Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: N1xp390VsX9kMslEpqnE3EvQY3e7s54jk7GIp5Wfcf8=
Subject key identifier: 03:DD:A4:E5:8A:8A:B9:93:E2:A8:82:3B:04:27:B1:01:A0:8D:98:C1
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019849661C73FBCC3E933F9F5030D9748BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1142
Signing time: Sun 27 Jul 2025 01:01:25 +0000
Manifest this update: Sun 27 Jul 2025 01:01:25 +0000
Manifest next update: Mon 28 Jul 2025 01:01:25 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: Ch8usWGZ+gzARoKbZnuDhm9meQ4pqS3Cae2hHbGQj6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:1c:73:fb:cc:3e:93:3f:9f:50:30:d9:74:8b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Jul 27 01:01:25 2025 GMT
Not After : Jul 28 01:01:25 2025 GMT
Subject: CN=03dda4e58a8ab993e2a8823b0427b101a08d98c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:e1:ee:d8:51:da:7d:6f:46:10:5e:9c:75:
68:4f:f4:fd:85:6d:c1:31:38:98:f5:16:51:75:ef:
4f:ff:1f:da:fe:e2:3e:b8:2e:0e:d8:24:21:e5:96:
61:a4:f7:8a:01:0d:2e:0d:3e:cd:db:33:46:ce:9c:
7a:6d:79:5c:ff:bc:dd:4a:30:3a:d9:fa:71:f9:86:
92:ab:99:27:de:7f:00:7b:94:85:a6:c2:c2:04:cb:
6d:ec:04:72:cd:78:66:70:90:24:4c:60:eb:f0:ea:
3c:7f:bb:50:7c:09:bb:81:7d:18:53:93:ed:59:b9:
b9:79:d8:2a:93:45:b5:90:bf:0d:12:8d:59:44:62:
e0:d1:5b:8f:7c:fc:48:6a:88:2b:91:9b:f1:15:c9:
cd:c5:c0:f0:d5:96:9c:db:95:fc:dc:f6:4b:3a:41:
39:a3:e8:fc:3f:cc:cc:2f:7a:eb:99:36:b3:9d:81:
e3:99:86:c1:db:d3:4a:fc:de:e3:48:12:66:23:92:
7c:28:8d:8e:83:c4:38:bd:9f:58:77:2a:79:b6:d4:
4a:62:e4:d4:27:00:a5:82:14:dc:19:19:9c:5b:33:
96:7d:10:cf:31:54:87:17:1f:5c:28:30:ea:66:c7:
71:d5:61:ea:aa:c9:b3:27:cc:a1:d3:89:11:65:36:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:A4:E5:8A:8A:B9:93:E2:A8:82:3B:04:27:B1:01:A0:8D:98:C1
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b4:c2:23:da:08:e1:36:d0:f4:9b:11:cc:40:09:25:8c:78:
44:18:94:3f:15:10:f8:44:eb:9d:fc:c9:d4:d9:7e:2c:91:93:
67:a1:1c:fb:1d:c7:79:40:b5:f4:15:95:fc:d2:b2:06:f5:00:
c0:86:15:5f:a5:5d:46:6d:ec:f5:fe:c2:23:a8:76:fa:e0:9c:
ae:50:59:5c:11:a5:84:42:1b:c8:14:ad:89:ea:4d:b4:bf:db:
a4:b5:f7:05:4f:12:0f:3c:60:8c:36:f7:99:76:0f:1f:64:9c:
20:f5:b7:9d:1f:7a:4c:29:df:54:e4:2b:a9:c8:dd:39:33:9f:
13:ed:79:3f:02:52:06:4c:c2:d9:c3:39:25:95:23:4f:d1:e9:
fd:06:c8:4b:a2:0a:d4:22:b4:42:74:bc:b8:c2:3a:e4:9c:6d:
e3:91:8f:6e:58:05:2c:bb:99:25:0a:50:43:a6:0e:e5:51:6c:
1b:24:dd:43:d2:86:70:9c:1b:82:0f:69:63:3c:a4:da:66:ac:
76:dc:50:19:b1:ae:0d:ed:43:72:96:16:ba:5c:6b:fc:bd:be:
44:76:27:75:ad:ec:74:cf:8d:7f:27:36:2e:29:7f:8a:a1:82:
13:84:7b:c1:ca:cf:39:e0:1a:50:d1:1a:a1:19:32:93:b2:ff:
eb:9d:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:44 2025 by rpki-client