Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: 2csQEN1N2wQwFD7XRBfzwKJoWv7kEuP0Iw3tHN6EC7w=
Subject key identifier: 2B:01:54:D6:26:0B:C8:F0:E3:64:E0:0B:E2:D2:C2:42:A8:B9:63:85
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 01976BBD162D12482DA476168A99015DAD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 02F3
Signing time: Sat 14 Jun 2025 00:00:43 +0000
Manifest this update: Sat 14 Jun 2025 00:00:43 +0000
Manifest next update: Sun 15 Jun 2025 00:00:43 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: tG/d3/IODgt1Q5wMSpeLtnD08JSQ0L9TRifkv11JcCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:16:2d:12:48:2d:a4:76:16:8a:99:01:5d:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Jun 14 00:00:43 2025 GMT
Not After : Jun 15 00:00:43 2025 GMT
Subject: CN=2b0154d6260bc8f0e364e00be2d2c242a8b96385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:11:33:81:ed:d9:a9:a1:54:72:29:d1:14:
11:ff:d5:dd:78:1a:11:44:64:5e:d1:2f:79:74:08:
c1:50:15:f7:59:7c:68:41:a8:04:08:19:c4:cb:cc:
f9:68:93:1f:29:bf:59:81:54:7a:03:c6:47:31:ef:
e7:92:c7:43:07:d6:c4:87:5c:38:b1:1e:9b:01:ef:
e3:e9:b1:23:18:ac:64:7a:5a:44:16:e0:93:11:bf:
77:b9:37:d3:a7:e9:8d:f7:fc:0d:e1:77:94:a0:8c:
3c:0b:aa:64:09:16:22:9b:bd:e2:38:e6:18:0f:e5:
f0:57:80:8d:d0:f3:15:4f:f2:4d:cd:0b:7f:d6:2f:
30:34:20:2c:f2:02:64:62:54:55:b8:fc:bc:ce:7d:
92:f0:0c:ab:8d:c9:d1:dd:de:53:8a:2b:22:62:33:
eb:b5:6c:6c:57:32:dc:38:6c:0f:2a:07:e8:3b:ab:
66:7f:0f:24:17:2a:c6:7e:86:c4:0e:d7:c6:c3:49:
5a:ee:08:93:ea:c6:6a:8a:e2:d8:62:23:59:93:e7:
41:b8:12:97:51:71:c3:14:de:0c:56:7b:2e:ef:aa:
64:13:8d:79:10:b2:20:a6:e8:0e:e0:05:2c:49:93:
ac:66:d4:60:c8:34:25:6e:a0:2e:97:aa:d3:7c:cc:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:54:D6:26:0B:C8:F0:E3:64:E0:0B:E2:D2:C2:42:A8:B9:63:85
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:6c:98:a5:1c:17:32:44:ed:97:c2:6a:77:3d:c0:de:13:
42:67:b4:60:ed:62:5b:fc:72:6c:c9:cb:13:13:74:ba:5e:24:
3c:da:51:af:37:0f:98:bd:c2:28:34:ea:03:3f:bc:41:ef:b9:
49:66:ee:11:d9:7d:06:95:fc:c4:76:85:e6:b3:58:dc:9c:be:
96:cf:ff:6f:37:1c:d1:5c:f4:18:78:76:e9:b3:78:9a:8d:c4:
48:90:99:3d:f7:25:ef:02:55:21:4b:a8:02:56:fe:b4:10:58:
c1:99:72:5f:16:91:4b:21:d6:71:45:21:1e:3c:ef:16:67:cf:
22:0d:bd:fc:8c:4c:26:a4:e5:d5:0c:ae:2e:35:35:62:61:88:
24:4d:ca:ff:f6:07:e9:32:38:22:6c:29:7e:28:8e:27:90:41:
d0:9f:05:41:d5:ba:cf:80:03:8d:07:52:43:39:a5:95:d6:00:
b5:ca:be:1d:b3:b0:bb:fc:7f:7c:ff:72:a2:b3:1f:32:b2:25:
bd:31:46:9e:49:1f:fd:3c:40:2b:2f:3c:38:ca:31:a5:75:62:
86:80:10:b2:f8:32:9d:d2:ca:ba:dc:b9:29:b3:23:c9:22:14:
38:3e:1f:81:f6:8c:02:af:c9:56:4c:88:0f:9f:be:49:9f:4a:
66:de:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:43 2025 by rpki-client