
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: VWGl/jdH9Bnp2eRS6UPH7paj50bK8S3yjHpVBWAebWA=
Subject key identifier: C4:30:38:AB:22:A4:97:8B:E6:39:2D:DD:5B:93:61:F3:50:0D:FF:FA
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01976C98A6336F6AE7E7964514C81CC6B7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 023F
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: c3UrU0i10ehjWY3bP01l/aFXqrfEURXLt8v+Lt8qu0Y=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a6:33:6f:6a:e7:e7:96:45:14:c8:1c:c6:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=c43038ab22a4978be6392ddd5b9361f3500dfffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:22:b1:ef:9d:48:44:58:b1:27:69:e3:44:
f0:ef:46:a7:5a:07:6e:47:9a:34:53:da:ef:1d:7a:
95:1c:ab:9b:e4:30:1c:bf:ba:02:ec:c4:78:c0:c3:
f2:b9:44:8c:3b:48:2b:7d:03:68:0f:9a:e4:18:09:
cd:50:f5:f1:37:1a:8e:64:05:66:eb:bb:2e:62:a1:
d6:86:42:73:ed:34:fe:29:af:5b:9a:cb:cc:48:ad:
18:ef:f0:8c:ad:19:e3:65:c3:a9:cb:f6:e1:ba:bc:
93:00:f9:ba:d3:f9:0f:0d:b9:dd:ce:11:56:fb:e5:
e3:84:a2:9c:cf:92:01:55:8a:04:ce:8d:a6:6a:58:
5c:87:20:fe:00:1b:d4:0d:8a:cc:4d:a4:03:fc:cf:
9c:4a:2c:7a:ba:1a:9f:26:0e:80:05:14:fe:1e:de:
64:d4:31:1e:3f:ca:fb:1d:f0:37:88:2f:55:b9:03:
d8:26:4d:56:98:cc:eb:f4:f6:5a:dd:1b:a6:81:21:
f6:eb:24:17:45:36:2a:e2:90:bd:8a:20:fb:6f:3a:
f6:c9:54:4b:71:1e:cc:8b:81:d1:2d:83:1c:08:ec:
f0:f3:5d:e1:8d:03:19:d2:a9:74:06:4c:8e:b9:3c:
e6:d8:aa:30:01:4e:55:87:8c:f8:dd:21:c7:41:25:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:38:AB:22:A4:97:8B:E6:39:2D:DD:5B:93:61:F3:50:0D:FF:FA
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c6:39:f7:2d:5e:1e:55:3d:9f:a7:b6:bd:3e:ee:3f:ea:2b:
69:ba:f2:1b:52:c5:a2:1c:f8:bf:36:19:e4:5a:3e:41:de:20:
87:a7:c3:a6:04:51:81:c6:15:2a:a3:8c:e9:dd:93:2f:44:f5:
00:1f:25:38:ef:f2:31:1c:20:a3:eb:2c:22:32:4d:83:cb:34:
f5:be:94:87:84:c4:f7:f3:98:ff:a4:31:06:c3:3f:98:99:57:
f3:20:d7:8e:15:8e:81:0f:4d:49:fe:56:1f:0b:cd:2e:5b:92:
44:9a:d2:61:b7:cb:6f:c6:47:5c:d3:2a:6a:52:49:be:f9:72:
7d:31:11:4c:7d:6b:ad:85:4a:41:32:85:ea:42:74:81:5d:c1:
27:e9:dd:10:d9:89:00:53:8b:51:f8:18:ad:e8:2e:ef:87:61:
84:2f:fa:f2:1d:f7:00:e4:76:1b:9d:24:ff:cc:40:4f:24:15:
e5:24:c3:88:58:33:f0:fd:42:e0:47:cb:95:9c:75:ea:2f:92:
1b:1c:e7:92:2c:2d:c2:32:8a:28:5b:e6:74:c4:14:4a:8e:43:
14:05:91:6f:56:af:84:19:68:36:77:41:d3:d4:2d:8d:d8:9e:
53:2f:71:5e:4e:4b:5e:5c:34:42:82:9e:1d:6c:66:3d:83:06:
bc:46:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:54 2025 by rpki-client