Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: M6m8z02G++A9HlqKKdU63bIf80IJs4JYrA/Dw4OMFp4=
Subject key identifier: D3:AC:F8:AD:E0:7D:6F:A1:2C:84:24:E9:33:0E:9B:3D:AC:C2:88:A7
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 01992330EDB1350F780D6D34D353B66B866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 0367
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: +z4TWmdKJuPHwQbU3+4sPov3Bw6MW8UE2YcPs0RvrnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ed:b1:35:0f:78:0d:6d:34:d3:53:b6:6b:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=d3acf8ade07d6fa12c8424e9330e9b3dacc288a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:6c:d7:86:92:4e:b9:f5:04:b5:ab:1f:50:
b6:e1:b2:17:65:76:be:27:b2:a9:87:96:c8:8f:ca:
dd:90:d8:29:c9:db:b2:0f:a7:a6:ef:a0:84:91:6e:
5c:7a:78:a4:e8:69:0e:cd:e1:b5:07:26:8f:a3:65:
58:86:dd:b0:0f:c0:fb:f1:7e:69:69:1c:19:82:3d:
6e:62:b8:2a:3c:fb:b3:2a:da:f6:e0:e0:83:b8:85:
05:6f:75:dc:01:7b:ae:59:78:78:05:71:81:e4:3e:
4e:f9:2d:10:5a:ef:84:63:5e:ad:b8:5a:1e:07:5e:
5e:cb:60:b4:fd:08:a1:41:3b:a8:dd:fc:01:8a:f0:
ef:e6:cd:78:48:4e:6a:e4:99:b3:f2:4d:90:f6:8c:
a7:a7:76:db:80:8e:b8:d2:80:5f:bb:85:dc:cb:16:
5a:5f:1c:94:e5:91:b0:e3:27:55:b0:29:da:40:fb:
8d:b3:a3:6c:8d:e8:55:25:2c:38:98:60:d9:f6:4f:
99:32:01:eb:0d:17:9d:d9:b8:01:f5:a0:1c:bc:c2:
96:fe:de:50:e4:2c:ff:c0:d0:c3:6e:47:84:35:e3:
56:73:08:10:05:54:ef:32:16:25:69:e6:00:c1:de:
37:5e:34:63:c7:13:5d:69:06:8d:e4:8c:c9:a6:6a:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:F8:AD:E0:7D:6F:A1:2C:84:24:E9:33:0E:9B:3D:AC:C2:88:A7
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a2:ed:98:1d:65:49:48:31:50:d5:f3:47:4f:7d:e7:0a:a8:
58:ae:e5:36:96:6f:df:eb:18:aa:fc:0c:4f:c5:2b:aa:f3:ed:
b1:70:a1:12:79:88:2b:35:f8:e7:e2:1f:1f:fa:0e:13:7f:0f:
24:e9:ef:1f:10:cb:2d:df:79:a5:78:b7:dd:d5:78:6e:c5:01:
07:39:88:0f:1c:22:3a:ec:66:29:84:8d:dc:4c:72:b3:ae:d0:
2b:9c:19:0f:36:b4:a3:b3:91:1f:e5:41:05:b3:c1:57:61:a4:
01:14:b6:f7:ca:6a:3c:4d:16:dd:77:a8:ac:6e:9d:52:97:ef:
81:fe:09:38:59:2d:a6:19:46:37:45:d0:61:2d:df:0c:65:7b:
e6:fd:92:8b:11:57:4c:b5:26:84:0c:c7:f7:c8:9d:d8:c3:1c:
18:c0:a2:75:6a:fd:d0:16:c3:a9:79:d5:3d:f5:4f:9d:ff:4f:
30:92:ee:84:6c:05:b5:1d:a4:f6:19:f7:86:c3:b9:16:3f:1f:
b8:36:02:ef:8f:d7:af:7d:76:03:0a:43:15:dd:93:23:87:91:
22:d6:6b:31:0d:68:45:c0:c6:21:6a:5b:b4:18:04:5d:00:cb:
97:9b:69:01:39:24:52:d5:64:fc:e0:ce:e2:4c:cf:e7:c7:45:
16:6e:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:31 2025 by rpki-client