Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: 7V8zAQcVuhW4+gWk/XmNbxGbb4zgOp4P2bDF1T04Muw=
Subject key identifier: 65:24:89:22:61:81:27:14:50:05:EF:0F:00:82:8F:45:BB:4A:0F:54
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 0198D5BBE107D88E8C433F837E3BA08BE400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0964
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: jW5/Exz7uzPkKfGieelCX+xL6DZXT+F9YxyUEqtCIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e1:07:d8:8e:8c:43:3f:83:7e:3b:a0:8b:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=65248922618127145005ef0f00828f45bb4a0f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:22:a1:bc:05:3f:26:dc:33:38:49:1b:40:
de:0d:6d:bb:97:c3:b8:9b:ab:16:8c:87:f1:9c:55:
78:32:60:d2:cb:a2:e5:84:73:c0:d3:d5:e0:d1:e8:
96:04:75:b6:27:a4:86:2c:ed:49:55:ac:8d:79:62:
5d:e9:7a:99:95:94:4e:14:94:16:53:0f:d2:92:92:
b2:b5:46:03:a5:9d:9f:4b:a3:ff:5b:11:2b:e8:ca:
65:1d:88:f1:27:f7:ec:e9:8c:d7:f0:af:9f:01:70:
99:c4:b6:a0:f0:c9:dd:47:37:52:ce:c5:a4:96:ec:
2b:1a:e9:5d:d2:0d:bf:5f:3c:85:57:87:f7:ed:3a:
d1:82:31:d4:22:47:0e:a2:5c:a6:15:36:2d:28:79:
8d:14:55:f6:e9:97:e6:12:0e:34:1b:c8:77:62:06:
27:ca:48:7d:d8:46:35:9a:b8:f3:53:f8:8e:fc:58:
99:1f:fd:1a:e4:17:25:8d:f0:62:ad:2a:94:e6:d2:
be:fb:9a:25:22:98:6e:84:f3:76:01:28:6c:b3:8e:
a1:6f:82:f3:07:40:9b:ae:ca:5f:9c:a1:c1:32:fa:
d5:1e:44:20:9d:03:89:83:24:54:70:f0:0c:c6:74:
36:70:75:e0:fe:da:31:de:4e:b6:47:91:4c:80:02:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:89:22:61:81:27:14:50:05:EF:0F:00:82:8F:45:BB:4A:0F:54
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c2:2d:a9:c1:06:43:64:01:db:5a:b8:c4:ec:d8:0e:f4:81:
0b:90:83:df:6a:95:58:28:b4:ec:43:6f:3d:df:6f:19:93:b3:
70:d1:27:64:f8:03:d6:97:78:79:ea:1f:56:02:92:6d:b5:88:
4c:f4:f7:90:84:f8:9b:92:3d:42:d3:c5:43:9f:e5:3a:eb:7a:
f9:93:c6:40:d0:1f:46:39:d5:02:91:dc:b7:76:52:fb:a2:f9:
40:68:3e:2a:7f:c1:3a:96:3d:e7:29:33:16:53:85:6c:7c:04:
bd:79:9e:12:09:7a:67:c7:2c:09:13:84:36:9f:87:d6:4b:29:
17:61:18:c5:4c:c1:f0:37:be:e6:11:ce:43:48:26:a7:7a:c9:
c9:05:7b:b3:78:f1:7d:ba:18:47:f0:ee:ce:a2:54:84:93:2a:
1f:8f:07:55:0b:44:0d:08:e5:53:4b:8c:80:8f:a3:02:5c:69:
1d:0e:2c:bb:f8:8d:55:ff:bf:8a:b4:8f:40:f7:1d:5b:db:00:
92:88:ed:9e:ad:8e:bb:c9:62:cd:61:45:2b:90:41:a5:b7:a1:
86:4d:6d:19:fa:cc:25:34:c9:45:7c:a8:51:50:cb:6b:fe:70:
d9:8a:36:1f:c3:dc:9b:ef:56:1a:ac:fd:25:72:aa:d1:81:ae:
7f:7a:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:50 2025 by rpki-client