Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: 4wtnas84yvmyrYQYq2WMV87O8lc/3G54iIN+WS0lGLY=
Subject key identifier: 56:E4:5A:CD:20:22:BE:86:CB:CE:6F:BD:AC:CE:14:CB:03:78:3A:78
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0198481B4EA6DAF784C0299DD7A65CB66125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 153E
Signing time: Sat 26 Jul 2025 19:00:05 +0000
Manifest this update: Sat 26 Jul 2025 19:00:05 +0000
Manifest next update: Sun 27 Jul 2025 19:00:05 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: q2MSzVHHvvOmCGi8eUO/+vHTRu1th3mlE4Qs9YAakm8=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:4e:a6:da:f7:84:c0:29:9d:d7:a6:5c:b6:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Jul 26 19:00:05 2025 GMT
Not After : Jul 27 19:00:05 2025 GMT
Subject: CN=56e45acd2022be86cbce6fbdacce14cb03783a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:a6:d0:0e:21:6a:14:f8:61:d5:54:ba:0d:
e4:d5:59:98:a5:b7:3c:37:45:eb:a3:1c:69:81:4a:
01:64:ce:f2:9d:09:9f:32:14:30:2d:be:0c:a1:a5:
bb:e2:8e:03:75:ae:81:26:0b:ea:81:37:23:a6:0c:
3d:60:07:b2:00:9a:12:0a:a0:ef:59:81:92:78:62:
a7:67:0d:c9:bd:64:0f:4a:ca:b3:f4:1b:14:40:ea:
3e:ae:f5:ae:d2:ba:d9:b3:5f:55:88:04:20:0e:ca:
9e:73:df:1c:51:84:da:c7:68:60:f4:59:95:fb:d7:
d8:97:be:68:28:ce:c7:f6:de:4a:95:a2:a2:98:50:
70:08:3a:37:19:1c:d4:a0:bb:77:f8:29:f5:dc:0f:
72:10:3e:57:84:78:4b:a6:36:5a:f5:30:3f:d5:dd:
2e:99:19:71:d3:d2:0e:97:d9:1d:02:31:66:a6:d3:
54:8f:e9:11:fe:d1:92:d0:40:81:80:07:bf:2b:55:
9e:12:47:da:a9:c4:e8:5a:da:8f:4e:b0:29:3e:93:
0c:b0:72:eb:57:46:d6:53:fa:d5:76:d1:ed:b6:da:
21:d8:fa:06:17:ac:f4:bb:9c:65:1b:6b:a6:8b:e0:
f6:f5:c3:60:2e:e9:a5:07:46:9b:78:3f:e4:eb:56:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:5A:CD:20:22:BE:86:CB:CE:6F:BD:AC:CE:14:CB:03:78:3A:78
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:d3:55:df:68:99:94:bb:95:55:3c:d8:a2:da:98:dd:f0:
63:63:4b:01:ff:b7:47:30:31:21:bc:90:1a:a7:2b:2d:b0:5a:
19:cb:5c:d4:75:e5:1a:c7:9e:60:08:b6:97:e1:27:bd:b5:db:
e7:93:f3:63:58:4b:0e:1e:55:60:4f:d2:ba:ab:5b:0b:9e:a1:
06:c4:00:86:18:73:b5:8e:4f:79:79:d7:c8:fd:81:c0:18:e5:
01:ed:18:6a:93:e2:67:34:e7:e1:53:47:c3:9c:c1:78:44:cd:
66:03:8a:25:79:6e:52:ff:83:19:1d:e3:53:44:3c:9b:91:21:
e9:73:63:ab:05:6e:34:63:5c:79:20:71:e0:91:f6:03:eb:68:
5e:88:a7:b2:55:1f:52:81:c3:4b:5f:2c:25:7f:9d:97:bd:ee:
22:af:f2:88:07:56:88:39:99:d0:d2:28:93:50:2d:ab:d9:4f:
9a:98:b0:77:f2:b2:03:8d:a8:24:97:5a:80:28:4e:e6:72:54:
63:76:5f:5a:cc:20:6e:e7:de:9a:e9:ab:48:0d:16:18:bd:fe:
4a:78:a4:1e:c3:04:b2:cf:9d:5e:61:09:b0:f3:27:06:aa:69:
f7:a9:e8:e8:0f:96:f6:c6:9b:90:b8:ff:b5:57:aa:2d:50:e0:
1c:05:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:25 2025 by rpki-client