
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: 31TRIRMnC6AGHc2pKfNgaOIwQnJP9kEfyH3jY3E/C+s=
Subject key identifier: 96:DD:00:DA:81:BC:50:37:FE:68:F2:12:F1:EA:99:29:5C:9A:C5:F9
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 01984708EBB2A6960A8E314B0AC67F5E08E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 0151
Signing time: Sat 26 Jul 2025 14:00:23 +0000
Manifest this update: Sat 26 Jul 2025 14:00:23 +0000
Manifest next update: Sun 27 Jul 2025 14:00:23 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: enz9ac47GrOVCeAbH8kIkdh04rYK122tR7yFC9zM7Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:eb:b2:a6:96:0a:8e:31:4b:0a:c6:7f:5e:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Jul 26 14:00:23 2025 GMT
Not After : Jul 27 14:00:23 2025 GMT
Subject: CN=96dd00da81bc5037fe68f212f1ea99295c9ac5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:17:71:0f:76:88:5d:eb:e5:d8:ca:d2:fe:
52:0b:ce:37:25:46:23:ee:bc:47:a6:59:ff:9c:6e:
f8:9d:20:df:8e:9d:72:0a:da:7e:7b:6d:63:97:30:
10:d5:ae:ed:6f:3c:af:2a:70:49:08:b3:77:ef:e9:
c7:05:a2:e1:ac:c0:79:c9:43:4b:eb:a6:7e:41:5a:
22:95:93:44:f3:09:ae:2d:c0:e6:52:9c:67:0d:39:
79:36:ac:02:26:98:a1:21:83:3f:c9:27:dd:9b:39:
9c:09:8b:b3:c6:92:a5:b7:5e:4b:94:f3:64:ba:a0:
ff:ec:d2:74:ea:e7:db:2c:4a:3c:82:f7:14:af:ed:
ad:33:51:5d:af:e8:c8:f5:95:4f:14:74:5d:17:d1:
9a:4d:ef:09:7b:eb:ef:63:db:4f:7f:d6:5b:9f:76:
bb:f7:a8:16:b7:5b:4c:c0:89:6e:5d:3a:86:5e:2a:
50:1a:41:e1:f0:0f:b1:5d:25:5f:29:b4:ea:b3:a5:
86:de:fa:08:ae:91:83:96:ba:85:83:80:4c:6f:bb:
46:33:d5:a2:78:1c:33:23:f1:58:65:f1:72:fb:8e:
c9:49:be:41:79:b2:61:02:60:7c:18:cd:69:05:ca:
03:c3:9a:5e:e4:66:14:71:0b:a6:b5:6b:84:c6:97:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DD:00:DA:81:BC:50:37:FE:68:F2:12:F1:EA:99:29:5C:9A:C5:F9
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:8a:ed:f1:cc:95:df:ba:a2:e8:5e:a8:a9:6b:48:0a:31:
9a:16:a9:89:26:d0:ed:86:2e:d6:a7:c3:fa:f8:eb:36:7e:9d:
60:9d:25:56:ff:f4:fd:c0:f1:bd:cb:1a:ad:ee:c5:48:c1:18:
bd:56:37:c3:8e:c5:c9:26:7f:fb:4d:94:f2:99:ee:56:32:27:
49:7d:df:1e:6b:24:02:7b:d8:4b:96:ec:4c:77:66:e0:b9:2a:
be:07:f4:00:ab:77:ba:28:c4:8e:93:70:a1:3e:d0:98:4c:5b:
2b:15:bb:e4:d9:52:5a:0d:c9:2d:3f:9a:4b:49:7a:91:ad:2f:
36:6f:03:5b:30:5d:46:93:fe:5a:0f:7f:39:f0:78:4a:28:bd:
09:b0:56:6e:a3:6d:9a:b2:db:d6:e0:e3:0d:18:70:7a:49:82:
c1:7b:fe:1c:f5:6d:85:14:f6:f9:47:12:ca:47:8f:3e:53:26:
ed:f1:36:3d:89:de:92:08:63:6f:03:11:ba:cb:cd:a1:9f:71:
4e:f7:26:f9:83:34:12:65:79:71:ca:7e:07:b7:6f:9d:ff:73:
92:d1:95:4a:32:ea:f0:bf:1d:94:c2:fb:26:82:57:5e:01:f1:
2e:04:cf:c6:9d:cf:98:cd:1a:7a:42:c9:79:c2:8c:d1:eb:a3:
d3:5f:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:10 2025 by rpki-client