Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: SY8MpNKHvia5TF7Krpmbkc6vxGQJEtuKhaMMew3466s=
Subject key identifier: D7:07:57:47:51:DB:26:9F:9D:1A:98:2E:F5:D6:A6:5E:A1:4E:D1:59
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019A50E35B8F533C37D261713296023B506E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0AFA
Signing time: Tue 04 Nov 2025 22:01:08 +0000
Manifest this update: Tue 04 Nov 2025 22:01:08 +0000
Manifest next update: Wed 05 Nov 2025 22:01:08 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: DQH8++9BZAeTWZGgQKv//3vj7C7NVcQ9X2LtdG9W0qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:5b:8f:53:3c:37:d2:61:71:32:96:02:3b:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Nov 4 22:01:08 2025 GMT
Not After : Nov 5 22:01:08 2025 GMT
Subject: CN=d707574751db269f9d1a982ef5d6a65ea14ed159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:f7:8d:d2:6c:da:d4:11:6b:f8:dc:7d:b4:
ca:8a:19:b7:a2:8d:60:35:6e:e4:a8:b2:c9:b9:d5:
02:ff:04:ed:8b:ed:cb:5f:b2:62:38:72:83:77:a0:
45:bb:2c:28:50:3e:a5:fd:a6:2e:b0:3e:59:f9:27:
e1:5c:73:9a:e5:09:0c:6c:c8:91:be:8a:f1:c0:0d:
e4:aa:fc:9d:c1:4c:ca:30:2c:64:64:70:6c:ca:0a:
66:e7:98:ac:27:00:48:b0:e2:d5:fe:37:40:33:59:
b0:67:d2:89:81:ce:c9:da:0a:04:9e:a6:5b:0b:96:
c4:41:94:b2:4a:40:57:cd:81:05:32:02:3f:70:e0:
e6:21:2e:fa:01:ab:78:17:92:65:03:16:1e:a9:69:
ef:b7:07:70:8f:a6:39:74:f2:97:86:cf:6c:2e:21:
02:7b:2d:ff:de:df:c1:76:29:f5:62:b1:32:c5:ab:
e7:3c:fc:ab:88:18:76:cd:95:5c:72:df:44:e0:71:
ea:ee:a9:a4:0a:05:24:5f:63:14:58:42:87:ef:0b:
c3:01:df:25:b1:0b:9a:0e:19:ee:ce:53:ac:cb:8c:
30:2c:bb:20:0d:21:fc:0b:33:91:79:8b:6b:49:5a:
ec:df:50:b4:ed:75:9e:c4:2c:3e:14:16:b6:a1:8b:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:57:47:51:DB:26:9F:9D:1A:98:2E:F5:D6:A6:5E:A1:4E:D1:59
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:06:e4:9b:56:b3:2d:f1:8b:37:2c:ea:83:5e:8d:85:2e:
a1:d8:c7:37:e0:1f:82:34:74:cd:23:26:de:b7:d0:1e:9d:5f:
44:a9:c6:c5:3e:06:4a:62:5f:93:dd:9e:c8:92:01:39:b2:a7:
3e:fe:cc:95:06:c0:81:04:be:b1:08:19:d9:af:b0:b6:be:c5:
4e:4b:7b:5d:f8:79:cc:a8:aa:63:3d:ab:b8:68:48:dc:19:f0:
f2:b1:00:8f:ed:cd:9b:db:f2:25:9f:c1:2e:20:5a:ab:e2:77:
42:57:32:c2:ad:b7:bd:8e:9f:8f:c1:65:07:aa:22:a6:f8:15:
40:e7:51:66:4d:72:37:dc:9b:d9:79:fd:90:c9:b8:8d:58:f2:
7f:2c:c1:47:c5:87:15:32:89:84:6d:70:6e:88:1c:a9:41:a8:
65:48:e8:d4:3c:4b:89:02:24:c8:f6:e8:3a:ad:62:00:3c:a8:
6c:d6:4f:c1:19:61:e8:28:5b:ec:a4:85:e0:00:04:6b:65:46:
0c:9f:01:15:9f:a0:1c:fd:13:da:88:e5:e6:70:f9:e3:01:87:
df:63:4e:f4:ec:47:12:a7:99:59:ca:70:10:f6:78:57:c4:c8:
36:9e:43:c6:c9:0b:5f:46:e8:bd:af:b0:a5:7c:8e:e9:65:b2:
01:eb:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:43:04 2025 by rpki-client