Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: AkoIlLvIZpSqX2142Tw3nk75N/GOZ06b0AbsJf5mmPk=
Subject key identifier: 39:41:F5:A5:57:EA:0A:C1:C9:5C:EE:23:52:1D:55:C2:D0:32:33:8A
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 0197B88F5815E6CBB3A45899BAF5BFF42ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 048C
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: cKpUNlIXwjNeckOPKZDIqkv1qQAEqBm0Gicz2BT5k5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:58:15:e6:cb:b3:a4:58:99:ba:f5:bf:f4:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=3941f5a557ea0ac1c95cee23521d55c2d032338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:11:15:25:d5:d9:11:74:94:c6:aa:b1:91:
05:fb:84:1b:6b:92:4e:6a:3d:41:75:c1:c2:73:62:
87:48:30:54:82:dd:e7:b4:1b:a0:eb:3d:5a:b4:0f:
13:61:b7:99:81:73:0d:22:e7:3f:43:c2:7e:34:a0:
ae:6b:4f:04:20:2f:f0:82:ed:2a:9d:84:11:31:33:
ff:e3:19:28:45:ef:1a:8c:1e:8b:a8:72:ea:41:a1:
74:3f:22:4b:36:32:23:8d:ad:df:a0:ec:f0:47:ac:
c0:0b:1c:c0:a5:57:01:2a:b8:fb:99:53:6a:af:42:
2a:e5:51:c4:02:e8:13:99:27:a2:2f:f7:54:69:88:
77:a2:12:1b:85:c9:a1:52:99:8b:af:9d:b6:dd:f9:
21:c6:0c:10:d9:16:bd:38:36:60:bb:4f:62:1e:6d:
33:da:ce:2f:46:44:31:2c:b4:a6:91:96:6f:f2:ed:
64:1b:fe:63:43:96:f1:c0:e2:31:5e:a9:c3:91:c1:
3d:82:c5:0d:fe:bf:a8:19:7d:35:52:9f:77:b3:f1:
cb:2b:9b:9c:09:38:00:41:c7:ed:4a:5e:79:2d:c9:
24:f5:22:60:02:17:e9:d4:1f:59:53:d9:1f:08:d6:
83:00:14:6c:4d:0d:11:cd:19:f7:75:91:7b:50:fc:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:F5:A5:57:EA:0A:C1:C9:5C:EE:23:52:1D:55:C2:D0:32:33:8A
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1c:cb:14:9c:75:d0:7c:d6:9a:80:41:a0:ca:d2:f0:43:d8:
25:63:b6:19:f2:a1:cc:65:9c:a9:17:e4:54:03:c7:da:02:ae:
6a:76:7a:7b:d1:ba:41:e1:71:1f:d3:25:54:35:70:47:9c:85:
d8:a2:f3:76:e6:52:f1:e9:fc:6b:7c:36:42:8e:3c:31:23:05:
26:af:fa:e1:2b:f6:89:e6:73:9d:33:3a:7d:38:12:32:5a:14:
30:98:d8:59:03:95:e0:21:c6:1c:95:bc:6c:57:a0:78:53:5f:
24:50:18:11:03:38:e9:c9:04:a7:46:b3:02:3e:6d:2e:d2:ca:
7d:75:63:9a:4a:68:52:2c:71:6a:60:63:78:66:9c:4e:61:10:
28:41:0e:90:96:cc:68:a6:d4:b3:56:43:8b:23:1a:d3:ed:c6:
7b:92:2d:78:6d:20:58:28:60:c3:c6:ec:5e:65:88:0d:0c:93:
01:78:20:f9:7a:da:35:c0:39:08:a8:23:98:5c:d8:62:49:8d:
bf:38:05:0d:c1:84:51:d3:07:f7:17:08:f5:1b:ce:86:f4:6f:
1d:a2:5b:2e:17:d6:e0:0d:ef:32:c3:72:e9:c3:07:7c:10:63:
13:44:4b:32:d1:3b:12:70:08:c8:de:54:0b:ee:7f:75:c1:a4:
95:1c:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:12 2025 by rpki-client