Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier: L787w12gEvR9X6Aa0roq28k2/6r7D9uboy/HkluSVJo=
Subject key identifier: 19:F1:22:9F:88:37:D1:E2:5F:E2:EE:69:80:D5:4A:A3:BD:3B:78:8D
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer: /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial: 0198A196B491EAD2CF4435E3F2594EDB57B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number: 1004
Signing time: Wed 13 Aug 2025 04:01:04 +0000
Manifest this update: Wed 13 Aug 2025 04:01:04 +0000
Manifest next update: Thu 14 Aug 2025 04:01:04 +0000
Files and hashes: 1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: bV5IsH2c8xvmRzS3koPWodYF3e/T/clDMS4fVSge6BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:b4:91:ea:d2:cf:44:35:e3:f2:59:4e:db:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Validity
Not Before: Aug 13 04:01:04 2025 GMT
Not After : Aug 14 04:01:04 2025 GMT
Subject: CN=19f1229f8837d1e25fe2ee6980d54aa3bd3b788d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:70:aa:b3:2f:73:87:f0:4b:c9:c0:aa:8a:
bf:c7:45:a7:a7:89:bc:be:39:3b:99:c9:7a:e1:d5:
0e:c5:2d:ee:1c:9f:97:c6:9f:14:66:53:5f:63:b2:
06:c0:9e:d5:04:4a:f2:10:f6:a3:5f:c4:5e:d2:2b:
bd:9d:b6:0f:ff:7e:91:29:76:8d:36:db:a9:ec:c6:
53:c0:01:78:cd:af:7a:0f:41:60:05:2c:df:01:ad:
7e:0c:84:29:28:1b:25:72:19:99:ec:a6:41:80:7d:
99:4f:fc:96:ac:ee:72:b1:f9:11:a8:37:d8:48:19:
84:17:fc:0c:d0:72:d6:82:76:da:bc:d9:96:32:7d:
70:81:ea:3b:2f:5a:c4:cc:eb:10:d7:4f:fc:ac:40:
6f:30:ac:85:e0:47:e0:9d:41:9e:63:3c:1e:8d:1c:
29:30:60:09:06:57:d1:78:91:b0:31:6f:0f:1d:b4:
c7:00:b6:c4:92:5f:11:c1:ef:47:1e:50:46:56:af:
02:5d:60:5c:ba:4d:6b:4b:41:18:06:d2:75:00:62:
6d:a4:e3:94:a0:b6:87:1a:6d:87:74:21:23:60:73:
50:91:60:b8:91:fb:fc:44:fe:2f:56:0e:80:6b:1c:
5c:f8:5a:83:18:05:b3:20:f8:6f:9a:a8:f1:ff:f1:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:22:9F:88:37:D1:E2:5F:E2:EE:69:80:D5:4A:A3:BD:3B:78:8D
X509v3 Authority Key Identifier:
keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:96:fb:28:27:34:21:c9:7e:b3:3b:fd:52:a4:18:0e:dd:8b:
7b:f5:dc:05:b9:10:f5:e7:fd:bc:be:79:7b:b6:ae:ed:a4:f0:
14:c4:53:37:74:be:a0:ea:c1:de:44:1a:a3:14:76:54:f5:ee:
00:35:2d:12:fa:d9:d1:7a:2a:74:3c:a9:70:4f:41:ff:51:34:
d5:41:d6:54:ae:22:c3:4f:fe:a8:66:29:88:b4:22:1f:3d:63:
78:e5:f0:77:39:f3:7d:22:d1:81:78:db:e1:90:be:25:05:0e:
57:49:42:41:bd:24:8d:5e:eb:a2:1f:86:72:3b:28:d7:7b:db:
e4:fc:1d:52:b0:a5:51:a0:8f:3b:7d:2c:ad:c9:a4:39:82:a0:
4b:11:73:76:f2:00:bb:d1:cd:a2:ff:cc:50:90:df:20:36:8e:
c4:26:14:c8:18:44:f2:18:d5:96:b1:e0:0e:ae:bb:80:4d:ce:
a0:78:73:76:f6:bc:fa:5d:6a:41:bf:02:74:b8:62:20:ab:b2:
ae:a5:a3:51:22:c9:c2:78:ae:ba:b4:2a:d5:1d:75:7b:ac:c8:
45:e5:ff:fb:6e:18:41:cb:12:c6:bc:69:a5:86:b2:c6:70:08:
13:74:c1:40:b1:1f:45:4f:78:7f:b7:d0:1a:84:28:bf:9d:66:
f3:92:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:09 2025 by rpki-client