Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: tQXRmsoyTwET7UZjVBjReWsgiDvkiB4nkyLMtYbQuw8=
Subject key identifier: 31:5B:ED:FE:41:2D:2F:0A:E9:A8:4E:BE:98:EF:3F:A0:E6:96:28:3B
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 01974C69288303436293769423768D145AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 096A
Signing time: Sat 07 Jun 2025 22:00:49 +0000
Manifest this update: Sat 07 Jun 2025 22:00:49 +0000
Manifest next update: Sun 08 Jun 2025 22:00:49 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: uirLfOXvTuLVg84RugI0bQ4vVOiNb7SGpQ5OfbAXxAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:28:83:03:43:62:93:76:94:23:76:8d:14:5a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Jun 7 22:00:49 2025 GMT
Not After : Jun 8 22:00:49 2025 GMT
Subject: CN=315bedfe412d2f0ae9a84ebe98ef3fa0e696283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:ef:aa:04:7f:6a:54:3f:60:61:b4:5f:02:
45:0c:08:e6:fe:92:f0:cd:14:62:95:fa:bb:39:e8:
d7:ed:e1:12:d2:92:5d:92:5d:2a:e4:d9:e6:60:ad:
d9:5c:6b:5f:aa:61:bd:e4:40:a7:e4:4d:e9:7e:bb:
07:4a:8b:77:b3:2e:df:57:bd:48:8d:9b:ea:f0:c9:
60:a4:de:a1:3a:e6:c7:00:9a:1b:98:70:94:68:d1:
30:79:a5:83:f0:4b:47:b4:3b:b2:d5:9e:60:23:6e:
df:c3:56:3c:6f:68:47:d2:93:9a:d0:e1:63:19:e4:
17:bd:47:a3:43:5d:49:d6:04:f1:e0:c0:17:e7:31:
e1:28:22:31:10:5a:10:45:f8:d6:1e:b2:26:de:04:
db:e1:6a:ba:44:d9:e4:6b:a3:89:12:ee:18:5d:11:
7f:1f:d9:ca:dd:d7:78:34:a2:d3:23:0a:e2:40:fe:
d8:b4:9a:de:e0:b4:37:a0:4d:8e:8a:a0:11:50:86:
5c:e8:2b:10:aa:44:f8:9c:b4:48:b1:6b:dd:bd:6d:
12:ab:a2:45:25:16:5e:79:ec:cd:22:79:a4:06:09:
95:03:54:81:fb:48:00:80:5f:9a:40:e5:fa:9e:fd:
17:2b:c8:19:94:b1:69:64:a5:76:ab:95:4c:3a:92:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:ED:FE:41:2D:2F:0A:E9:A8:4E:BE:98:EF:3F:A0:E6:96:28:3B
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:53:82:7a:8b:ae:27:15:30:f6:24:0d:2d:14:db:b7:cf:9a:
3c:73:5b:e0:a2:ca:58:f3:ea:85:03:13:7a:05:33:c2:c5:ff:
d5:97:18:4e:b2:ee:07:e1:0e:7b:eb:00:1b:75:53:04:12:7c:
e7:1a:15:57:b1:5d:34:d2:3d:44:9f:5f:f8:e8:97:d4:7c:73:
53:d7:da:1b:e2:87:74:79:53:9c:86:5d:37:4e:d5:48:96:3b:
70:eb:25:23:8a:c1:7e:2a:a5:2a:2d:6c:67:f2:3c:1b:4e:57:
0c:c1:19:ab:a3:de:d4:4b:fc:c6:3e:fb:2b:22:c3:17:1e:67:
7c:08:86:4e:8b:79:2f:f6:22:16:2e:9b:1b:86:ce:6f:e8:1a:
12:02:1e:ed:92:7b:c1:24:0a:1a:ff:2a:0c:ee:22:1d:e6:ee:
a0:58:ed:91:34:e9:16:b9:be:b3:f7:ef:91:86:68:ab:4f:89:
02:b2:e1:b5:90:00:72:db:9d:36:37:c4:88:86:ce:64:53:bb:
16:21:47:4b:13:31:3e:63:16:bd:2e:49:0a:e1:45:25:8d:6d:
f2:61:b0:30:54:7f:60:1f:47:d0:24:e6:1b:55:a3:26:2c:be:
54:e0:df:f4:4f:59:df:81:aa:42:a0:dc:d4:f5:03:f9:a3:89:
1b:ee:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:20 2025 by rpki-client