Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: psd9X5Bzf3F3Zu9dT8H27MUQNP4sCUV7V6EXESKchII=
Subject key identifier: 94:80:B6:73:D1:49:FB:C7:7A:9D:7F:47:3A:A6:C9:AD:21:34:97:E0
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019873E3B17BBD12C5DD4345D6F51F276CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1158
Signing time: Mon 04 Aug 2025 07:02:38 +0000
Manifest this update: Mon 04 Aug 2025 07:02:38 +0000
Manifest next update: Tue 05 Aug 2025 07:02:38 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: IoJb6TiMcZg83yZLdWRujUygvVGPcbgUHA/Yh6Cz8+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b1:7b:bd:12:c5:dd:43:45:d6:f5:1f:27:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Aug 4 07:02:38 2025 GMT
Not After : Aug 5 07:02:38 2025 GMT
Subject: CN=9480b673d149fbc77a9d7f473aa6c9ad213497e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:00:e8:21:dc:11:01:cd:de:28:a7:df:cd:
d6:88:bb:a2:46:4a:67:a9:65:f0:ff:04:b9:eb:65:
c1:c7:f7:3a:f4:2d:92:4b:f4:50:d7:8f:29:81:40:
83:d4:c2:9f:32:48:e7:f7:2e:75:33:b4:29:e4:05:
63:5d:91:77:69:13:22:a0:34:2e:83:99:dc:18:1e:
c7:7c:b7:06:53:95:32:38:0f:12:f5:7d:b8:7e:ba:
f6:e3:4e:0d:6d:8c:e6:a5:33:0d:12:79:15:41:5b:
52:b2:81:18:24:17:f1:3c:bc:da:41:61:2d:83:4c:
75:ec:4c:e3:28:a1:7b:3a:f2:b8:69:f0:6b:9a:45:
21:ff:f8:b7:e7:81:b6:33:59:79:a2:11:40:b8:50:
f1:a1:0f:3f:15:fa:d4:ce:8e:41:af:5f:91:05:97:
05:50:55:a2:69:a8:b7:cb:3b:7a:8e:48:a9:c2:3c:
17:2f:93:e9:63:26:2f:9d:dc:d9:02:75:b2:c7:12:
d9:64:46:87:a0:2e:84:f4:7a:fb:8c:5c:a5:d4:85:
90:db:3e:e8:b9:81:e2:de:10:d5:1a:5f:4f:c4:62:
86:2a:7f:98:af:fb:9c:5a:7c:bf:ca:1e:e2:d6:ce:
22:fa:3d:32:09:74:39:16:27:25:aa:e3:40:7c:e7:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:B6:73:D1:49:FB:C7:7A:9D:7F:47:3A:A6:C9:AD:21:34:97:E0
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:82:91:16:1f:8f:cc:40:2e:2d:b3:34:fc:a0:e8:9b:3a:
0e:16:1d:d4:44:64:99:40:36:6f:84:79:22:0f:5c:b9:26:5d:
31:28:58:07:76:0e:c2:a8:c8:8a:cc:e4:dc:43:15:eb:84:c8:
c4:8f:4c:5f:c6:01:20:98:38:d6:93:d6:3c:da:84:c8:cd:cf:
e9:23:26:d9:cc:8e:e4:fd:c0:1a:0a:42:51:a0:f9:da:07:ca:
21:4b:89:6a:0c:3e:d4:61:87:93:ea:ec:15:ec:f5:b1:a3:ba:
6a:60:03:26:9a:5f:c8:3c:eb:79:4a:ce:38:db:d8:8c:96:2d:
c7:9f:3b:b0:ea:96:ec:ef:0f:08:a2:80:1c:66:7c:98:8d:c4:
67:b8:2f:73:bc:37:34:c1:7d:54:fd:98:ee:f1:4f:a7:c2:31:
8a:e6:91:ab:02:00:69:4e:78:b4:50:20:c2:6d:50:ac:33:40:
d3:c7:c0:6a:2a:9c:e7:47:e2:84:3a:28:31:e3:2b:39:d5:c1:
ea:ba:e6:bb:dc:e3:b7:70:5c:94:c7:a7:f6:15:3e:1a:c6:13:
cd:5b:bf:c0:82:00:35:c8:1f:bf:9d:6c:c4:9d:31:25:67:9a:
d2:4f:19:b8:9d:f1:8d:31:f4:43:46:81:d7:c5:0d:7f:fe:da:
56:81:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:09 2025 by rpki-client