Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: m2xv1lRJylJv/jlbmGWwKrw5RBi6KkvkOFwLpk5jasE=
Subject key identifier: C9:CC:47:95:10:01:EE:D8:16:A1:03:80:8D:0B:93:AB:52:D5:50:41
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01976EF4F4D40D279F856FD6929AB3B5A69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 0466
Signing time: Sat 14 Jun 2025 15:00:36 +0000
Manifest this update: Sat 14 Jun 2025 15:00:36 +0000
Manifest next update: Sun 15 Jun 2025 15:00:36 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: 2w/Hs+OUcUpa/PU/zHncZog1O//QokODU4YyAp2l/zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f4:d4:0d:27:9f:85:6f:d6:92:9a:b3:b5:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Jun 14 15:00:36 2025 GMT
Not After : Jun 15 15:00:36 2025 GMT
Subject: CN=c9cc47951001eed816a103808d0b93ab52d55041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:13:99:0f:72:f9:d8:64:60:e0:4a:e7:7d:
f1:0f:81:b4:7c:95:c9:5a:f7:3d:18:a8:b2:79:a1:
c5:11:83:bd:32:79:ec:43:83:b1:20:84:6d:84:c9:
97:4c:33:da:ce:e7:b5:d1:52:69:8a:3f:5f:55:57:
5a:79:9d:79:cc:44:a3:fd:a1:ee:8a:e1:13:74:3a:
e6:d7:a0:c4:df:ec:49:ea:b3:fc:fc:8c:ed:90:b2:
24:6a:73:b3:5b:ba:5f:b3:a1:02:c5:06:55:d8:37:
86:c8:03:9a:cc:a7:1f:06:f1:4b:1c:5b:38:6d:db:
9d:d6:43:9a:e7:2e:0e:f6:09:26:5e:73:51:3e:20:
8c:c8:6e:d8:a5:cf:59:e8:5c:78:f5:4f:34:1f:e2:
f2:83:2b:37:68:c0:4f:00:3e:34:da:20:d2:45:1c:
e7:b8:c3:4b:f4:41:b8:fd:86:49:6f:8d:eb:f0:cf:
62:ba:25:23:ac:47:e1:d6:be:c6:e9:b2:75:5b:fb:
e2:2b:7d:24:89:5b:8e:1f:99:e5:d9:c6:6a:45:b8:
2e:93:34:f7:0f:28:84:71:95:d7:8f:2c:b0:2e:78:
72:6b:56:9a:8c:88:2e:74:77:8a:21:93:cc:2a:16:
41:7e:a0:48:74:1d:0c:1d:1f:0a:ab:3e:98:53:3f:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:47:95:10:01:EE:D8:16:A1:03:80:8D:0B:93:AB:52:D5:50:41
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:02:af:a8:b8:59:82:8d:5d:7d:99:f3:25:83:21:a5:75:48:
a5:bf:0b:1c:e6:b6:ef:03:9d:b4:3d:e3:df:59:3e:aa:8c:f2:
96:68:cc:92:a4:10:06:67:a1:6b:79:6b:e4:3e:a9:cb:d5:de:
de:fe:23:df:69:23:4c:d2:32:f3:fd:38:f4:da:9b:f7:c3:89:
03:38:0f:d9:49:cd:18:ae:3b:0e:72:8c:f0:9e:14:d4:0a:76:
7c:90:d2:d0:6d:dc:b5:90:5c:c7:8d:0e:ad:2d:1c:b4:31:bf:
8c:5a:19:d3:8f:d6:4a:60:1b:1e:d5:8c:1c:cd:a4:d4:61:3c:
5d:e6:da:bf:38:28:a2:c9:47:18:0f:e6:5c:92:37:d1:f0:87:
60:9e:8d:ed:2b:8d:fc:1d:45:e0:16:b4:db:a3:9b:4f:4d:be:
bf:00:f4:59:80:ec:4f:9f:e5:31:0d:85:d3:72:cc:bd:1e:6a:
42:8b:62:a3:31:67:2a:ac:b3:79:85:bf:16:82:a3:0f:d6:b4:
16:54:ab:1f:91:ad:75:e3:c1:46:7e:8f:c4:e8:19:04:63:b5:
36:aa:e9:b7:de:c1:4e:69:20:e2:f4:c3:41:01:06:a0:a0:4e:
ba:fd:f4:46:31:96:54:33:4b:ca:6d:49:9a:a8:77:9c:fe:76:
82:d1:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:55 2025 by rpki-client