Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
File: 04BE23ZiygAUgai9swt6vRi86ao.mft (raw, json)
Hash identifier: 9m/YsJ7GwMnLOVqQkeQkt1bzY/R3BHJJXKzNboiBfMQ=
Subject key identifier: AE:87:42:4C:AD:31:42:7E:22:25:3A:8C:BC:0C:4C:66:D6:2F:AD:BF
Authority key identifier: D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
Certificate issuer: /CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Certificate serial: 0198D515DDD351A1D9AB7430E4679B42900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
Manifest number: 110C
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: 04BE23ZiygAUgai9swt6vRi86ao.crl (hash: 0BSkQqsoJGPE8dWYovSnSwmGzlRF/2pLglG44KLB2lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dd:d3:51:a1:d9:ab:74:30:e4:67:9b:42:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=ae87424cad31427e22253a8cbc0c4c66d62fadbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:a8:e1:2d:e7:6b:ba:4d:76:eb:56:6d:b3:
01:09:f2:11:a3:43:80:dc:95:1a:41:eb:e5:94:4d:
9c:51:d3:c9:f7:6d:0b:78:c6:ca:2c:ba:69:24:78:
49:4f:e6:6a:f7:38:50:13:5d:1e:cc:40:66:65:b1:
a0:0a:26:87:62:8c:d1:92:a8:b1:53:9a:ea:3f:ea:
45:82:f2:e7:1a:ab:14:90:1e:19:78:b5:5b:0b:a3:
44:85:be:99:91:42:ab:cb:ba:7c:23:3e:78:c9:11:
a1:77:9b:fc:ac:82:52:27:6c:1c:51:9b:7e:50:3f:
13:21:7a:09:18:b8:7d:7a:39:4b:af:51:a4:1d:ee:
fb:8b:34:40:f8:d8:5c:fd:66:fd:36:30:10:4d:2a:
40:b1:90:68:c0:79:f4:9a:46:b6:5c:e9:d8:e9:12:
57:0e:dd:c9:4e:79:31:b5:17:35:3a:3c:14:37:df:
46:87:52:3e:2e:09:8e:b7:b3:ef:b5:41:13:0d:a2:
84:49:ba:c0:4e:bb:49:86:28:e9:e8:3f:fd:56:bd:
c5:45:47:c2:98:a7:c3:6b:42:e1:55:93:27:2b:f7:
f7:11:21:00:6d:ed:78:e5:cb:4b:3e:55:c8:54:20:
e3:da:89:31:af:46:51:9f:2d:59:87:26:1b:6c:53:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:42:4C:AD:31:42:7E:22:25:3A:8C:BC:0C:4C:66:D6:2F:AD:BF
X509v3 Authority Key Identifier:
keyid:D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6b:6e:c1:a1:52:4b:cf:80:91:44:52:3e:a7:32:67:0e:89:
6e:7d:ac:c8:57:8b:b9:f8:26:bb:e3:9c:fd:82:81:e1:30:30:
9c:d8:f1:7d:e9:1b:27:90:b0:27:97:98:82:f6:e4:94:ca:37:
d0:8a:b6:67:19:75:90:3f:9e:a0:32:8a:cf:e3:8e:29:ba:87:
15:a2:c5:33:e8:00:5f:ef:ad:da:81:3f:e4:f9:a3:ea:4c:9b:
81:2e:99:6e:94:ea:7b:5b:8c:35:82:42:17:70:5e:06:8e:73:
62:e8:f0:7b:4c:35:84:8a:0c:1e:28:ce:1e:d2:03:60:89:a1:
a3:e9:94:77:fd:67:b8:b7:ca:c5:f2:e7:f9:99:40:0f:6f:71:
53:34:62:60:38:98:bf:51:80:1a:45:bb:35:06:03:ba:1a:01:
ad:72:01:1f:4a:8e:c1:86:3a:80:f0:6d:2f:3a:c8:39:17:c0:
db:73:58:13:ff:84:1f:c5:1f:a9:f7:97:0f:b9:c2:eb:6a:ed:
81:90:01:75:33:c8:34:18:6d:0c:fe:c3:96:69:b5:e1:17:1c:
6e:59:44:02:ef:a9:c2:c6:88:5e:3f:1f:35:30:1e:53:cb:dd:
3d:8b:89:43:79:1d:f1:4e:bd:99:c3:68:96:30:30:8f:3c:f6:
aa:9f:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:07 2025 by rpki-client