Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: ASLAt2FP83uMvTuV8anoM/0memV9UFIAvrDX1I6aQAM=
Subject key identifier: 89:21:02:3D:DA:B9:51:A3:23:F7:50:C1:82:05:17:ED:21:F2:39:3D
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 0197518F4D55B42AC249481B6285246DCC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 0475
Signing time: Sun 08 Jun 2025 22:00:35 +0000
Manifest this update: Sun 08 Jun 2025 22:00:35 +0000
Manifest next update: Mon 09 Jun 2025 22:00:35 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: 1/aWGHa7VFPr1kNez6WnvPCMLKpdoRIK1ioCNBcyu6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:4d:55:b4:2a:c2:49:48:1b:62:85:24:6d:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jun 8 22:00:35 2025 GMT
Not After : Jun 9 22:00:35 2025 GMT
Subject: CN=8921023ddab951a323f750c1820517ed21f2393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:2d:85:6d:c9:8e:9f:2c:06:1f:8a:5b:2b:
dd:31:0f:e6:db:a0:9f:21:a7:9f:0b:5b:58:7f:cd:
92:e8:56:50:3c:1d:13:94:b4:a1:ec:fe:cf:a7:c8:
92:75:c8:ad:a7:80:8f:2a:e9:92:6e:b6:cc:a2:d6:
79:51:d7:6f:70:b6:9a:86:76:45:b5:ab:34:25:a5:
ba:0e:9b:78:c4:30:9f:0f:8a:c0:d7:d9:d7:bd:e5:
ab:5a:03:00:7e:24:3c:b8:c4:ee:29:4d:81:f3:2e:
2f:a0:52:47:cf:b0:e5:2a:da:b0:0f:b1:1e:77:2d:
ed:ff:cc:ea:89:fc:39:20:e5:b2:b2:a4:97:d2:d6:
9d:90:2e:d4:66:b0:a2:35:e0:9d:3d:39:85:db:a4:
4c:c3:43:27:01:c0:b1:35:83:83:fa:92:13:87:c9:
bf:76:96:f5:d5:19:b8:b5:3f:2e:a9:86:e0:10:35:
c8:f0:18:0a:41:2a:b3:eb:31:0c:6d:de:f6:c5:40:
f8:b9:90:69:8f:ed:87:db:32:03:ed:88:ac:f8:b4:
a1:4d:2f:20:4a:33:ca:3d:a1:79:06:3e:3b:15:0b:
7e:91:41:b6:ff:92:2c:97:7c:20:97:74:58:09:22:
96:a9:f5:b6:0e:db:eb:28:ef:ff:cf:6c:2d:b8:4a:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:02:3D:DA:B9:51:A3:23:F7:50:C1:82:05:17:ED:21:F2:39:3D
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:34:56:a4:03:0a:9a:5d:c1:c0:bd:aa:c3:a8:de:12:84:03:
cd:6d:4e:1b:68:04:90:c9:dd:d1:95:0a:36:02:e9:86:b9:b0:
7f:f6:7d:fb:c1:b1:11:1d:f6:0e:d9:37:93:03:31:62:97:6d:
4c:74:cf:9a:30:50:47:3d:10:ae:69:90:4c:eb:50:95:57:07:
af:97:dd:eb:90:1b:c3:06:8b:b6:90:12:70:df:1a:3f:8b:eb:
73:2f:95:00:44:f9:1f:6a:f0:19:9e:48:ee:d2:fe:1b:d0:b9:
ca:08:99:97:72:3d:2b:5b:68:40:75:c0:ed:89:f9:71:b4:b2:
a8:96:95:42:c5:95:0c:ac:be:6c:a6:c1:1d:2c:12:83:de:db:
37:f1:77:15:5b:3b:08:a6:9d:32:a4:42:d9:72:52:8c:72:22:
fb:3a:3d:ae:ff:6f:38:a7:bc:b4:e2:c6:29:fe:f7:7b:3d:59:
42:a4:6a:15:0f:c4:f4:6c:96:bb:e2:9f:94:a8:3c:61:e0:48:
ed:32:15:b5:19:12:4d:d7:0d:7e:6f:be:cb:aa:30:79:64:15:
0d:c6:83:96:a7:9a:65:40:fa:1f:76:1d:13:2e:5a:90:a2:b1:
08:b2:9c:ec:51:98:cf:c4:66:0e:20:4d:94:ba:80:72:15:d8:
dd:f2:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:14 2025 by rpki-client