
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier: s/Rn7IjBEnoP+bOx84ZqHVMw+L4eahOhQ64/WUgwQLA=
Subject key identifier: 50:6C:C5:32:F4:57:7D:C1:C3:AF:38:0D:69:E7:19:8D:79:66:1D:E1
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial: 01988B106EF646CC85B8583E2E488508AEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number: 0C44
Signing time: Fri 08 Aug 2025 19:02:46 +0000
Manifest this update: Fri 08 Aug 2025 19:02:46 +0000
Manifest next update: Sat 09 Aug 2025 19:02:46 +0000
Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: xnf/3PggLQiLNX4/+KT3yoQO75NvjhAj4NXFM5xcwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:6e:f6:46:cc:85:b8:58:3e:2e:48:85:08:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Validity
Not Before: Aug 8 19:02:46 2025 GMT
Not After : Aug 9 19:02:46 2025 GMT
Subject: CN=506cc532f4577dc1c3af380d69e7198d79661de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:24:26:e6:c7:bd:d2:79:5c:bc:f4:a4:f6:
c8:25:79:57:f1:5c:24:5f:47:5f:0e:d3:43:7f:d9:
dd:f7:7e:3f:75:1f:9c:01:dc:93:69:80:7e:95:f6:
40:b4:f0:44:da:fb:49:64:bb:11:13:d2:94:88:2d:
48:76:37:f5:74:d1:51:a5:5d:02:a6:0e:bf:dc:6b:
77:16:13:19:c0:1b:6a:12:da:91:ae:fa:25:a2:60:
aa:e9:39:95:59:20:bb:ec:40:7a:5c:5f:13:e9:cf:
a6:4d:62:20:51:21:a2:41:59:02:4e:e2:9e:53:bf:
09:d1:53:0a:58:87:3a:0b:d5:e4:47:dc:76:05:82:
ac:ee:0c:fb:96:40:f0:67:f9:d0:ef:91:60:64:ad:
87:3b:7f:29:33:07:5f:89:4d:73:5e:15:1d:28:de:
ba:5e:31:b7:af:88:34:11:78:c3:0b:86:55:c0:e4:
50:a8:cc:85:d4:fe:a1:e2:86:e5:f9:c5:d5:7e:b2:
b9:80:33:80:05:c1:9b:96:5c:6d:11:d9:f9:5b:34:
50:d0:1a:fa:10:02:74:42:d8:cc:9b:e0:d5:29:ae:
ef:1a:ad:66:81:a0:31:6e:66:c3:15:4e:0b:27:9f:
6e:8e:ba:60:1e:db:69:3d:d2:bb:1e:41:81:05:68:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:C5:32:F4:57:7D:C1:C3:AF:38:0D:69:E7:19:8D:79:66:1D:E1
X509v3 Authority Key Identifier:
keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:68:40:f9:5a:81:88:1b:7e:68:0c:91:62:d8:fe:65:6e:
02:a7:44:2b:67:4d:e6:49:b3:99:42:bd:ea:82:69:c7:08:54:
79:2a:e1:db:4b:a1:65:f7:70:74:b6:2d:02:15:5f:02:07:3a:
8b:b6:1f:91:1c:8a:5f:e3:b0:57:1d:a4:e6:be:df:f1:58:9f:
10:57:46:03:dd:65:d6:3b:b3:b6:b7:d5:95:4e:b9:03:65:e6:
f9:24:ad:10:b3:b5:9f:2e:4d:0d:ab:69:32:f0:65:63:27:85:
60:77:c9:ae:d8:ae:01:b7:01:83:ba:93:86:a1:7a:91:f5:36:
53:56:36:9f:b0:58:71:32:41:52:00:7d:de:79:45:5e:5c:d5:
82:11:a6:f1:b5:96:d2:4a:4e:8b:ee:78:fb:54:0c:11:c4:46:
86:e5:d8:5e:94:17:ee:c3:ad:a2:ac:22:05:de:a6:b3:68:c7:
22:72:94:88:f3:c4:b6:5f:e4:82:9a:a5:6a:a2:73:d4:01:aa:
ff:7a:56:6a:c9:54:0a:e4:e6:c8:6e:fd:e2:1f:7d:e1:55:23:
5f:eb:78:48:e7:56:15:e3:2e:b4:45:1a:40:a6:b0:b7:5c:a7:
f5:d4:53:a3:2a:04:4e:0c:08:6d:1d:d6:2b:02:f6:a4:f7:ad:
bb:b5:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:55 2025 by rpki-client