Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: le2OrQinxdfl+/+1m/IF4CT2jI5YS7GVZwC0oRnrOvY=
Subject key identifier: 13:AB:9F:EF:86:CD:4C:9F:D0:82:63:00:52:EA:77:84:D7:84:82:98
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 0197B6A1ED67A0DA73B4D84D08AD1DC48F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 09A1
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: +X2cc8vpzVjf5uc03fx6uNC2P+1LecnhZtZ4uOEIOwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:67:a0:da:73:b4:d8:4d:08:ad:1d:c4:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=13ab9fef86cd4c9fd082630052ea7784d7848298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:3b:0d:e0:19:a8:0b:41:17:0e:ef:f4:a6:
0d:37:ab:dc:9d:63:69:81:e5:c6:5f:9b:3c:13:4a:
75:5d:c6:8c:77:e7:7f:e6:80:23:89:58:77:c8:db:
bf:46:1b:9e:81:aa:f0:cd:8b:4e:23:88:a1:37:05:
a9:06:6a:fa:41:ac:64:ac:18:f8:1f:84:a3:33:f8:
ca:be:3c:69:ba:03:2e:99:84:ca:ed:c5:69:ff:6f:
cf:6c:1a:ea:b9:b9:5e:34:5b:b3:56:f1:1e:40:cc:
c5:6f:22:5a:a2:72:59:2c:e6:34:83:6c:79:99:f5:
e0:eb:bb:15:d6:e7:28:0a:7d:90:62:1f:9a:19:39:
ec:ac:08:e2:5b:4b:45:06:0b:ff:2f:4c:e5:11:0b:
4f:76:92:01:e3:5b:05:6d:ad:c2:42:f2:8c:ec:58:
da:b2:c0:96:e9:93:e7:b7:b2:62:af:99:a7:fb:d2:
8f:ee:8f:d9:ce:6a:20:71:8d:21:a5:db:82:dd:bd:
cc:12:43:33:a0:72:08:2d:a3:12:ca:68:37:fc:4c:
dd:9e:5d:c4:b0:da:98:8b:ad:b9:12:74:7a:46:26:
9f:2e:d3:8d:da:a6:5a:1f:8e:f6:1f:84:eb:b1:0b:
cd:92:24:95:d3:1f:b5:0b:5c:e8:ef:22:5d:b5:0d:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:9F:EF:86:CD:4C:9F:D0:82:63:00:52:EA:77:84:D7:84:82:98
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:83:2c:7c:b5:12:07:c2:aa:17:7a:b3:0c:33:2a:c0:be:
88:cb:68:90:b7:0e:84:12:ce:1a:38:a0:a1:e1:00:b2:7a:7e:
85:f5:c2:b8:80:75:28:4e:03:57:b6:5a:07:16:99:45:d8:ec:
8f:2c:58:4c:ff:93:f4:4a:38:95:bf:b3:86:0f:23:f5:ef:30:
04:a1:80:3c:79:88:86:c6:bb:19:f9:b1:59:b5:3f:ff:37:68:
ac:e5:9b:1a:29:d7:fa:ca:52:e5:b5:0a:1b:e8:f2:d5:7c:a8:
1a:91:c0:07:3a:06:c3:94:73:25:63:af:3c:e8:76:79:9b:8d:
49:be:1c:02:b3:aa:45:10:c4:6c:90:94:f2:0d:c9:75:a4:b3:
c1:0f:56:bf:bf:cd:7b:62:4d:d9:06:be:7a:8a:a4:ee:e8:33:
bc:fb:18:9a:72:0a:59:24:28:a4:c1:8c:3c:e7:3e:ee:be:50:
19:df:51:ad:cb:8c:33:f6:a4:ee:25:5e:99:9d:1c:0d:57:cf:
79:e6:b6:c5:49:e8:27:c6:95:7e:94:76:d2:bb:a7:6b:df:44:
6d:d9:a1:fa:63:82:1f:96:04:23:49:cd:f1:41:7f:57:fb:60:
d2:7e:dd:97:e0:36:05:f9:29:70:8a:71:f6:19:dc:f7:db:93:
d1:8d:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:55 2025 by rpki-client