Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: GaFOkdZ+D6E0OBJIjysXirAEirGhmcrACdBl0m9sQqM=
Subject key identifier: 07:B3:9E:5F:38:B3:5B:AC:B6:CD:6C:E5:9E:1D:11:0F:0D:90:EF:BB
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 019884D5813F1734F06C3C646DB98CFA1CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 0171
Signing time: Thu 07 Aug 2025 14:00:41 +0000
Manifest this update: Thu 07 Aug 2025 14:00:41 +0000
Manifest next update: Fri 08 Aug 2025 14:00:41 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: oA2gLY5OBuNiVsmM91tUdqOqjV4r4JSlLIHh7GaWTq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:81:3f:17:34:f0:6c:3c:64:6d:b9:8c:fa:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Aug 7 14:00:41 2025 GMT
Not After : Aug 8 14:00:41 2025 GMT
Subject: CN=07b39e5f38b35bacb6cd6ce59e1d110f0d90efbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:3d:bc:47:88:6a:9d:e6:ca:d5:f4:76:bb:
1d:6a:ea:78:97:7b:e9:39:59:4e:d4:42:5e:42:bd:
6e:56:19:2e:4e:54:13:0b:b6:7b:5d:7a:f1:43:e5:
78:f7:11:93:b3:fa:bb:c0:91:ce:e4:22:dd:54:0b:
8a:37:d6:fb:a7:cd:65:ca:3c:6f:3c:f5:92:56:a3:
39:f0:d4:6b:dc:36:be:93:fe:c5:8c:b2:78:88:38:
76:64:ff:ba:4e:fe:99:9a:88:98:82:be:61:e1:4e:
e2:ea:40:ee:97:88:72:1d:26:09:bb:8f:94:24:3a:
de:18:10:70:28:65:02:9a:d7:ec:41:08:d1:e0:80:
d6:7e:f0:ad:96:03:8d:f3:1c:14:77:95:5d:7f:c5:
de:4b:6b:d3:28:f1:eb:94:2c:0f:fb:e9:c3:a0:bd:
e1:22:9f:9e:3e:3c:71:24:75:f0:cc:35:cf:25:26:
4b:86:86:ed:b2:92:fd:c6:f0:6a:aa:4f:b0:79:10:
6c:f8:29:7a:92:3a:48:82:b2:53:f6:d1:b1:6f:b4:
1a:0e:7a:b9:ce:49:6d:9a:23:79:95:53:a9:0c:f9:
5f:76:b1:36:6b:6b:9c:43:ea:ea:e3:4e:38:bb:d8:
c9:82:64:c7:ac:a7:20:93:c7:45:da:d3:c2:47:94:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:9E:5F:38:B3:5B:AC:B6:CD:6C:E5:9E:1D:11:0F:0D:90:EF:BB
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:80:68:85:f9:a0:32:26:b7:f1:93:d1:70:4e:c5:7e:b6:
dc:03:5c:5d:19:82:6f:f4:00:40:5e:00:5c:28:cd:bf:4d:ee:
ed:ef:0b:d6:1c:df:5c:10:f5:38:48:fa:6b:99:46:ab:3c:78:
f3:a1:a3:e8:cd:75:4f:f9:b2:ea:53:87:d2:db:07:b2:13:36:
b3:3e:f0:f4:e1:ec:1d:38:29:5b:3c:c9:65:20:51:e0:c9:fc:
1e:29:23:77:d5:87:6e:a9:d4:cc:75:c3:6f:23:47:c4:2b:90:
12:30:26:9e:b6:5a:2e:72:78:8b:69:d1:aa:dd:80:bb:e0:4f:
9f:8e:61:6c:4f:9d:5c:e1:b3:bd:6f:78:6d:ba:65:5e:1e:48:
5d:99:57:a8:0d:05:16:78:71:d2:a0:27:f6:23:2c:b9:fc:d0:
20:83:e1:32:77:85:b6:b7:1d:fc:de:d9:30:b2:44:76:54:1a:
78:81:c7:27:09:6d:52:b6:28:0d:c3:c6:c3:d3:7e:60:80:ab:
de:35:79:5d:4c:33:8c:1c:ef:00:20:03:0a:2c:34:74:58:17:
8c:d8:35:c1:a9:5b:72:6b:00:d6:57:48:23:4b:90:ce:48:73:
0f:94:33:2c:15:a6:69:3d:bb:42:ab:26:2b:d7:f3:3c:a8:de:
97:73:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:17 2025 by rpki-client