Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: YSmkggMozweH4BsotrZD126CM6cmts9ZF9yT3ub86go=
Subject key identifier: D3:BF:2F:B0:E0:E0:7A:E1:41:54:C1:76:D9:8F:26:8B:A1:B2:03:2A
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 01976282FAC496213CBF4BF5B17B9FB976B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0C5B
Signing time: Thu 12 Jun 2025 05:00:40 +0000
Manifest this update: Thu 12 Jun 2025 05:00:40 +0000
Manifest next update: Fri 13 Jun 2025 05:00:40 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: D7S7yOdX7qga9JdHCgdL9TehwRfhNoqYOlWSMdV4+x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:fa:c4:96:21:3c:bf:4b:f5:b1:7b:9f:b9:76:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Jun 12 05:00:40 2025 GMT
Not After : Jun 13 05:00:40 2025 GMT
Subject: CN=d3bf2fb0e0e07ae14154c176d98f268ba1b2032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:d5:6b:2d:3f:d9:af:df:07:ae:2f:92:a3:
dc:ac:80:bc:fb:81:7c:f3:bf:4a:e6:23:35:28:81:
3e:a8:03:81:19:04:e4:d0:21:79:f2:14:55:e8:f5:
ab:56:30:b4:3b:ee:60:50:60:68:f4:f7:b5:fe:14:
23:1c:21:21:67:4c:6b:54:9b:35:21:c4:ed:84:76:
70:34:6c:93:36:e9:e6:68:98:8a:09:ba:20:e1:26:
9c:77:48:b2:57:5f:9d:d8:2e:66:99:95:cf:c7:42:
83:ed:4f:a3:7b:9e:7d:10:61:d9:48:4b:e3:1f:ef:
9b:93:be:0a:be:c3:5b:e7:bd:22:04:78:1c:dc:cb:
02:32:27:fb:5a:19:86:d1:a0:35:27:30:f4:c1:bf:
05:a7:28:1d:1e:7a:fd:59:de:48:8a:d8:c0:3a:06:
1a:c1:14:a0:25:1c:ac:d0:ee:5f:0b:d7:98:c1:c3:
29:d8:fd:aa:18:58:32:12:eb:9e:e1:49:19:b2:b9:
3d:32:c6:a1:fa:be:2b:e9:c4:1e:86:4e:4e:8c:e5:
5c:7e:e8:c8:aa:b8:8d:52:3a:f0:4f:ac:03:e0:92:
0f:f1:ee:22:41:3c:41:89:88:4c:dc:90:a5:51:e6:
f6:e0:70:c8:66:8e:03:a4:49:fa:cf:0a:4a:6c:ad:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:2F:B0:E0:E0:7A:E1:41:54:C1:76:D9:8F:26:8B:A1:B2:03:2A
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:35:09:bd:3a:e6:c4:b2:bc:00:46:a0:94:f9:ab:23:ff:
c2:88:62:21:56:cf:67:6e:fb:72:67:12:84:ad:95:99:13:02:
b9:c8:b7:fb:51:7c:6b:0d:54:8b:05:b6:5c:59:5e:cd:b0:a9:
d6:bb:5b:70:aa:70:f2:f7:ab:7e:44:02:b4:5a:1d:d8:63:ae:
5b:b5:a4:a0:d8:26:1f:8d:be:ad:fd:2c:39:b1:1e:1b:eb:f5:
dd:32:8c:c3:f1:3c:dd:bb:96:22:6c:b6:9f:57:58:eb:29:83:
79:b0:8c:e6:28:d7:6e:1c:8a:79:a4:9a:d6:38:54:7d:c7:56:
cf:84:6a:0f:97:20:15:4b:eb:77:51:5e:50:9f:ca:3d:bc:55:
85:f4:18:37:44:52:97:1f:56:be:2e:2d:ce:bd:fb:c5:cb:e8:
75:3c:99:0e:7e:4e:85:d8:94:fc:9b:d1:79:79:d4:5e:71:5e:
63:77:c0:35:84:f7:de:9f:55:9e:a0:ec:18:e4:94:56:84:93:
fb:c0:b7:d2:11:8e:5a:8b:4f:7e:ee:a3:71:42:72:66:c5:d1:
25:81:78:7c:c9:27:8e:58:f2:9e:7b:36:6a:b2:42:c9:a2:d5:
e7:f1:32:7f:b9:6a:55:d5:2e:54:98:d6:dc:be:73:8c:8c:fa:
2d:4e:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:36:18 2025 by rpki-client