
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: FbLN47z8x5f0w4zO87wiJQQK8Y8bWgTSAZE7DTZ1BB0=
Subject key identifier: EA:C1:36:73:53:D8:C2:6A:34:34:AB:30:04:73:3B:9C:69:55:40:A1
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 0198887BF96ECB2B12F10F363D989EDEB539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 093C
Signing time: Fri 08 Aug 2025 07:01:22 +0000
Manifest this update: Fri 08 Aug 2025 07:01:22 +0000
Manifest next update: Sat 09 Aug 2025 07:01:22 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: W8GTtBgaBSfNDcXC7EYQsO4n0/33foTK76CSl1hEacY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:f9:6e:cb:2b:12:f1:0f:36:3d:98:9e:de:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Aug 8 07:01:22 2025 GMT
Not After : Aug 9 07:01:22 2025 GMT
Subject: CN=eac1367353d8c26a3434ab3004733b9c695540a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:e4:f0:9c:74:48:96:62:22:ba:c1:ae:76:
f9:94:58:42:2e:d5:75:eb:c1:69:d6:f6:7c:44:ef:
a2:0e:66:10:d5:9d:5b:de:f1:91:d6:1e:9b:98:de:
a8:e3:c6:69:0a:33:64:d9:2b:00:2b:92:b4:3a:93:
0a:21:5b:62:e1:42:50:21:d6:2b:c9:94:41:36:56:
2f:e3:79:21:bf:01:5e:f7:e6:c4:b1:f4:e3:02:1b:
1f:0d:b0:f0:50:d0:bf:e9:84:f3:6d:ec:f5:c0:06:
5b:b6:33:59:44:7b:8c:9a:ad:b7:ad:23:36:6b:4a:
41:50:51:70:73:fd:8b:a8:c1:87:8c:30:17:e2:92:
82:95:30:08:65:c5:e5:a5:13:fb:d1:05:aa:0a:b5:
49:d6:eb:af:96:e9:1d:53:57:83:4f:c9:81:ec:a5:
8f:7e:fb:69:2d:58:55:0a:a0:08:53:e6:fa:fd:f2:
d7:e3:e4:29:82:f6:c2:61:1f:19:8e:a3:47:66:cc:
37:5a:e3:73:0f:83:7d:a7:b9:0f:65:60:ea:fe:cf:
0a:c9:98:e6:9e:36:96:f0:de:22:f9:66:c9:fc:e9:
02:9a:90:05:3e:73:ae:a8:d4:e4:11:b5:b0:d5:6b:
db:e5:0b:ce:f6:b4:ac:fc:9b:af:f7:1d:da:6b:85:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:36:73:53:D8:C2:6A:34:34:AB:30:04:73:3B:9C:69:55:40:A1
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3c:5f:df:9b:55:f0:b2:8c:a6:fd:a5:15:fe:4f:d5:0a:4e:
e1:ba:cc:90:98:3a:7a:9d:a4:33:5f:e8:1d:7b:0c:0a:82:c1:
7d:19:87:ac:b9:6c:ba:45:70:6a:fa:8f:2c:8c:60:5a:4f:d0:
af:db:20:10:03:47:51:c8:a6:d1:76:72:1e:4f:48:f0:a8:3a:
b2:b9:4b:11:94:6f:d9:bb:06:52:e2:4a:f7:a7:b9:d0:a2:40:
f9:2c:81:51:8e:92:1c:2e:00:a8:72:cb:23:ad:0c:1a:a3:c6:
c4:df:1c:4b:e2:1e:ab:16:f3:fa:0c:3a:52:f0:9e:b3:7f:55:
ce:4d:12:33:54:92:a9:5d:ce:d4:03:6a:71:5a:03:c5:8d:80:
97:16:98:eb:0b:81:64:90:0b:67:26:fc:27:aa:ce:74:0b:70:
c7:22:5c:e4:35:7c:25:64:ca:bd:5a:48:11:16:99:ae:32:8e:
6e:d6:5c:7c:66:ba:96:13:fb:9c:d6:42:e1:92:37:ce:37:72:
58:18:86:7a:b8:43:a5:c2:81:43:eb:76:b6:55:78:0a:e9:d2:
33:0d:1b:f2:57:d2:cb:6c:0a:0c:23:3c:ae:40:c1:74:3f:80:
1e:fb:5a:4c:9e:22:57:80:ad:a3:3e:dc:14:3f:f3:5f:c3:c0:
3a:38:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:35 2025 by rpki-client