Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: 6FZos6eXiNOZnnjNCfdESJY+JzM2466t7tnR7v53cCk=
Subject key identifier: 65:2C:B5:7B:5B:36:C2:68:C6:B9:89:4E:2A:3F:29:F9:2B:09:7D:D2
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 0198D660598EC21E4D0F5FDF91D13B83AEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 0520
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: BpCclUhRMLnf+6tcGnKtGMxNThCpb0cqpaIxXKP3xvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:59:8e:c2:1e:4d:0f:5f:df:91:d1:3b:83:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=652cb57b5b36c268c6b9894e2a3f29f92b097dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:84:a1:6d:3a:04:f9:f0:cf:ad:cd:ea:6b:
f9:2b:82:76:bb:76:d5:ae:f2:9e:9c:02:43:60:75:
c6:46:d5:e1:3c:09:b6:6c:7f:34:c3:03:49:26:fc:
08:5a:9b:f4:27:9b:91:b4:c7:65:43:ec:37:82:4d:
27:14:b2:d3:10:bb:2c:de:09:87:16:ab:10:d0:fd:
7c:f3:78:fd:86:36:21:da:1c:dc:1f:55:38:70:60:
ea:eb:81:71:19:21:ab:3d:3a:6a:01:33:cd:b3:01:
17:3a:87:19:7c:78:ff:7b:e9:a2:f7:cb:ee:43:2d:
fd:54:51:1c:d1:c7:21:7e:05:ba:56:11:92:d5:7d:
2d:1b:99:91:68:08:b6:6a:02:74:1c:fb:13:2d:fd:
1b:e1:00:8e:bc:b6:64:7d:ce:9d:c6:5d:8a:5a:dc:
e8:95:4a:28:51:eb:39:aa:72:8d:da:81:00:64:af:
47:d0:c3:c9:ac:68:06:9f:74:98:c7:22:41:03:ca:
3b:54:ca:e0:a1:ab:3b:a9:97:d2:33:f4:fc:ef:3d:
69:e7:97:1b:d2:2b:57:01:ab:1f:9c:f0:78:c4:bf:
fd:3e:b7:04:ca:1e:14:7c:a7:7d:16:50:a2:ee:f7:
7a:80:be:ce:cc:af:3f:fc:e5:2c:44:36:f2:c4:a5:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:B5:7B:5B:36:C2:68:C6:B9:89:4E:2A:3F:29:F9:2B:09:7D:D2
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:86:ae:b8:71:2f:00:36:65:d1:84:d4:e2:08:8b:8e:cb:ad:
12:38:53:da:3c:f2:66:8c:0f:54:82:d7:b4:1e:1b:05:90:92:
d9:d9:15:ac:e9:3f:7a:41:85:06:f3:79:e8:c3:db:45:fa:c1:
65:f2:c1:5a:53:ac:a6:3d:72:bb:b3:08:e3:ec:bb:67:f4:af:
66:6c:64:d3:59:65:be:e5:96:a2:2f:0d:16:3f:9c:83:ca:90:
91:a5:e7:b2:14:0b:c3:a4:31:f1:0c:b5:5b:57:e5:0e:85:9a:
a0:20:58:af:40:80:e5:9a:b8:bb:f5:79:b6:77:5e:2c:ba:e4:
61:80:1d:36:25:1f:09:4f:ab:5c:19:92:e2:e7:a3:82:49:e9:
5f:02:f3:71:0a:35:60:df:c2:31:f9:e7:5e:6f:df:34:fb:7e:
83:bd:a6:50:df:36:5e:99:e5:24:fa:3a:fc:1f:3e:49:06:cc:
20:4e:4e:8c:ea:61:b5:61:fe:40:38:6f:f8:86:c7:a0:15:b4:
6f:15:e1:3b:58:17:9f:c6:94:69:36:77:7c:3e:d7:31:32:bc:
99:0d:4b:3f:da:fa:92:42:ed:50:ad:50:90:b7:2b:cf:c7:55:
2a:d9:65:16:4a:17:76:2b:23:c9:f1:4d:37:3c:76:06:05:71:
62:65:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:57 2025 by rpki-client