Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: qjHvIPvL03pD2zihNeIppV/PZWZf//XfslsS3u0JlaA=
Subject key identifier: 1D:43:EB:B4:0D:0C:73:83:5B:29:40:C7:A1:62:16:05:2B:D8:38:3A
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 0198D5BC2A46CD1F7D2F3C07079860B66D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 06DB
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: CV8FeVER8Te1x4W1fKBHpPm6THP+5XlEsSpmXZfPTIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2a:46:cd:1f:7d:2f:3c:07:07:98:60:b6:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=1d43ebb40d0c73835b2940c7a16216052bd8383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:ba:b7:f5:42:75:4c:a4:45:ee:17:b6:09:
6a:36:8b:2a:37:86:b3:b7:e0:33:91:13:4e:71:a9:
8c:3b:b3:ab:83:fd:b8:dd:64:7d:b5:76:f0:56:76:
ad:7d:e8:b0:b2:73:2a:f3:89:14:30:7b:be:4f:8e:
37:39:e8:77:78:ed:4c:0f:08:6f:55:6a:a9:83:2c:
6b:35:74:22:bf:8d:11:49:cf:58:cd:e0:5b:23:1d:
7c:6c:35:32:ed:04:69:fa:72:ca:dc:33:dd:3d:d1:
21:81:c7:af:24:f2:6a:f1:cb:23:35:5c:d8:08:29:
f5:6a:04:7f:42:2f:89:cb:b4:64:ab:83:23:75:85:
c8:ca:28:5c:f8:4d:fb:b1:b1:79:03:5e:98:96:ef:
d7:0f:91:f4:14:5f:ea:67:6e:91:d7:a4:45:05:47:
dd:00:f1:bd:77:e9:26:89:eb:31:f3:fe:ee:f5:79:
d4:37:32:a5:98:a9:27:08:35:43:ac:3b:59:84:b3:
41:f8:13:c9:21:57:d3:0b:5c:8d:a9:81:91:6d:fc:
79:be:80:d1:20:4b:c3:98:5a:6e:db:0d:d5:ce:4c:
52:4e:3c:0d:53:87:cb:5e:bd:f8:bd:ed:ae:42:96:
de:dd:8d:62:9c:5a:3a:36:c3:6e:17:10:38:83:9d:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:EB:B4:0D:0C:73:83:5B:29:40:C7:A1:62:16:05:2B:D8:38:3A
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1f:80:ac:85:a9:76:20:18:23:89:c5:51:63:2a:2a:0c:9d:
89:f6:51:36:f9:e5:6f:8a:0a:e0:93:95:ee:f9:18:1b:70:03:
17:fd:36:c7:03:ca:fd:e5:64:57:fa:13:99:d9:00:21:5b:a0:
a4:bd:c0:a3:4b:02:e2:bd:12:33:2e:54:da:a0:1a:4b:a8:76:
12:3e:39:75:de:bb:8e:4a:31:b9:97:4b:07:f1:53:62:b5:ef:
e5:a4:e9:34:ae:0e:e1:64:fd:e1:23:3c:78:7b:95:de:f0:f8:
43:58:3e:f0:76:6a:84:8f:a5:eb:f1:e6:15:1b:2c:39:6a:28:
9a:20:1d:02:6d:35:ff:61:ee:11:15:24:cd:f1:0a:2b:15:40:
2c:0f:bd:03:5d:72:d2:26:7a:85:00:60:f7:84:dd:73:83:92:
0a:ac:76:bc:96:7b:13:36:8d:0c:28:a0:c0:ea:0d:3e:aa:cb:
3a:77:e3:bf:61:43:70:9d:d2:0d:1e:e4:81:3b:5e:ca:0d:bb:
23:01:d4:49:20:c1:b1:f5:ab:ff:2f:c0:a8:9b:79:4a:9b:ea:
27:34:c1:6d:1f:6e:d0:0e:44:03:7b:ec:87:ba:10:9e:47:d6:
aa:cc:6b:80:87:5c:cb:74:e7:b0:c8:8e:77:1c:df:75:49:b8:
ec:a9:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:14 2025 by rpki-client