
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: vyc9pa9KROzg0VXgPdiGF/dC7tg8ui8/uq6UsvaOBMc=
Subject key identifier: E8:AA:FC:53:85:0F:8D:B7:CB:2A:5A:48:93:E1:F6:D7:8C:DB:CB:3B
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 019875D15D8E01D3005B2A96D9C32FF3B3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 04EE
Signing time: Mon 04 Aug 2025 16:01:51 +0000
Manifest this update: Mon 04 Aug 2025 16:01:51 +0000
Manifest next update: Tue 05 Aug 2025 16:01:51 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: Ef+I9qHFpxXQ09BGQb+t0qn+fsJ2qDUI3TIvHGwor+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:5d:8e:01:d3:00:5b:2a:96:d9:c3:2f:f3:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Aug 4 16:01:51 2025 GMT
Not After : Aug 5 16:01:51 2025 GMT
Subject: CN=e8aafc53850f8db7cb2a5a4893e1f6d78cdbcb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:04:75:e7:76:06:3b:3c:46:4d:a3:e6:9b:
88:1f:b9:61:21:e8:af:3e:13:ed:a4:78:ca:c7:dd:
94:58:28:28:80:74:f9:c4:62:f3:a3:32:af:e3:89:
20:81:e2:6d:db:15:66:71:6a:c1:c5:aa:3a:84:1e:
55:e1:89:83:6d:3d:39:03:ec:38:aa:39:05:a2:20:
a8:c4:e9:f0:00:20:c5:6a:5a:8f:14:23:49:81:04:
5f:28:0c:6e:a4:52:a1:bf:90:90:3f:d9:5c:9e:c9:
a6:ee:23:7d:29:92:55:f1:ca:6b:e4:35:0f:44:92:
78:00:3e:a5:01:21:41:5e:63:c2:1a:99:c5:78:3b:
74:24:0f:ac:a2:18:6f:f8:a9:f8:25:9e:fc:2b:72:
5c:2b:f4:78:38:d3:6b:46:cb:e8:7f:a0:bf:dc:0e:
ad:2b:6b:1a:ed:fe:26:74:4a:a2:57:77:40:00:0d:
1b:94:d3:e8:64:36:29:95:b0:de:3f:48:45:77:43:
ee:a5:e5:cb:37:f7:c5:cb:2b:fd:a9:e3:cd:19:bc:
ac:1d:f2:40:98:91:60:51:f6:54:0d:1e:37:64:0a:
f8:8a:87:c2:2d:da:2c:60:9c:06:e8:92:bf:2e:fc:
df:8e:44:a3:cc:92:b8:65:b5:a5:fa:94:ee:d4:7a:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:FC:53:85:0F:8D:B7:CB:2A:5A:48:93:E1:F6:D7:8C:DB:CB:3B
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:a2:8b:d7:6e:bd:43:58:df:af:7e:0a:2e:3b:e2:b5:b5:
7d:1a:e7:c1:92:be:2d:55:ae:cd:21:a2:da:fa:04:0f:77:ca:
00:01:b9:d9:6f:db:c3:58:6d:a2:40:d5:80:96:42:d2:d8:a6:
f3:8a:1f:6e:2a:70:ff:62:40:3c:d5:b5:10:44:a9:8a:f8:94:
3c:c7:2f:90:0d:1f:de:0b:6d:68:8e:74:99:0c:73:4c:83:fe:
8e:55:98:f3:d3:1f:e3:43:33:3a:eb:61:16:12:e3:73:71:c2:
39:0f:34:85:01:7c:d6:cb:aa:e2:9c:d6:49:12:96:75:d7:5d:
b1:53:87:be:54:0f:6a:16:2f:8b:cd:e1:e6:be:85:1a:75:c5:
e2:e6:bf:b3:c4:89:3b:0d:0b:1e:4e:1d:d0:56:63:4a:64:c9:
3b:d2:1a:0e:b6:eb:4d:da:4b:eb:00:85:47:a5:ef:ee:e2:a9:
5a:ad:7b:51:ed:97:b4:b3:0b:76:0d:5d:ff:2f:7a:19:c1:78:
b7:85:35:48:ad:e3:a8:d0:9f:57:c6:1b:91:e1:22:c2:a6:b9:
c3:09:fc:62:a2:c9:4d:3e:7c:de:0e:ed:b6:6b:90:aa:4d:43:
ec:ea:96:21:fa:7b:64:b4:b3:ae:ea:53:61:8f:50:38:8f:f4:
01:5b:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:01 2025 by rpki-client