Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: xVnVdcrnz4IwidSau+FRoYPjxV4doKedUGqLMz24L5g=
Subject key identifier: 23:8E:7B:84:1E:FF:40:46:F1:1A:E5:D9:B6:D1:B4:F8:62:DC:D5:1D
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 01988EEB8534B4E45055636BA5B15331D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 0985
Signing time: Sat 09 Aug 2025 13:00:56 +0000
Manifest this update: Sat 09 Aug 2025 13:00:56 +0000
Manifest next update: Sun 10 Aug 2025 13:00:56 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: 2g8Ln65Wz9vNCPAm8Yue2Ip386kY3WZyXAJ/W5dKVMo=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:85:34:b4:e4:50:55:63:6b:a5:b1:53:31:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Aug 9 13:00:56 2025 GMT
Not After : Aug 10 13:00:56 2025 GMT
Subject: CN=238e7b841eff4046f11ae5d9b6d1b4f862dcd51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:5f:05:a5:54:5b:a0:01:b3:44:5d:ff:16:
99:6d:be:64:57:8c:7d:ea:f6:1b:45:ba:11:be:cb:
ea:81:99:38:86:b1:6e:ce:15:8c:07:7b:56:46:5e:
7e:a0:cf:6f:0f:b2:2d:5e:ac:c2:ec:a0:c1:8d:cd:
12:0c:53:da:3b:58:86:c1:d3:c3:9f:29:87:c0:8d:
6e:c4:0f:33:5e:e6:3a:dc:21:ba:42:48:c6:08:d1:
de:1d:ab:ac:21:b9:aa:68:9d:71:8a:67:bd:db:71:
c6:88:0d:87:f4:4a:4c:e4:26:35:28:e3:ec:09:4e:
14:55:9d:86:01:34:2b:6d:05:2a:83:f2:86:b0:08:
03:b8:b7:98:b8:48:2b:c2:7a:94:5d:54:02:92:ea:
a7:58:ad:d8:6b:23:b3:c2:83:a7:ce:6c:68:8d:6c:
5e:c3:ce:c0:82:11:ef:9e:bb:cb:7c:52:76:e0:d9:
09:d1:79:de:58:59:67:df:9e:3b:9a:19:0f:61:59:
50:a7:cf:ff:8a:f3:d7:b1:8e:37:4e:44:5e:04:16:
fd:dc:58:03:dd:7e:d1:4a:c8:d8:d0:e3:e6:2f:aa:
b4:aa:91:78:67:90:3c:f7:de:5f:9e:0a:a7:5d:e3:
4d:48:9d:f6:f8:26:d1:ab:d7:5d:16:1a:d9:5d:38:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:7B:84:1E:FF:40:46:F1:1A:E5:D9:B6:D1:B4:F8:62:DC:D5:1D
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:4f:6b:4e:88:91:25:00:1e:05:b5:0f:7f:aa:39:2b:cb:
03:80:0f:00:ec:bc:86:60:e9:15:f4:87:44:43:b3:3f:e3:7e:
7a:f9:93:d7:7c:df:47:69:cd:53:7f:75:02:7b:10:fb:62:52:
6d:f1:2a:96:7e:52:bd:58:9e:02:92:63:e0:62:56:49:25:63:
d7:c2:1d:b3:6b:ef:1a:9c:ab:81:a4:12:f2:35:ce:77:52:15:
6b:f1:84:ab:2d:ff:85:2c:0b:38:cb:16:02:15:72:c0:77:69:
1e:98:2a:11:18:b6:fe:93:a1:3d:dc:e5:85:be:17:b4:24:3e:
da:69:63:2f:44:10:22:63:f5:30:23:43:6a:16:87:09:1d:04:
07:9b:ce:ef:23:d4:f6:6a:76:00:10:cd:4c:b0:48:c6:71:37:
21:67:04:7b:7f:cb:2b:22:cb:0f:fe:11:d4:9e:da:bf:6a:ec:
cd:db:e8:d1:b8:c3:c9:7c:07:0d:18:8a:8d:20:e0:aa:a5:c2:
08:06:69:f5:ea:42:29:ed:59:a0:3b:b2:72:18:5c:9c:0f:be:
33:81:8c:b3:9e:0b:e7:8b:62:6c:cd:86:c2:bf:ca:01:e3:c4:
b9:08:f2:f8:f7:a1:1a:da:95:9c:16:55:fd:e6:d8:2a:5c:88:
bd:7d:1a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO64U0tORQVWNrpbFTMdV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw
N2E4YjkwHhcNMjUwODA5MTMwMDU2WhcNMjUwODEwMTMwMDU2WjAzMTEwLwYDVQQD
EygyMzhlN2I4NDFlZmY0MDQ2ZjExYWU1ZDliNmQxYjRmODYyZGNkNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tBfBaVUW6ABs0Rd/xaZbb5kV4x9
6vYbRboRvsvqgZk4hrFuzhWMB3tWRl5+oM9vD7ItXqzC7KDBjc0SDFPaO1iGwdPD
nymHwI1uxA8zXuY63CG6QkjGCNHeHausIbmqaJ1xime923HGiA2H9EpM5CY1KOPs
CU4UVZ2GATQrbQUqg/KGsAgDuLeYuEgrwnqUXVQCkuqnWK3YayOzwoOnzmxojWxe
w87AghHvnrvLfFJ24NkJ0XneWFln3547mhkPYVlQp8//ivPXsY43TkReBBb93FgD
3X7RSsjY0OPmL6q0qpF4Z5A8995fngqnXeNNSJ32+CbRq9ddFhrZXTjfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOOe4Qe/0BG8Rrl2bbRtPhi3NUdMB8GA1UdIwQY
MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt
NmY5N2RmYzEwZmU3LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3
LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGxPa06I
kSUAHgW1D3+qOSvLA4APAOy8hmDpFfSHREOzP+N+evmT13zfR2nNU391AnsQ+2JS
bfEqln5SvVieApJj4GJWSSVj18Ids2vvGpyrgaQS8jXOd1IVa/GEqy3/hSwLOMsW
AhVywHdpHpgqERi2/pOhPdzlhb4XtCQ+2mljL0QQImP1MCNDahaHCR0EB5vO7yPU
9mp2ABDNTLBIxnE3IWcEe3/LKyLLD/4R1J7av2rszdvo0bjDyXwHDRiKjSDgqqXC
CAZp9epCKe1ZoDuychhcnA++M4GMs54L54tibM2Gwr/KAePEuQjy+PehGtqVnBZV
/ebYKlyIvX0a8A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:06 2025 by rpki-client