Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: CQZ9VfhrkBkmRfm0mI6EwKOH+E3swBuTSIETzUP1k/s=
Subject key identifier: 22:5D:C6:51:21:A4:54:8D:E2:7A:D0:02:9A:20:0F:FA:DF:26:0B:96
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 01984776AF56BE3680C9BE16B82D37540A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 09EC
Signing time: Sat 26 Jul 2025 16:00:17 +0000
Manifest this update: Sat 26 Jul 2025 16:00:17 +0000
Manifest next update: Sun 27 Jul 2025 16:00:17 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: LP9So07Q6UoXH8SL4z5pB8JbKU8Exg79Ywt6gBrcY6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:af:56:be:36:80:c9:be:16:b8:2d:37:54:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Jul 26 16:00:17 2025 GMT
Not After : Jul 27 16:00:17 2025 GMT
Subject: CN=225dc65121a4548de27ad0029a200ffadf260b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:60:76:c1:dc:f8:9d:9f:a8:79:89:fb:16:
9d:70:78:99:4a:0a:fc:78:eb:58:73:58:71:17:50:
af:19:23:2b:63:cf:2b:cf:17:51:0a:c0:e5:f9:d4:
15:2b:09:b7:83:62:63:a4:b6:68:76:e9:2b:b8:9d:
e3:23:87:e4:45:de:62:25:b7:f5:b1:5a:83:62:8c:
ff:ed:6c:9b:59:14:be:67:f8:ef:7e:5b:da:1f:2e:
06:5e:df:f7:db:65:c6:85:94:7f:56:90:e9:a1:fd:
00:78:97:41:5c:be:35:05:1d:cb:42:5a:9b:c6:e4:
7b:ea:28:32:b7:6b:cb:48:6e:84:9e:8a:d7:fc:95:
49:ef:e2:23:ea:9b:7f:eb:2e:06:9d:5d:0b:97:1e:
cf:5f:03:ab:88:1f:07:db:20:03:ac:d0:68:2e:29:
dd:6f:d2:92:1e:96:e4:2a:54:ff:4d:c4:01:27:75:
fc:b0:68:19:5a:e9:fd:ed:54:0a:08:ed:6b:f8:b1:
88:48:d4:be:e9:05:20:a8:a5:70:64:e6:02:18:50:
ae:fe:0d:c3:d3:b9:81:a5:e2:12:25:5d:b5:63:91:
0b:a6:96:5e:3d:50:05:26:c3:e8:d7:ef:43:0d:07:
36:36:e2:8a:8a:8d:5a:9f:5e:95:70:ed:a0:42:e2:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:C6:51:21:A4:54:8D:E2:7A:D0:02:9A:20:0F:FA:DF:26:0B:96
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:57:35:00:9e:3a:7f:ab:43:30:e2:79:27:e1:94:d8:52:71:
7c:de:a9:fc:2c:4d:11:dd:a7:f4:dc:63:d6:f9:cc:be:25:87:
0e:e9:9c:eb:0e:26:9a:14:17:d7:f5:fc:a6:88:46:ce:48:13:
f8:99:bd:cb:01:ab:a7:5d:b3:af:d6:16:5f:58:54:21:28:24:
a6:8c:bc:14:0a:d8:d6:b0:dd:50:e0:31:aa:b4:0f:58:20:58:
c4:97:1d:c9:ec:63:c1:b9:5f:2b:94:9e:b3:0d:fd:79:ce:49:
0c:b4:19:26:8b:c3:29:6f:69:aa:1d:c2:9d:31:51:6e:18:56:
75:d5:1b:38:fc:ee:1e:b7:c9:05:cb:86:96:8d:79:72:91:a5:
dc:60:91:6d:fe:ad:dd:06:d7:da:1a:33:11:82:c0:3d:59:86:
98:55:2b:e7:01:df:18:9e:5e:a2:ea:03:62:33:ef:92:49:8f:
36:5b:0b:ca:fd:ed:36:2e:ca:0b:18:db:32:90:f8:30:e4:02:
1f:89:81:72:a1:9b:b0:a1:51:6f:04:a0:4b:ab:e8:25:23:d1:
52:b8:38:2b:bd:b1:ce:83:81:67:3b:5d:0d:cd:44:af:67:3f:
86:ba:30:a4:16:d9:6e:e6:40:79:f5:43:18:c8:37:09:e0:3f:
05:6e:ea:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdq9WvjaAyb4WuC03VApkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjUwNzI2MTYwMDE3WhcNMjUwNzI3MTYwMDE3WjAzMTEwLwYDVQQD
EygyMjVkYzY1MTIxYTQ1NDhkZTI3YWQwMDI5YTIwMGZmYWRmMjYwYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMBgdsHc+J2fqHmJ+xadcHiZSgr8
eOtYc1hxF1CvGSMrY88rzxdRCsDl+dQVKwm3g2JjpLZodukruJ3jI4fkRd5iJbf1
sVqDYoz/7WybWRS+Z/jvflvaHy4GXt/322XGhZR/VpDpof0AeJdBXL41BR3LQlqb
xuR76igyt2vLSG6EnorX/JVJ7+Ij6pt/6y4GnV0Llx7PXwOriB8H2yADrNBoLind
b9KSHpbkKlT/TcQBJ3X8sGgZWun97VQKCO1r+LGISNS+6QUgqKVwZOYCGFCu/g3D
07mBpeISJV21Y5ELppZePVAFJsPo1+9DDQc2NuKKio1an16VcO2gQuLegwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJdxlEhpFSN4nrQApogD/rfJguWMB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Fc1AJ46
f6tDMOJ5J+GU2FJxfN6p/CxNEd2n9Nxj1vnMviWHDumc6w4mmhQX1/X8pohGzkgT
+Jm9ywGrp12zr9YWX1hUISgkpoy8FArY1rDdUOAxqrQPWCBYxJcdyexjwblfK5Se
sw39ec5JDLQZJovDKW9pqh3CnTFRbhhWddUbOPzuHrfJBcuGlo15cpGl3GCRbf6t
3QbX2hozEYLAPVmGmFUr5wHfGJ5eouoDYjPvkkmPNlsLyv3tNi7KCxjbMpD4MOQC
H4mBcqGbsKFRbwSgS6voJSPRUrg4K72xzoOBZztdDc1Er2c/hrowpBbZbuZAefVD
GMg3CeA/BW7qMw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:36 2025 by rpki-client