Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: zVYPsNscgpsaRen6Bh8h47OsPczocpcgfVzu+njWeIk=
Subject key identifier: 47:09:7C:B9:5C:E8:F6:21:6A:97:8C:1C:75:1C:79:75:9F:B8:3B:76
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019A4EF4274D45068931EA1AB48B1EED0066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 124E
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: s8O88BwNFz10FMyl+3hZpUZR+U7LQ1p3Dw9BfXqaWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:27:4d:45:06:89:31:ea:1a:b4:8b:1e:ed:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=47097cb95ce8f6216a978c1c751c79759fb83b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:41:d0:1d:c0:bc:e1:cb:09:24:f5:9b:88:
f6:f0:f4:b8:b5:aa:1f:08:bb:6d:28:9c:0b:d9:bc:
f6:a2:c4:10:b9:33:4b:b2:04:5a:bf:ff:56:6a:d0:
7c:43:2c:b2:72:0c:78:c5:66:21:cc:19:d2:06:50:
79:fc:eb:86:2a:44:1a:0b:35:6b:b6:36:31:1a:52:
f0:85:1e:31:07:ad:79:30:3c:20:cc:e5:d7:40:88:
fa:17:3a:30:05:14:9d:84:13:29:84:6e:1d:fe:3e:
74:37:27:dd:bd:c8:cf:d2:0a:68:f7:3e:95:e3:9c:
8e:4a:50:55:4c:5b:76:1a:dc:5a:f8:8b:4d:c2:2a:
d0:38:1f:81:f2:b2:20:c6:6d:e3:4e:04:c3:57:01:
32:24:91:bc:32:84:b8:fe:a7:c2:d9:58:1b:a9:22:
e2:1f:83:a3:d7:4b:a0:d5:14:ee:3c:06:df:48:96:
df:6e:72:c4:ec:c5:df:38:c8:72:2e:85:4c:4f:e4:
df:51:10:a1:67:30:7c:f7:ec:d9:71:91:85:db:f6:
4e:fe:39:95:8a:5e:70:38:e3:38:9c:0d:bd:15:6a:
4f:42:c8:fc:c3:8b:d0:b8:2e:c2:71:22:cb:5b:c2:
52:a6:27:16:67:e9:27:82:4d:26:9c:42:52:71:4b:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:7C:B9:5C:E8:F6:21:6A:97:8C:1C:75:1C:79:75:9F:B8:3B:76
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:70:70:3f:ab:e9:b4:79:bd:1e:49:79:ac:12:a0:ca:41:
bb:fe:d3:70:ee:7e:53:e1:45:a6:4f:ec:85:6d:31:d3:71:a8:
8a:42:41:b5:cf:e9:00:29:95:f8:b0:18:96:bc:42:6d:be:18:
0a:c8:87:e0:66:94:b7:1e:69:ad:07:e0:fb:8b:3e:c1:66:4c:
73:34:6b:e9:2a:cd:c3:fc:10:a3:ad:62:cf:c4:36:15:34:f9:
52:a7:23:a4:4a:77:c3:eb:b8:13:0f:1a:67:90:97:79:f6:b8:
c1:80:f8:06:51:08:0b:53:3a:95:47:b2:e0:5d:c2:e4:a9:ed:
9a:38:35:36:2e:da:de:b3:fc:ab:0d:5d:71:1c:11:36:a1:d9:
cd:ce:0b:f5:01:84:73:b4:a0:40:5b:e0:10:64:e2:f7:6a:e5:
03:58:93:5b:1e:d8:57:12:08:e0:32:06:dc:2e:19:bc:81:e8:
31:68:a0:20:db:ca:7e:3f:ab:00:7c:c2:a0:55:7a:6a:54:7c:
f4:70:76:50:07:93:42:25:f8:0f:9b:93:2c:7e:f0:81:6e:91:
c5:0e:7e:91:7e:79:8b:e3:c8:72:fd:34:ae:a6:38:5c:4e:11:
cb:8c:e5:0e:77:10:39:b2:34:7a:99:67:29:c7:40:4f:ea:8d:
77:2b:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:34 2025 by rpki-client