Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: 89dqW5qEEiJm0HkjyDtOzSI6q8IlkKP+3vsIxjsSrns=
Subject key identifier: B3:48:FE:54:62:A1:BF:C6:52:E9:09:5B:6F:7D:17:76:18:06:F4:E0
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019922FA78366F44CAB0E22772EA11415227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0322
Signing time: Sun 07 Sep 2025 07:01:04 +0000
Manifest this update: Sun 07 Sep 2025 07:01:04 +0000
Manifest next update: Mon 08 Sep 2025 07:01:04 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 2DNmva7HwWsBP35kx0vETnkxLITf9yuwVw0rAnLH258=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:78:36:6f:44:ca:b0:e2:27:72:ea:11:41:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Sep 7 07:01:04 2025 GMT
Not After : Sep 8 07:01:04 2025 GMT
Subject: CN=b348fe5462a1bfc652e9095b6f7d17761806f4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:19:1a:aa:19:2b:34:4b:53:89:18:21:24:
a5:95:a2:8d:55:e3:f6:30:03:64:c7:31:e1:35:fd:
d6:73:94:13:52:b8:7c:8a:ce:58:11:e8:b8:f9:0d:
bf:2a:80:ec:7e:62:71:51:dd:cb:47:41:4b:2a:88:
56:1c:3b:7e:7f:59:f5:62:52:25:31:5c:fd:7f:23:
37:e4:c3:a8:80:8e:b8:68:17:94:89:ff:8f:68:57:
fe:60:ca:22:fe:b1:0f:bf:b7:27:c4:b6:94:20:5b:
23:a1:ae:c3:ed:b6:1e:15:a5:f0:ad:04:14:0b:cf:
72:12:40:b7:0d:5a:9c:bd:ed:f9:96:e0:18:89:42:
44:27:b6:08:a3:24:41:c4:4a:8b:cb:19:bd:28:8a:
3d:c4:21:e6:8b:ec:61:54:a2:c9:08:24:fc:5b:66:
c9:50:b2:b5:ef:41:33:2e:5e:ff:f4:44:5e:27:e0:
cd:62:d6:54:d6:47:e2:26:04:4e:5b:20:89:50:99:
15:52:4c:00:d0:59:a2:78:1d:eb:1b:b5:43:d4:74:
3d:6d:df:9d:94:2a:39:ad:a0:d0:75:16:ae:0a:34:
f8:97:6f:e5:d3:13:67:b2:c3:b5:c0:e6:bf:cb:67:
81:08:d6:27:e0:f2:ed:6f:ad:4b:40:8c:75:cf:31:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:FE:54:62:A1:BF:C6:52:E9:09:5B:6F:7D:17:76:18:06:F4:E0
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:df:53:c5:4c:47:1d:b8:a4:65:a5:17:4d:bd:66:34:e1:
00:9c:f1:e6:67:8a:5b:e4:23:1b:b8:2c:9a:7f:f9:d6:50:f8:
bb:a8:d6:4c:4d:fb:a7:dc:9f:14:35:9d:84:de:52:2e:37:79:
2d:8f:19:4c:6e:16:58:a8:40:18:71:8a:fc:09:c7:b4:f8:91:
e3:d4:21:c2:76:70:78:ed:31:ac:dd:72:57:af:85:c2:be:fe:
30:59:ad:dd:c8:1e:28:f9:a3:ae:16:67:b6:16:5f:f1:c5:a0:
aa:ab:21:4e:a2:53:50:5f:4e:61:b7:6d:96:71:4b:fa:83:38:
26:f1:ff:f7:35:b0:ab:81:7f:80:7d:ae:3d:1a:f7:a6:5a:be:
39:9d:19:26:b6:03:b4:f4:4b:e8:4b:03:3b:9d:22:fa:78:73:
70:aa:50:29:80:37:c6:75:54:ca:1f:1e:f8:aa:c4:b4:ef:70:
31:d5:d0:01:39:56:c6:d2:f0:0b:cf:18:fd:97:e7:af:7c:d3:
a3:55:c4:5e:3f:d0:c4:f5:15:48:67:5d:96:81:3b:13:fa:53:
4e:4a:7e:76:f5:c3:97:e9:7c:97:bf:49:ee:d9:ad:d4:66:e2:
a4:95:46:82:26:c1:f4:ca:af:8c:69:27:a7:c1:d0:b2:66:da:
c1:d6:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:40 2025 by rpki-client