Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: TgbdBcvR6zZGVbGWs9unRQdxlDHw76CkQ6376kMTYSk=
Subject key identifier: 94:B8:68:76:C2:8B:61:49:C7:25:85:D0:A2:83:E8:E6:D8:0F:F7:96
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 0198D660B33A6FD3EC83BD39E48A7911F341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0A36
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: JVDxBHzPU8CR1Kd2f33z//K6byaxdbhzCd4zm8igzuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b3:3a:6f:d3:ec:83:bd:39:e4:8a:79:11:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=94b86876c28b6149c72585d0a283e8e6d80ff796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:2c:95:00:ee:e4:c4:27:d2:8b:46:f3:3e:
d2:97:c3:6c:dd:b4:2f:6d:e3:f9:32:1f:af:f1:6a:
31:76:7d:40:61:ab:e0:4b:b3:c1:ab:92:59:4d:57:
11:74:41:33:ea:0b:5a:ff:08:96:ed:ac:15:53:d2:
d2:2e:5e:56:d3:98:f3:01:77:4b:54:be:fe:50:30:
7e:55:6b:61:ba:f0:c1:50:92:83:15:d3:9b:1e:34:
3d:7b:c6:f3:02:0b:76:96:12:fd:66:10:33:d7:db:
58:0f:f8:0e:ae:9b:30:86:76:8c:c2:40:4e:a9:8e:
27:20:70:c7:91:2a:f6:2e:9b:c4:b2:8d:2a:4e:6c:
27:d0:b0:68:46:2a:2f:7b:2d:1f:44:28:5c:6c:82:
af:31:f7:4d:86:3c:91:f9:e6:1b:b0:64:29:24:ae:
7b:c2:6e:34:d1:ec:60:b2:c0:3b:c0:6e:d6:94:c9:
8f:55:f3:94:47:fd:cf:64:21:0e:0e:5d:52:4e:9a:
b7:96:9a:cd:23:5c:fc:60:f2:b5:ca:45:c4:12:05:
ea:49:fe:ae:66:98:9b:75:50:46:98:15:52:65:83:
26:e5:ff:3f:14:40:ab:63:94:88:9a:26:24:15:87:
5a:07:b3:7f:0e:0b:e7:2d:a4:88:88:15:da:19:65:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:68:76:C2:8B:61:49:C7:25:85:D0:A2:83:E8:E6:D8:0F:F7:96
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:f9:06:fa:ad:6d:f6:45:38:e2:df:cc:6b:48:09:7c:7c:
53:c8:ad:14:18:f1:7d:8f:88:00:e2:bb:8c:d6:66:6a:29:1d:
54:9a:29:be:33:cf:21:b9:bd:a4:ba:c8:f1:7e:e5:4b:17:59:
68:16:85:34:64:72:b2:36:fc:27:1c:11:0b:21:e6:ad:19:87:
98:48:28:06:6c:48:c9:0b:0b:6a:b2:c2:63:69:10:9e:51:a9:
56:f0:9d:09:99:72:4b:d1:1a:41:04:28:7b:76:84:0d:b6:41:
fc:4c:3f:7c:eb:19:87:f5:ce:1d:36:b3:1a:7d:b6:09:6f:08:
72:d2:20:47:95:a8:40:01:db:1e:1f:f1:af:19:de:b8:15:5b:
7b:b3:a0:d2:87:d2:cd:f8:50:7f:09:89:50:39:83:5e:5e:de:
c5:77:19:dd:9a:7f:e7:6c:51:e9:b0:83:c4:9a:aa:08:6c:2e:
23:5b:19:d1:0a:ac:4d:b3:ea:2a:48:5a:3c:ee:2e:47:87:81:
87:04:1a:b0:37:c9:e7:7e:90:e6:ae:3d:e9:5c:5f:b9:b5:0e:
09:d0:fb:c2:46:47:da:66:bc:39:b2:21:3c:ed:02:dc:89:2d:
0e:2e:70:ae:e7:7e:54:7b:d6:32:e7:03:9b:17:de:34:bc:83:
56:f0:18:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLM6b9Psg7055Ip5EfNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjUwODIzMTAwMTU4WhcNMjUwODI0MTAwMTU4WjAzMTEwLwYDVQQD
Eyg5NGI4Njg3NmMyOGI2MTQ5YzcyNTg1ZDBhMjgzZThlNmQ4MGZmNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR8slQDu5MQn0otG8z7Sl8Ns3bQv
beP5Mh+v8Woxdn1AYavgS7PBq5JZTVcRdEEz6gta/wiW7awVU9LSLl5W05jzAXdL
VL7+UDB+VWthuvDBUJKDFdObHjQ9e8bzAgt2lhL9ZhAz19tYD/gOrpswhnaMwkBO
qY4nIHDHkSr2LpvEso0qTmwn0LBoRiovey0fRChcbIKvMfdNhjyR+eYbsGQpJK57
wm400exgssA7wG7WlMmPVfOUR/3PZCEODl1STpq3lprNI1z8YPK1ykXEEgXqSf6u
ZpibdVBGmBVSZYMm5f8/FECrY5SImiYkFYdaB7N/DgvnLaSIiBXaGWWORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS4aHbCi2FJxyWF0KKD6ObYD/eWMB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWD5Bvqt
bfZFOOLfzGtICXx8U8itFBjxfY+IAOK7jNZmaikdVJopvjPPIbm9pLrI8X7lSxdZ
aBaFNGRysjb8JxwRCyHmrRmHmEgoBmxIyQsLarLCY2kQnlGpVvCdCZlyS9EaQQQo
e3aEDbZB/Ew/fOsZh/XOHTazGn22CW8IctIgR5WoQAHbHh/xrxneuBVbe7Og0ofS
zfhQfwmJUDmDXl7exXcZ3Zp/52xR6bCDxJqqCGwuI1sZ0QqsTbPqKkhaPO4uR4eB
hwQasDfJ536Q5q496VxfubUOCdD7wkZH2ma8ObIhPO0C3IktDi5wrud+VHvWMucD
mxfeNLyDVvAYoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:22 2025 by rpki-client