Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: RNeZjfvvBSo7pI6aMn3q8IcvWheLAKkJKwss5csGP+E=
Subject key identifier: 26:28:F4:40:E5:35:BD:E9:49:A8:52:5F:51:3C:A9:BF:A9:2E:0C:C9
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019749D594115581ABBD53F0CF174D87FB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 022D
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: a9Jy+ncrgNlnnYohchbNG7e5akCFKLpJsqoPEA/MLwY=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:94:11:55:81:ab:bd:53:f0:cf:17:4d:87:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=2628f440e535bde949a8525f513ca9bfa92e0cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:b6:e8:b6:b7:6e:19:33:f4:c1:d3:1d:bc:
e0:d9:d1:1b:62:4b:31:ea:8e:f7:88:85:bc:80:fd:
6c:15:03:97:98:31:0e:66:02:fd:40:86:dc:b8:71:
33:fc:7f:f5:39:ba:6c:e3:a5:11:76:67:e9:0e:9a:
37:9b:3d:9b:45:a2:f2:69:16:95:d6:66:04:e1:c5:
99:5b:5d:ab:f2:e2:fb:f7:7a:2c:58:57:29:69:b6:
73:01:fa:78:70:9f:a2:c7:9a:b9:cc:7c:d4:77:ee:
41:09:af:29:20:d6:c7:f1:3b:f4:cf:11:8c:eb:f8:
ca:1a:9c:bb:77:49:05:a4:a7:ea:40:2a:f7:29:ad:
58:dc:49:87:a8:87:63:af:57:41:e6:00:89:6a:df:
9d:5f:5c:a6:81:4f:12:70:d2:2e:a0:07:0a:b3:3d:
ca:41:1a:7c:f9:4a:35:1d:95:c6:58:83:50:3e:29:
e6:51:87:cc:08:a7:55:39:67:51:c5:d0:9b:97:34:
93:f5:52:5a:8f:40:c5:73:47:9d:5d:01:f3:7b:ed:
0d:89:38:a6:c7:fa:0b:5a:9e:d6:09:cc:55:63:91:
6c:4e:93:c2:49:96:c2:e5:9f:c7:09:90:30:88:68:
13:5c:20:3c:0c:8e:7c:18:1b:c0:b7:7d:f5:ae:58:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:28:F4:40:E5:35:BD:E9:49:A8:52:5F:51:3C:A9:BF:A9:2E:0C:C9
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:a2:4e:8e:a0:6c:da:e4:a7:ff:26:16:26:64:3e:0f:18:
fd:03:c4:d6:ee:a3:64:e1:43:b3:ea:b4:9f:6a:a5:6f:b9:e0:
03:71:a7:8b:67:25:e0:4c:52:b9:9f:74:54:65:ff:b9:9e:32:
dc:cc:31:1b:7a:ea:c9:62:a0:fb:f4:02:e3:60:ec:7c:e7:17:
fa:b0:16:ca:95:30:37:b7:fb:16:89:2a:f5:aa:9d:f9:2d:bf:
8d:be:11:eb:73:ef:58:5f:20:23:1f:c7:39:6e:db:6e:d0:c7:
0d:15:a5:0b:15:6f:46:fd:4f:c6:fe:a5:1f:9b:7b:4c:ea:1a:
36:fc:31:0d:39:fe:d8:fd:60:c6:c1:fe:c1:e4:3f:cb:74:fa:
a4:b8:c9:96:69:59:db:d8:83:97:00:d2:1f:c8:bf:4b:26:80:
8e:de:98:a5:56:e3:73:d6:b4:66:47:44:65:4a:89:91:cd:8b:
49:5f:63:2d:05:f3:ec:32:3a:88:3e:bd:ef:1a:27:02:52:87:
26:9d:ea:d1:a3:4a:9f:61:b4:a0:92:10:31:ae:a4:4d:96:0c:
07:9d:08:ce:b7:b0:db:bb:c4:67:fc:c3:9c:f6:99:75:4e:2a:
b0:7b:eb:7d:f2:e5:62:3d:b5:40:19:d7:91:4d:e4:ae:cf:f4:
6e:42:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:34:02 2025 by rpki-client