Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: EBFIEd9aeMeN3KWdMpGHrnsu5WOTdG6IiQ18D1lRKmQ=
Subject key identifier: DE:0F:63:94:28:D4:CD:B1:E5:F6:28:99:F9:29:70:F4:DC:F7:29:0B
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 01989223E85BE94852B0F8ACF750B5DD61AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 051B
Signing time: Sun 10 Aug 2025 04:01:23 +0000
Manifest this update: Sun 10 Aug 2025 04:01:23 +0000
Manifest next update: Mon 11 Aug 2025 04:01:23 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: 9u028fQ2PGgri+2eVJsT9zU2yE9u1yBVSztB3DC26uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:e8:5b:e9:48:52:b0:f8:ac:f7:50:b5:dd:61:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Aug 10 04:01:23 2025 GMT
Not After : Aug 11 04:01:23 2025 GMT
Subject: CN=de0f639428d4cdb1e5f62899f92970f4dcf7290b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:07:21:dd:88:fe:fd:cf:ce:77:a6:c3:d7:
1e:e2:24:db:fb:9d:dd:76:8f:ff:1f:e7:7a:00:64:
90:fa:bf:22:a9:c0:a2:54:4c:f0:3e:e6:1d:4a:35:
4a:79:90:6b:bb:16:ed:d9:6b:e5:22:57:8c:bd:fc:
b1:cd:90:84:aa:bf:98:f8:6d:a6:9c:44:d4:89:68:
95:00:82:71:a3:c1:8b:aa:b2:dc:cf:fe:08:9f:ae:
fb:04:d3:eb:17:7a:90:ec:6e:8e:28:b0:96:6f:bc:
a6:1e:f9:e6:aa:59:14:6a:58:18:53:18:53:7c:32:
07:e3:92:a9:0d:bd:bf:fe:e0:56:c0:3b:54:63:4b:
9d:d1:43:5c:8a:f7:22:32:82:00:0c:3e:34:26:b1:
73:68:25:60:df:9a:34:d2:2b:7b:03:d2:da:39:e4:
94:1a:66:9e:30:c2:0f:ae:ba:77:d7:b3:d6:fb:26:
d1:ed:09:6b:f7:8a:87:0d:de:31:b9:c2:1a:b8:6d:
9d:27:75:2f:15:10:ff:43:27:62:5f:87:89:bf:37:
df:4a:ba:0e:fd:01:0e:00:10:92:24:36:8e:00:06:
5d:d0:a7:5b:4c:61:f9:2e:1d:b3:8d:4c:c5:b3:39:
90:05:c1:8e:36:f2:e8:1f:4b:55:53:64:ba:83:f1:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:63:94:28:D4:CD:B1:E5:F6:28:99:F9:29:70:F4:DC:F7:29:0B
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:0d:0c:9c:3a:1f:3f:54:a4:bb:30:d2:f0:8e:63:73:13:
9a:4c:d8:73:8a:9a:ef:0c:4c:9c:42:7a:39:19:44:67:79:0a:
8e:65:37:01:9a:0b:3d:63:26:71:b7:fe:f5:c6:56:a2:fc:c3:
2a:83:c8:7f:f1:38:86:f6:dd:7d:11:9d:b2:f1:a2:a0:ec:2d:
e7:02:95:aa:60:fe:ad:a3:25:2d:1f:62:89:52:17:3d:f2:b1:
1a:5d:f0:20:60:6b:04:bd:d1:74:ae:52:6f:ec:8c:89:c0:31:
d8:c3:78:3d:e6:91:c0:8a:23:81:65:59:8f:03:b7:58:77:18:
37:cd:80:6d:3b:f0:50:b1:06:07:cb:11:da:68:93:1e:72:21:
12:3e:95:30:7c:c1:cf:e3:99:ea:c6:c7:46:5f:06:82:4d:6a:
92:2d:7c:40:c4:1b:a7:93:a7:61:64:7e:f9:75:01:d4:34:79:
f8:a3:f0:63:e3:e5:fd:f4:51:db:b8:b2:08:0e:d7:07:1f:9f:
be:c1:9f:8d:fe:65:cb:7a:38:ff:31:c4:cd:6e:41:1c:32:34:
9d:83:f0:71:f8:14:64:79:d2:3f:5f:97:75:0d:c8:89:7b:76:
70:3d:67:50:6c:2f:b0:e4:00:2e:04:15:e1:9c:52:b0:2b:8f:
47:e3:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:46 2025 by rpki-client