Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier: 7BmyMj9J5joP0kZQu8w5SIz/Oha7F6Ij+SiO0CAg+BE=
Subject key identifier: 6B:82:0D:8B:19:5C:50:B7:F7:D1:5C:C9:A3:0C:0A:C5:86:7B:96:19
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer: /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial: 01976BF406CAFF6CC06D18F5D515540ABDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number: 038D
Signing time: Sat 14 Jun 2025 01:00:43 +0000
Manifest this update: Sat 14 Jun 2025 01:00:43 +0000
Manifest next update: Sun 15 Jun 2025 01:00:43 +0000
Files and hashes: 1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: vaQxGvXJaRhZaI98KYwjXjD4y9gQ+3LCGE05HeaPoP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:06:ca:ff:6c:c0:6d:18:f5:d5:15:54:0a:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Validity
Not Before: Jun 14 01:00:43 2025 GMT
Not After : Jun 15 01:00:43 2025 GMT
Subject: CN=6b820d8b195c50b7f7d15cc9a30c0ac5867b9619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:f1:da:f8:91:7a:47:4b:b1:5c:3f:51:19:
06:0e:bd:ea:75:69:b3:db:3a:2c:f7:a5:07:b5:73:
4e:f0:a6:c2:1a:31:44:ed:43:3b:0d:45:6e:8d:92:
0f:12:ad:13:16:6f:68:fe:ab:71:88:86:2a:f1:47:
37:aa:2f:e1:26:f9:78:c3:be:78:e6:43:ef:f1:ee:
f5:ba:fb:ab:2a:be:23:1e:fd:cf:bc:64:5a:16:cc:
c2:6a:09:e2:1c:fb:27:17:6d:b3:d4:62:63:ea:2a:
19:ac:8a:1f:cc:1a:37:c5:86:09:62:fb:fc:f5:22:
5c:91:07:61:80:09:ed:1d:a9:2f:da:9b:d0:a8:2f:
e6:42:53:cc:da:e0:03:68:60:30:5d:17:69:c1:92:
d5:05:90:1c:bf:6f:e9:77:79:36:07:ab:61:34:04:
26:07:d3:33:0c:5f:99:5e:e8:65:15:5a:79:82:e7:
8e:d4:65:8c:3f:73:2f:05:9e:a4:1b:c5:27:87:ff:
d4:4c:96:fe:4b:fb:ee:06:5d:81:b3:9d:23:26:a2:
34:2a:ea:82:a1:b9:51:d3:38:9f:02:52:a8:23:62:
20:a9:f5:98:aa:a6:cd:ef:8f:8c:d7:6d:97:54:c1:
0d:c4:98:28:e9:74:94:bd:83:c4:e6:6b:f0:01:df:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:0D:8B:19:5C:50:B7:F7:D1:5C:C9:A3:0C:0A:C5:86:7B:96:19
X509v3 Authority Key Identifier:
keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:38:e3:21:6a:e2:59:c7:08:43:8a:65:a5:bb:60:67:bf:c4:
28:65:cc:2c:86:f8:7c:d8:d1:c4:9e:e8:d7:cb:85:11:8b:db:
50:36:0f:e8:be:a0:f8:21:ed:da:67:59:1a:91:06:69:13:ee:
16:13:18:d8:34:18:9f:49:2e:2e:49:d7:4b:cc:7e:e0:05:24:
4f:46:31:26:92:ea:52:3f:51:af:9b:37:da:85:b2:53:4d:8f:
20:43:d2:e7:86:53:29:20:36:9b:08:30:e7:11:50:a7:11:00:
ed:a3:26:9d:d3:d3:97:13:40:3c:7b:0b:bf:15:df:8d:c2:13:
d1:fe:ca:7a:9f:25:08:7c:ba:1f:c9:d1:56:c8:2b:5e:8a:f7:
5d:d4:23:b6:49:5f:d7:e8:3d:ae:05:83:32:88:ee:3f:c6:87:
b9:2f:0f:3f:a5:0c:ea:53:ef:37:b2:98:79:32:73:fe:f4:fc:
a9:ae:a8:df:26:17:d3:50:b0:70:6a:76:f1:d8:87:0b:12:5f:
9e:a7:01:bd:1a:18:60:eb:b0:4a:ad:f2:a0:ab:6a:5d:7d:00:
ff:01:95:10:50:92:b1:22:fa:9c:79:ed:bc:c7:4f:09:d2:7e:
d2:6a:c5:1a:9d:53:21:04:ab:6b:61:16:71:0a:f0:a5:3f:74:
1a:c0:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:10 2025 by rpki-client