 22:00:25 2025 GMT
Subject: CN=bbd479e55ddbb33eb4ae5f9779c3167b54d749ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:9b:ae:24:91:07:53:98:fe:c6:d0:e4:ac:
ae:ba:3c:e1:91:2d:be:62:fd:44:c8:77:07:e4:30:
a1:53:b5:61:4a:92:43:3c:92:14:e8:c9:85:78:d4:
61:17:83:b1:76:c7:95:4c:6f:8c:a0:7f:52:19:07:
08:9e:76:b7:4c:88:59:a2:bc:b9:8e:2a:66:e9:0d:
5f:1d:75:dc:9d:85:a3:7b:31:6d:a9:c2:86:d3:34:
d3:6c:49:4d:e5:f8:65:e0:51:7a:5f:cb:5c:65:5a:
41:fa:d4:d4:8c:99:a5:db:13:28:de:75:fd:8e:f9:
1e:53:65:ba:e8:e0:fb:86:b4:3c:d4:7c:31:86:d2:
79:82:5c:b3:47:e8:14:52:31:8a:98:ff:d8:6d:2d:
02:8e:7a:b4:24:75:64:ce:4b:08:dd:b7:e4:87:69:
c3:90:98:7f:52:7d:4c:47:f4:7b:af:50:0b:a5:53:
70:f1:5d:ed:5c:1c:a5:0d:87:c7:2c:a1:8c:7f:27:
8b:16:08:02:d5:ad:1c:fc:6d:f2:c8:f7:a3:c1:bc:
bb:c6:8f:d8:e6:4c:3f:34:c2:00:bd:29:a3:9c:56:
bf:fe:62:f0:78:15:0a:b1:71:41:7d:db:e9:60:3d:
71:30:7e:40:ff:e7:71:63:6d:90:42:2d:17:75:71:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:79:E5:5D:DB:B3:3E:B4:AE:5F:97:79:C3:16:7B:54:D7:49:EA
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:97:8e:6e:33:41:d5:75:5f:3e:d1:4c:af:e4:25:38:c6:
aa:29:77:00:e7:9b:52:a1:97:90:59:4a:6d:a9:7a:87:be:92:
36:3c:93:96:11:e5:be:14:65:2d:ae:65:07:a0:be:91:bb:fd:
23:8b:38:0d:11:f5:b7:db:5f:f5:5e:c8:db:b4:e5:ef:6d:e7:
74:2f:33:fb:5d:0b:6c:95:f6:96:db:ac:19:81:3b:2f:91:53:
60:7f:8d:5d:d1:0b:ee:ba:9a:4f:26:9d:e5:26:58:ce:c0:d0:
b2:bf:8f:fe:8d:a1:7f:3f:5c:3b:e4:d6:fe:ed:59:e6:5e:6d:
48:29:df:3b:7c:48:48:b0:4f:b4:c1:02:1c:50:4c:6d:67:69:
9b:ff:e2:0b:21:c9:ad:69:16:c8:94:3d:bf:d3:02:d1:c0:db:
f9:c5:69:c4:8c:c4:17:5b:ab:e0:20:b7:7b:14:55:14:a1:ba:
14:33:69:f7:3d:82:b1:e6:d1:71:cf:db:71:13:53:83:b6:8c:
05:57:ca:11:17:c2:36:56:9d:c6:80:7b:5c:80:30:02:ba:28:
51:fc:f0:eb:a6:07:bd:1e:47:01:b4:57:09:c7:67:94:1f:1b:
eb:52:b2:ec:e6:5e:84:3a:a2:13:2f:ef:96:47:d7:76:8d:66:
fb:1e:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:04 2025 by rpki-client