Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: M98K/+jLpIH+zD3b1A9wWGJETwd3nPOfogoPras0Tjk=
Subject key identifier: EE:9C:B9:2B:D9:42:D2:E6:FA:41:A3:5D:5D:F0:57:2F:E4:2E:73:71
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 0198733D593CB25D7E540F94F47FC1D0F95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 04:00:56 +0000
Manifest this update: Mon 04 Aug 2025 04:00:56 +0000
Manifest next update: Tue 05 Aug 2025 04:00:56 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: L3oVKm+eJIMDkBB0m5G61nXyTFPtLMvBeDgi41kL6WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:59:3c:b2:5d:7e:54:0f:94:f4:7f:c1:d0:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Aug 4 04:00:56 2025 GMT
Not After : Aug 5 04:00:56 2025 GMT
Subject: CN=ee9cb92bd942d2e6fa41a35d5df0572fe42e7371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:4f:e9:f1:bb:94:d8:70:4f:fb:6e:95:3b:
66:0d:61:ef:c3:e7:c1:1f:59:7b:3b:8a:95:3d:56:
1d:38:3d:dc:0c:71:9e:bb:c2:25:1d:84:48:11:53:
2f:fc:b0:c2:8f:fc:b3:f9:25:0b:ec:d6:fa:55:20:
d2:d4:31:df:32:5e:34:a7:1c:d2:14:dc:ae:6a:01:
6b:21:d7:d6:66:f9:28:35:5e:71:73:32:d7:73:b6:
11:66:b9:18:51:f0:d0:75:d3:2d:28:00:c4:c8:92:
78:dc:88:ff:27:3f:89:a7:ab:cc:85:e7:69:41:78:
48:b9:3c:25:43:86:a2:b7:57:05:ca:bd:48:27:81:
ef:0f:15:13:39:cc:45:c2:f1:b3:71:b9:f2:d1:4a:
df:6b:23:4e:22:d9:67:2d:3d:d3:a2:e4:9b:c5:92:
31:f7:98:53:46:1e:53:ff:3c:5a:5c:c3:0c:c1:55:
6f:65:af:e2:3e:e2:e0:5d:eb:9b:4f:2f:aa:91:d7:
c0:9b:34:fe:59:73:5f:78:b5:08:51:f5:db:94:9e:
9a:b5:30:9d:0e:03:43:6d:aa:ee:d0:d3:cc:29:29:
cb:8a:67:ee:1a:be:8c:8c:67:15:a3:de:12:d7:ae:
5a:99:f2:f6:e5:36:f7:93:a7:1e:0f:f3:6e:10:e4:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:B9:2B:D9:42:D2:E6:FA:41:A3:5D:5D:F0:57:2F:E4:2E:73:71
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:f2:56:c8:0c:db:9b:c7:62:c9:d3:6f:f6:42:59:a7:bf:
2c:cf:f5:22:5f:87:76:00:1f:85:2d:fc:85:0e:88:47:d3:8d:
af:38:96:c9:20:64:0b:0b:f0:35:45:a3:ae:1b:7c:37:c6:c1:
08:a5:b6:1e:d3:6a:e3:ff:c6:2a:b4:90:61:db:e9:01:35:db:
a3:b4:f1:5c:9b:71:79:6e:44:f8:df:1a:5a:1e:11:a4:4c:9e:
0f:59:e1:fb:94:b9:18:c1:cd:e1:22:3d:b6:f6:cd:cd:7d:ac:
e2:cc:06:cd:30:66:59:1f:e5:24:9c:6d:e9:1d:93:1e:ed:51:
af:0a:a9:02:4b:b0:1d:6c:f3:c7:fb:08:3d:0c:1b:f0:90:ba:
90:1c:7e:d9:12:f5:c9:c7:e7:5d:d5:92:13:7d:16:bc:7c:c8:
ca:f6:1b:7a:3f:dc:0a:c0:31:14:c8:2e:99:df:24:49:41:09:
3c:2d:fa:76:32:2c:14:f3:5d:a3:09:55:c0:f6:78:17:0e:7c:
38:c1:32:b5:9a:08:b3:7a:a2:27:00:83:7b:38:bc:e5:bc:69:
d5:2f:9c:09:eb:4b:cc:20:64:1f:dd:3a:e5:dc:db:13:37:e6:
bc:fd:2a:5e:1a:00:fe:71:f9:f2:7e:e9:81:18:74:a4:40:3d:
04:ff:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:06 2025 by rpki-client