Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: yFoHWxqzs6qGltg5Ngj/XEFuW0v9BBUjMc4Rvnl8oMk=
Subject key identifier: 6A:7D:1B:13:99:8E:97:D4:E3:D2:D9:88:DD:8D:42:87:FB:36:2B:28
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 019A4EF41D6429F19C870DFD50C8D2D55DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 05E3
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: k6/AgHxxo7va4PfQ4vGEt2nWytoH1ALCHk9nohSnbI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1d:64:29:f1:9c:87:0d:fd:50:c8:d2:d5:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=6a7d1b13998e97d4e3d2d988dd8d4287fb362b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:6a:5f:5a:98:1b:81:24:3b:33:da:9f:c7:
b3:d2:a6:99:21:c4:a9:d1:9e:c2:0e:ad:ad:f9:fc:
d6:1f:b6:02:3d:de:ff:cb:e7:7c:f8:7e:a5:fe:73:
4d:77:c6:16:6b:33:83:cb:46:3e:72:71:c1:a3:3d:
bb:d3:2e:d0:35:53:40:ab:6e:16:9b:94:45:86:c1:
86:08:ba:00:5d:ad:f4:c1:02:01:e5:a9:a6:0a:1f:
61:31:f2:d1:73:01:b4:6d:15:ad:8a:32:13:a7:67:
59:80:a4:97:9f:23:23:98:d6:25:ec:7f:4b:b9:84:
f3:3e:38:b1:2c:73:8d:48:00:71:aa:f4:4c:0f:55:
6d:20:15:5c:6c:d9:49:85:c8:c5:01:9a:67:80:46:
a9:dc:a8:23:43:cf:78:a9:d1:16:e3:83:ad:08:7b:
34:fa:81:9e:a9:ab:a8:2a:78:1f:b2:a5:2c:9a:5d:
7b:6c:2f:70:ef:b7:d6:a6:e8:00:74:2b:a6:f9:4f:
74:9b:9f:c7:0e:3c:26:ab:00:8d:0a:12:f0:a7:c8:
4e:47:ac:c4:9b:f2:d8:f8:1c:94:57:b2:5b:5d:a2:
7b:fb:34:c1:f0:ba:15:e5:b7:e6:41:c2:29:15:cf:
0d:66:79:84:96:3e:10:e9:47:3a:d7:4f:1e:14:17:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:1B:13:99:8E:97:D4:E3:D2:D9:88:DD:8D:42:87:FB:36:2B:28
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:90:f8:78:cf:b5:15:08:1b:33:4f:10:7e:32:e6:e2:2c:cf:
f9:76:e6:2e:75:75:ad:ee:c4:6d:a6:36:4e:8c:c1:40:f9:4d:
34:8d:27:79:f8:78:2c:32:d0:b3:cb:bd:f5:f5:9b:80:18:4c:
2a:25:ba:8e:a2:c5:e5:b5:97:c2:15:8b:2b:08:e8:9b:d0:2b:
cb:be:e9:8b:ab:31:e4:b6:7d:b5:c1:d4:3e:c9:b8:dd:c4:ea:
24:b7:ad:7f:59:78:78:f2:25:26:79:88:d6:85:b0:99:7c:c2:
14:d8:d3:bc:59:93:b9:a3:d8:c5:e9:c8:e1:f7:19:ae:56:40:
c1:43:89:88:c2:39:0f:e1:2f:89:af:33:4e:a2:17:df:f9:ed:
64:ef:09:83:91:b3:a4:ab:09:4e:f8:6c:3d:c8:88:8e:a5:f6:
41:06:74:8e:5b:be:80:f1:08:03:e5:37:e5:94:f2:a2:11:dc:
cf:44:b1:b2:fc:f0:a0:9e:0a:ae:cc:f2:c0:5d:01:9a:b9:35:
00:1d:82:6c:53:0c:6f:7b:64:a9:b2:66:7a:a9:a6:af:1c:f0:
19:88:56:d9:00:db:ef:55:06:46:db:d0:dd:9c:c4:95:0a:7c:
43:6f:f3:ce:1d:65:74:47:5d:ae:ab:ae:e3:99:b5:5d:08:9f:
73:68:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:09 2025 by rpki-client