Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: Eqw9pIMdk//d6OXD5ze+A8Vq32QZB7OzSHBQXtKBsoA=
Subject key identifier: 60:37:04:44:6D:3A:8E:72:B0:C1:50:82:2B:94:34:20:13:10:E1:07
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019A73A6269EF2A4878D16AA1CA25AC0C745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0B0C
Signing time: Tue 11 Nov 2025 16:00:59 +0000
Manifest this update: Tue 11 Nov 2025 16:00:59 +0000
Manifest next update: Wed 12 Nov 2025 16:00:59 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: dYbtCpW+SI6vZQ3w0oLMKw5FieKnZrhiFRCemK+Pn68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:26:9e:f2:a4:87:8d:16:aa:1c:a2:5a:c0:c7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Nov 11 16:00:59 2025 GMT
Not After : Nov 12 16:00:59 2025 GMT
Subject: CN=603704446d3a8e72b0c150822b9434201310e107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:66:f4:5a:dd:d5:47:5d:26:f2:47:bc:41:
5f:bf:f3:63:10:03:51:10:20:aa:aa:ef:8c:62:e8:
aa:7e:18:ab:5d:9c:7f:71:3e:3d:be:c7:90:fd:28:
ba:1e:d6:a0:d7:69:07:69:a7:f9:27:12:be:34:52:
18:6d:e3:59:9b:ba:bd:2e:1b:db:c5:87:8c:21:91:
c0:db:0a:9e:3c:1f:84:43:20:64:59:ad:4d:ca:0a:
af:55:a9:7d:69:96:bf:01:f6:e7:fb:f9:1b:09:0b:
f7:b6:cb:f7:ef:41:01:85:88:85:36:48:3e:19:cd:
76:fb:52:77:01:7a:68:a6:de:7d:f8:59:00:00:6c:
82:9b:46:45:21:e6:14:13:7e:1a:9c:f6:23:92:83:
1e:49:af:9a:fa:38:68:6d:7f:4c:ca:4b:3c:a3:e6:
5f:51:c9:fb:92:2d:0a:68:40:a1:b9:80:03:c1:c1:
fc:88:21:cb:76:41:6f:49:b8:2b:b7:8d:a3:46:63:
4c:83:0c:dd:e8:2a:a4:96:85:40:4c:b7:70:ac:c3:
3d:14:be:41:5d:a3:76:6f:93:46:76:3b:61:ae:80:
29:bc:69:9f:29:c5:59:0b:b5:f6:21:db:8b:dc:8a:
44:f6:b9:8d:22:57:a6:01:52:42:99:34:91:15:34:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:04:44:6D:3A:8E:72:B0:C1:50:82:2B:94:34:20:13:10:E1:07
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:49:f7:69:31:b3:39:90:0e:00:e3:8c:2b:88:ff:37:68:a3:
f2:99:ca:e8:d5:85:11:8e:b2:4c:6b:f3:19:07:bd:9c:40:0a:
f9:81:f0:99:8f:8f:21:80:98:79:af:e6:45:36:7c:a3:0e:22:
a8:2f:67:52:83:57:3e:0b:75:d4:f6:b3:12:df:9c:15:78:f4:
d2:16:f4:ff:b0:da:b4:23:d5:33:54:20:08:5c:cd:76:8c:c6:
5c:7c:8f:cf:98:7e:5a:81:d6:bc:83:ff:68:68:65:dc:5e:14:
bb:e9:11:25:bb:ef:7b:de:de:2c:c9:c0:3e:e7:fe:c7:d1:7a:
9d:eb:5f:f4:73:1e:a3:dc:ef:ac:4c:77:50:a9:5c:51:d8:5d:
65:e8:07:9d:69:d2:44:c1:da:74:91:cf:19:8c:f7:79:0c:78:
3e:d5:65:d4:63:67:0a:b7:e2:27:73:c5:f1:74:9a:b8:05:09:
91:14:9b:40:25:06:3d:19:f1:aa:97:cc:e0:e0:41:c3:e1:ee:
6f:72:50:cd:1f:8e:67:4e:78:33:52:2d:c4:dc:e6:55:f7:8d:
e9:56:19:76:76:a0:19:2d:fc:b0:07:a1:d0:3c:9d:a1:cf:c3:
ad:36:85:e9:51:65:94:ae:d8:fd:7b:db:03:0c:9d:2e:36:b1:
f3:09:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:26 2025 by rpki-client