Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: G4Q/xhnqsPrV2Zo3aeh6XAIC+7uKHWo828G24zy7V5E=
Subject key identifier: 28:FB:D3:13:97:17:B5:80:3C:BF:6E:1A:E2:D0:45:DC:7C:A7:4A:69
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0196452009E22DF27518C98CDFEC053D6BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 03F1
Signing time: Thu 17 Apr 2025 19:00:49 +0000
Manifest this update: Thu 17 Apr 2025 19:00:49 +0000
Manifest next update: Fri 18 Apr 2025 19:00:49 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: dMEOL0JpqsKad+kFzOCx++4g55xxLdG7iAWlP9ZqhZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:09:e2:2d:f2:75:18:c9:8c:df:ec:05:3d:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Apr 17 19:00:49 2025 GMT
Not After : Apr 18 19:00:49 2025 GMT
Subject: CN=28fbd3139717b5803cbf6e1ae2d045dc7ca74a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:bd:2b:7d:37:5f:34:9f:0b:a8:a0:7b:ce:
1d:e9:f6:73:7b:52:d1:0e:aa:c7:31:ee:87:c4:6b:
fe:85:f9:2d:d6:b5:c1:79:b1:de:ac:20:3a:5d:ca:
62:14:90:1e:a3:db:60:27:0d:35:7b:e1:0e:ed:99:
2e:fc:3c:89:e5:62:4e:6c:6f:69:63:ea:fe:e6:2e:
0a:cb:07:6b:7e:d9:6c:80:4b:bb:c3:99:8f:3f:51:
96:e5:59:0b:18:d2:92:db:03:73:d1:d6:18:83:57:
9f:be:ad:e2:90:f4:7b:0f:e9:03:f0:18:e9:70:bb:
d8:40:e2:55:b2:f4:4d:fc:2d:10:b0:f6:f9:1a:47:
fb:19:4b:40:c8:e5:35:a4:d7:96:24:63:bf:8d:0b:
19:c0:79:b8:42:07:c4:d2:f5:1b:7d:fe:76:6d:a6:
8c:be:e1:19:c4:4f:bb:cd:4a:2b:7a:50:2f:3f:02:
c1:5c:d1:6b:82:1d:ce:1b:76:98:0a:b8:c8:a3:d9:
17:0b:37:34:6f:18:e1:d0:d3:e0:4b:6f:9b:39:4a:
70:ac:f3:3d:eb:7b:d8:ea:2d:d2:6d:e1:1e:dd:4b:
4b:25:28:a9:ba:2f:20:95:01:bc:4b:23:6a:f3:21:
4b:35:a2:e1:f4:0a:98:dd:7b:40:39:ed:fd:0c:a5:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:D3:13:97:17:B5:80:3C:BF:6E:1A:E2:D0:45:DC:7C:A7:4A:69
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:48:4e:ac:aa:51:d0:b7:2a:5d:eb:ee:ac:ea:20:e6:40:9f:
cf:57:fe:22:e5:e5:6b:01:49:1d:3e:f7:9e:70:02:01:57:04:
65:11:24:e5:81:84:15:63:15:76:ec:2a:89:7b:81:fd:31:f2:
41:0b:eb:48:d2:af:33:44:8b:e7:4c:54:ea:39:e4:09:bc:b2:
7b:f5:d3:28:f0:33:08:76:44:c2:a5:fb:17:16:fc:44:05:f0:
f8:84:5f:ba:6d:25:c1:26:6a:00:8a:77:2f:f8:51:79:35:31:
af:fc:ef:fc:2a:20:b2:68:dc:a4:f4:20:48:62:6c:b8:5c:93:
cc:58:b8:b7:c7:e4:0d:bc:ad:15:2f:cf:b1:da:e1:82:88:b2:
0a:f2:e0:c2:5d:d0:23:5d:06:a5:15:0a:6c:fd:5b:c5:16:7a:
9f:ef:7d:2e:8f:20:ce:43:ab:7f:c0:c2:c7:e9:19:3f:67:f4:
0f:7e:1f:2d:43:c7:57:46:2a:f8:f1:d2:b7:aa:06:92:6f:c2:
9c:d8:a2:d9:0a:6a:ce:c1:ba:e9:bc:5f:74:a7:ce:2d:ac:42:
82:6f:bd:3c:a5:fa:fb:36:2a:5e:d0:26:5d:61:57:aa:33:79:
ec:b4:6e:b3:33:73:c1:dc:09:ca:2e:d2:6d:f2:1e:d4:52:5d:
9a:ea:7a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFIAniLfJ1GMmM3+wFPWvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjQzN2IzMWI1MDY3MDM4NGZhNWQyMGQ4OTI0ZDYxMWI5
MTYzM2UwHhcNMjUwNDE3MTkwMDQ5WhcNMjUwNDE4MTkwMDQ5WjAzMTEwLwYDVQQD
EygyOGZiZDMxMzk3MTdiNTgwM2NiZjZlMWFlMmQwNDVkYzdjYTc0YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7C9K303XzSfC6ige84d6fZze1LR
DqrHMe6HxGv+hfkt1rXBebHerCA6XcpiFJAeo9tgJw01e+EO7Zku/DyJ5WJObG9p
Y+r+5i4KywdrftlsgEu7w5mPP1GW5VkLGNKS2wNz0dYYg1efvq3ikPR7D+kD8Bjp
cLvYQOJVsvRN/C0QsPb5Gkf7GUtAyOU1pNeWJGO/jQsZwHm4QgfE0vUbff52baaM
vuEZxE+7zUorelAvPwLBXNFrgh3OG3aYCrjIo9kXCzc0bxjh0NPgS2+bOUpwrPM9
63vY6i3SbeEe3UtLJSipui8glQG8SyNq8yFLNaLh9AqY3XtAOe39DKXVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj70xOXF7WAPL9uGuLQRdx8p0ppMB8GA1UdIwQY
MBaAFES0N7MbUGcDhPpdINiSTWEbkWM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgt
ZGUzYjc1NDczZmRkLzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgtZGUzYjc1NDczZmRk
LzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUhOrKpR
0LcqXevurOog5kCfz1f+IuXlawFJHT73nnACAVcEZREk5YGEFWMVduwqiXuB/THy
QQvrSNKvM0SL50xU6jnkCbyye/XTKPAzCHZEwqX7Fxb8RAXw+IRfum0lwSZqAIp3
L/hReTUxr/zv/CogsmjcpPQgSGJsuFyTzFi4t8fkDbytFS/PsdrhgoiyCvLgwl3Q
I10GpRUKbP1bxRZ6n+99Lo8gzkOrf8DCx+kZP2f0D34fLUPHV0Yq+PHSt6oGkm/C
nNii2QpqzsG66bxfdKfOLaxCgm+9PKX6+zYqXtAmXWFXqjN57LRuszNzwdwJyi7S
bfIe1FJdmup6zw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:43 2025 by rpki-client