Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: iEnXsXYRaHmawy2Du3LNA6eAQY2RRh14NqyEunwbjxs=
Subject key identifier: 26:75:68:AC:3C:9F:B7:D9:EE:3F:8B:8F:91:77:31:E8:7C:F3:FA:A7
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019896A67719AC7A8910A978F9CBA2AEE205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0A15
Signing time: Mon 11 Aug 2025 01:02:28 +0000
Manifest this update: Mon 11 Aug 2025 01:02:28 +0000
Manifest next update: Tue 12 Aug 2025 01:02:28 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: cIxpHvdEYb953Pz2JNqO6p+NMNkmtDBTeP6DiSmoVEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:77:19:ac:7a:89:10:a9:78:f9:cb:a2:ae:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Aug 11 01:02:28 2025 GMT
Not After : Aug 12 01:02:28 2025 GMT
Subject: CN=267568ac3c9fb7d9ee3f8b8f917731e87cf3faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:ff:bf:e0:34:bd:78:01:65:d7:b4:a2:7a:
80:4e:82:4a:c7:a5:7a:59:60:c6:ec:cb:be:e3:b2:
e1:49:f3:82:4c:90:bd:11:7e:67:1c:03:4a:09:3d:
23:c1:b5:55:84:dd:91:ce:e0:27:eb:45:20:8e:cb:
97:82:73:cb:66:25:e5:55:3a:05:be:c3:c4:6d:e0:
d8:79:98:dd:05:53:66:d0:3f:cb:31:b1:4a:0b:63:
87:97:b1:7c:b8:73:13:42:84:4c:d2:1d:63:1e:e1:
8c:37:b7:30:cb:ab:28:af:50:f0:3e:6a:4a:dd:8a:
88:0d:ba:3f:74:92:3d:1e:94:87:4d:cc:d4:94:6d:
80:c8:21:57:ff:cc:3c:3a:78:22:ec:7d:72:94:3c:
13:07:50:89:4e:fb:16:b2:7b:6d:3c:c1:c3:ed:fe:
25:93:2b:0d:04:f1:7a:4d:b3:5d:ba:70:3b:e2:27:
ff:27:96:2b:c5:e2:50:70:d4:74:94:2c:db:d7:9a:
ed:26:17:ea:eb:c0:9b:da:51:0d:a0:81:2c:a8:db:
6f:64:fa:bf:1d:3e:f0:c8:3c:45:be:4f:79:3d:93:
cb:b9:45:1c:de:51:35:4c:36:f3:fd:ff:6b:30:95:
6c:d6:57:a4:70:05:a9:3a:18:6c:52:17:de:f7:4d:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:68:AC:3C:9F:B7:D9:EE:3F:8B:8F:91:77:31:E8:7C:F3:FA:A7
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:a9:5a:6f:58:ca:22:ff:ff:ca:93:de:2e:6a:b0:0b:f4:
77:e0:d8:28:07:89:38:6f:b6:1c:58:f9:3a:a7:02:c0:be:35:
4f:9b:ac:fc:19:38:e2:d8:56:d4:05:96:b1:27:af:12:65:99:
3f:35:4a:ad:80:3e:18:b0:cd:dc:a7:9e:6d:41:d4:3c:9f:a6:
c4:a8:35:8a:2d:2f:76:92:34:f2:0c:9f:75:bb:b9:e6:31:a7:
c3:04:d9:48:f3:b0:57:12:5c:d8:96:7b:dd:dc:65:1c:46:cb:
4c:b5:4b:82:bb:2f:d0:3d:31:a8:7a:3a:3d:dc:af:a5:7e:15:
fe:5d:d8:bd:ee:03:68:95:c8:02:6c:9a:7b:e7:b5:c9:db:1a:
f3:45:8d:32:62:4a:05:ea:13:51:b1:a7:e7:cb:a3:1f:db:55:
6c:95:3b:50:2b:10:b3:19:6d:19:a8:8e:2f:e8:8d:57:67:98:
33:19:25:67:c3:1e:fc:f0:42:5b:7d:76:28:9b:bb:22:21:ad:
73:84:f4:41:46:99:f4:0b:30:06:58:70:11:60:eb:6a:f9:1d:
74:cf:fb:41:bd:66:40:89:c1:04:a2:5a:53:ea:61:c8:2f:42:
bc:14:99:5f:c4:0e:26:1d:7d:ae:a2:07:e5:ad:e4:c8:0d:50:
95:5e:63:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpncZrHqJEKl4+cuiruIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjUwODExMDEwMjI4WhcNMjUwODEyMDEwMjI4WjAzMTEwLwYDVQQD
EygyNjc1NjhhYzNjOWZiN2Q5ZWUzZjhiOGY5MTc3MzFlODdjZjNmYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7P/v+A0vXgBZde0onqAToJKx6V6
WWDG7Mu+47LhSfOCTJC9EX5nHANKCT0jwbVVhN2RzuAn60UgjsuXgnPLZiXlVToF
vsPEbeDYeZjdBVNm0D/LMbFKC2OHl7F8uHMTQoRM0h1jHuGMN7cwy6sor1DwPmpK
3YqIDbo/dJI9HpSHTczUlG2AyCFX/8w8Ongi7H1ylDwTB1CJTvsWsnttPMHD7f4l
kysNBPF6TbNdunA74if/J5YrxeJQcNR0lCzb15rtJhfq68Cb2lENoIEsqNtvZPq/
HT7wyDxFvk95PZPLuUUc3lE1TDbz/f9rMJVs1lekcAWpOhhsUhfe9032kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ1aKw8n7fZ7j+Lj5F3Meh88/qnMB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwapWm9Y
yiL//8qT3i5qsAv0d+DYKAeJOG+2HFj5OqcCwL41T5us/Bk44thW1AWWsSevEmWZ
PzVKrYA+GLDN3KeebUHUPJ+mxKg1ii0vdpI08gyfdbu55jGnwwTZSPOwVxJc2JZ7
3dxlHEbLTLVLgrsv0D0xqHo6PdyvpX4V/l3Yve4DaJXIAmyae+e1ydsa80WNMmJK
BeoTUbGn58ujH9tVbJU7UCsQsxltGaiOL+iNV2eYMxklZ8Me/PBCW312KJu7IiGt
c4T0QUaZ9AswBlhwEWDravkddM/7Qb1mQInBBKJaU+phyC9CvBSZX8QOJh19rqIH
5a3kyA1QlV5jGg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:28 2025 by rpki-client