Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: u90tYPRfwRbT4a9D3awaexrix/HwnZ2QliOxFJ7OJkI=
Subject key identifier: D0:45:0A:3E:3D:13:AD:2E:C8:0B:B2:59:7B:56:40:75:BB:42:24:A8
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01984964F26FFEA3B4F7AD202A3F087EEF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 04D7
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: v5tp97x8PDPINEjZZi4LgnYdbivMF1TsFEWRLfSaRVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f2:6f:fe:a3:b4:f7:ad:20:2a:3f:08:7e:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=d0450a3e3d13ad2ec80bb2597b564075bb4224a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:ed:cc:39:c6:ad:29:a0:dd:d1:39:5c:20:
3e:20:f0:cf:25:f9:4d:7e:c0:3c:22:0d:20:93:93:
7d:27:ac:74:a6:5e:81:23:bf:89:e9:9c:2e:b8:7f:
1a:bd:a7:2b:f2:18:c8:aa:9f:ba:6f:39:c3:24:aa:
cb:17:50:63:0c:23:d4:b4:b6:de:4e:db:86:e9:9f:
a7:7f:16:20:a5:17:cb:05:8a:11:a1:05:77:97:53:
f4:6d:7a:7b:1b:81:2a:71:a4:97:a9:da:3b:1c:96:
5e:10:18:9b:6b:de:46:1f:3a:f4:f7:8e:62:71:62:
ee:0e:c5:9d:ed:85:ba:1b:0f:51:eb:0d:73:1a:54:
88:a8:1d:02:1a:ae:af:9a:e3:7e:86:05:5f:4e:3c:
9b:d0:77:7c:be:ce:61:89:81:81:06:7e:99:c3:02:
23:a3:fa:90:f9:4e:e9:b7:75:db:eb:ba:f5:8c:e2:
bc:b3:9f:b9:12:94:44:76:a9:bf:20:3e:d9:b6:32:
9d:ce:56:63:44:8d:7a:2b:0a:1b:3e:74:e1:d8:43:
9d:b8:12:d8:6f:c3:da:17:f7:d5:f8:d5:cd:d5:be:
14:0f:17:0a:ae:9d:93:14:d3:8b:c8:49:cd:d5:d3:
ad:48:54:4f:30:85:9a:7a:d7:a3:40:0c:6d:8a:8d:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:0A:3E:3D:13:AD:2E:C8:0B:B2:59:7B:56:40:75:BB:42:24:A8
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:29:4c:09:a3:89:88:eb:17:40:d4:2d:d4:3d:e9:97:bf:
5f:c1:d7:ca:aa:01:28:11:cf:38:df:d6:47:5f:83:9f:a6:71:
95:49:2b:ea:b0:08:9a:36:86:ca:d7:b9:c1:68:03:f8:be:f5:
aa:38:49:20:4c:5f:4d:c2:f8:53:4d:6e:56:42:aa:14:69:a4:
a8:4f:0c:64:b6:48:07:78:f3:5d:e3:76:b1:ff:01:8f:8f:b9:
db:0d:2a:61:17:14:10:c9:56:ab:08:28:62:b4:0f:8d:1a:12:
d2:d1:d3:86:e2:9d:85:84:9d:89:1b:b6:dd:76:09:68:8c:8b:
0f:1b:3d:a0:42:85:ff:40:24:5d:e0:26:97:8a:ea:30:b0:ae:
3a:bf:9c:95:44:69:52:87:14:fa:12:f3:71:f7:54:ab:2c:72:
eb:d3:88:f7:64:61:d2:4c:17:ff:8d:87:ac:05:5e:bf:80:64:
4d:3b:66:76:9a:cc:26:32:58:6a:94:b1:2f:7d:84:00:fe:78:
f1:37:43:27:d1:8e:93:a0:0c:ca:8b:bc:24:4f:01:25:dc:40:
f8:fe:98:10:43:53:26:f1:c5:c3:6b:e7:08:42:5a:6e:e3:90:
83:dc:77:f7:66:97:fe:4c:56:e3:5f:63:90:ee:2b:f4:56:6f:
1a:d0:69:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZPJv/qO0960gKj8Ifu+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk
NmQ5NjkwHhcNMjUwNzI3MDEwMDA5WhcNMjUwNzI4MDEwMDA5WjAzMTEwLwYDVQQD
EyhkMDQ1MGEzZTNkMTNhZDJlYzgwYmIyNTk3YjU2NDA3NWJiNDIyNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ztzDnGrSmg3dE5XCA+IPDPJflN
fsA8Ig0gk5N9J6x0pl6BI7+J6ZwuuH8avacr8hjIqp+6bznDJKrLF1BjDCPUtLbe
TtuG6Z+nfxYgpRfLBYoRoQV3l1P0bXp7G4EqcaSXqdo7HJZeEBiba95GHzr0945i
cWLuDsWd7YW6Gw9R6w1zGlSIqB0CGq6vmuN+hgVfTjyb0Hd8vs5hiYGBBn6ZwwIj
o/qQ+U7pt3Xb67r1jOK8s5+5EpREdqm/ID7ZtjKdzlZjRI16KwobPnTh2EOduBLY
b8PaF/fV+NXN1b4UDxcKrp2TFNOLyEnN1dOtSFRPMIWaetejQAxtio0wmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBFCj49E60uyAuyWXtWQHW7QiSoMB8GA1UdIwQY
MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt
ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0
LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQApTAmj
iYjrF0DULdQ96Ze/X8HXyqoBKBHPON/WR1+Dn6ZxlUkr6rAImjaGyte5wWgD+L71
qjhJIExfTcL4U01uVkKqFGmkqE8MZLZIB3jzXeN2sf8Bj4+52w0qYRcUEMlWqwgo
YrQPjRoS0tHThuKdhYSdiRu23XYJaIyLDxs9oEKF/0AkXeAml4rqMLCuOr+clURp
UocU+hLzcfdUqyxy69OI92Rh0kwX/42HrAVev4BkTTtmdprMJjJYapSxL32EAP54
8TdDJ9GOk6AMyou8JE8BJdxA+P6YEENTJvHFw2vnCEJabuOQg9x392aX/kxW419j
kO4r9FZvGtBpzw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:27 2025 by rpki-client