Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: JDfmuTqBBITMCqZiDpp6lUOVOKx2+QBUw+c6ocWcnFg=
Subject key identifier: 94:BA:59:5E:91:41:0A:06:7E:3B:E5:C6:59:47:B9:1D:E1:27:C3:C5
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 019875D206818363AEC8F8D2780DBD1828B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 07FE
Signing time: Mon 04 Aug 2025 16:02:34 +0000
Manifest this update: Mon 04 Aug 2025 16:02:34 +0000
Manifest next update: Tue 05 Aug 2025 16:02:34 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: qrtCo+BU2fleq0wk1rLy5D1f5mbRNNnMhSRj7v85n9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:06:81:83:63:ae:c8:f8:d2:78:0d:bd:18:28:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Aug 4 16:02:34 2025 GMT
Not After : Aug 5 16:02:34 2025 GMT
Subject: CN=94ba595e91410a067e3be5c65947b91de127c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:1b:30:b4:49:14:6f:00:6f:bb:15:1a:b3:
61:21:0d:f8:b8:47:31:f0:75:fd:3d:5a:70:dc:e1:
f7:7d:50:1e:f2:a9:a7:48:23:45:d3:70:91:a5:2b:
a9:b2:8f:d4:76:94:ab:13:bc:71:4b:58:6a:5e:bc:
57:3c:8e:b6:2d:e9:a0:c7:ff:3d:ca:95:0f:b5:87:
40:99:17:57:dc:e1:62:72:b6:9e:a0:ba:94:70:99:
5f:b5:54:7a:ec:93:dd:72:e3:71:11:09:53:d7:3b:
65:4a:b8:2e:f6:43:5e:47:c2:2c:93:0f:cd:54:0c:
6b:d6:17:05:1e:76:92:a9:b3:f8:43:aa:b5:28:7e:
7f:f4:de:2e:28:de:af:5c:e2:e3:a6:f8:a0:20:fa:
41:76:fe:ee:e2:53:c9:01:69:88:22:dc:e0:61:5c:
31:fd:1d:66:83:0d:3e:19:46:2d:d3:c2:2b:09:97:
a3:ce:cd:b7:51:ee:14:92:a3:72:9c:37:de:02:75:
63:e5:af:17:94:7c:e0:bc:03:55:e6:f7:76:36:19:
77:f3:fe:b6:cb:91:5c:07:8c:67:0c:70:df:6c:6e:
b4:5a:69:38:c6:08:ff:a0:42:98:73:4b:38:cc:ea:
3e:ed:53:e9:46:93:ff:a7:a9:29:8f:6b:e6:9f:37:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:59:5E:91:41:0A:06:7E:3B:E5:C6:59:47:B9:1D:E1:27:C3:C5
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:9d:96:19:63:5d:00:16:78:97:d0:38:66:9f:8d:c5:71:
41:46:88:51:75:73:7d:38:10:60:69:49:c4:e5:26:2b:52:94:
ce:ca:8b:e5:e5:dc:10:72:36:ce:2b:08:bd:2a:d0:ec:25:6f:
48:7b:fa:0c:6f:59:2d:3a:0e:5f:f4:e9:44:40:a7:39:35:9d:
9a:a0:1c:6e:8d:ef:0b:fc:7b:ab:98:80:a2:74:98:c7:d6:06:
10:74:5f:aa:1b:49:42:b0:b4:8d:54:3c:5f:86:f2:81:72:c3:
6c:9c:cc:2e:a5:4a:83:cc:5d:35:c7:d1:b7:2a:ed:03:3a:5d:
87:5f:45:de:4c:cf:46:41:13:72:0c:dd:2b:b1:95:38:c6:63:
b1:5a:31:c5:46:19:5a:2e:30:88:46:32:49:9a:e3:c7:c7:55:
78:c9:b8:f3:bb:03:26:cd:9d:ab:fa:de:f1:eb:64:a4:e2:44:
88:24:99:fc:e8:bd:05:2f:a1:49:94:7c:96:46:19:00:dd:bf:
d5:f0:a2:cf:04:d5:db:97:da:e4:3c:1b:b1:cb:49:d7:e7:f5:
8d:80:2e:fb:89:b7:7b:65:b3:26:4f:65:f2:31:5c:ba:33:2c:
09:36:27:e8:2f:cc:89:8f:0f:33:90:c8:af:62:fa:cf:b2:e8:
99:8a:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:57 2025 by rpki-client