Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: eiyJv7j2Gc3DLhfDjVvVlwkOXXgFKV2OnkdPCrBYN0g=
Subject key identifier: 44:8E:0C:02:31:0F:CC:17:ED:54:C7:96:B7:A4:86:E9:6F:ED:D7:5D
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 01987ED36A35F28FFFBE720BFF71089A3B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 02C2
Signing time: Wed 06 Aug 2025 10:00:41 +0000
Manifest this update: Wed 06 Aug 2025 10:00:41 +0000
Manifest next update: Thu 07 Aug 2025 10:00:41 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: RtW1ZocwH0HazVSIUz4AryHOLXdyOqSwhh4CG/lC4vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:6a:35:f2:8f:ff:be:72:0b:ff:71:08:9a:3b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Aug 6 10:00:41 2025 GMT
Not After : Aug 7 10:00:41 2025 GMT
Subject: CN=448e0c02310fcc17ed54c796b7a486e96fedd75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:92:67:55:ad:e9:9b:1d:e5:33:8e:72:36:
2e:6d:fd:94:2f:a5:03:d6:c0:c2:36:37:b5:ff:c9:
0a:b0:c5:94:ae:12:f8:42:c9:88:cf:1d:03:9e:48:
6a:77:bd:0d:78:7e:fd:2d:81:c0:3b:dd:6c:e0:14:
df:3a:4c:da:c3:5d:4c:72:98:38:c3:4c:17:f8:a2:
17:f8:25:90:9f:62:34:2a:b5:ed:ec:34:a9:49:b2:
31:d6:f4:46:6b:8f:34:db:8c:43:ce:65:2c:f4:d0:
7f:3d:b5:8f:fd:92:9d:5d:ff:91:64:f5:6f:36:d3:
2f:2c:7c:c3:6b:69:d1:2b:3c:8b:38:2f:cd:b9:1d:
6e:33:7c:4d:b2:a0:7b:49:0c:ea:3c:a8:f7:15:5f:
c5:27:54:ec:33:3a:b1:b5:f9:64:4d:82:b8:7b:19:
f3:3b:72:c1:0c:9c:c0:94:dd:b0:2c:08:29:3e:b1:
1f:83:a9:cf:30:5d:41:a2:59:8a:70:57:ee:c2:a8:
ea:8c:68:40:a8:10:57:c2:95:18:57:8a:7a:b7:f4:
a9:73:87:5a:64:22:65:d1:40:b8:c0:ae:d4:dd:10:
0f:a8:10:39:75:7e:39:25:d0:5a:49:d7:81:bd:20:
85:46:bb:f8:b1:b7:54:f5:42:e8:e9:d2:70:ae:fe:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8E:0C:02:31:0F:CC:17:ED:54:C7:96:B7:A4:86:E9:6F:ED:D7:5D
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:19:8a:2b:11:2c:ca:09:16:8f:2a:01:88:49:7d:2a:33:
be:6d:d6:4f:86:fc:f3:39:7b:b4:0b:68:a3:fc:26:7c:11:f7:
71:fe:e1:eb:f2:c8:da:c7:c1:aa:66:1c:ea:41:e2:8f:7e:3c:
0c:54:6c:06:19:84:96:a6:bf:90:0e:c9:11:44:5a:42:5f:8f:
55:f1:56:88:64:b9:5d:f0:fc:00:cf:e5:f4:f2:b5:d3:25:63:
5b:18:53:17:96:4c:c6:6b:1a:c9:88:27:cd:4b:89:7f:b8:f4:
36:91:9e:2e:63:93:29:05:fa:94:9c:10:8c:4a:d7:47:78:dc:
ff:60:b8:b2:76:f1:15:00:f7:a9:57:ff:0f:61:3f:4b:37:fe:
55:ca:f1:a0:1c:ba:c4:94:ac:d9:4c:6a:45:06:b8:73:ec:e3:
40:77:ed:e1:b3:7f:46:2f:36:51:a6:ae:d2:fb:ba:b7:22:e2:
3c:8a:93:89:15:fc:6b:0d:5b:4f:08:c3:cc:19:bb:2a:08:94:
bc:a7:81:df:d6:f5:0a:37:1e:46:07:a9:64:1a:67:52:ea:c1:
d7:d5:4b:06:3a:24:aa:d6:2c:bb:bd:04:5e:46:28:5d:95:cf:
cd:b7:8d:01:ea:9c:ce:e2:db:fe:da:f8:08:1a:8e:4c:4e:0c:
c1:15:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:22 2025 by rpki-client