Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: Y+N5NoXZah4EAWFWpYjE5TRgtU7eWWh7/Xqh5h3jvAk=
Subject key identifier: CF:DD:A1:5B:60:EA:72:A4:F8:F7:77:A2:E7:96:B1:B5:93:00:0C:BD
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 019A71B89E263F930DD59AC450EFA0A10711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 0AC4
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: hQxNUOecfLtssZfLfSn8+TSBkJhbbG38Fr34wFKwgpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:26:3f:93:0d:d5:9a:c4:50:ef:a0:a1:07:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=cfdda15b60ea72a4f8f777a2e796b1b593000cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:e9:e5:12:52:04:2e:e5:86:ed:8f:9b:cb:
a0:3d:ec:df:da:39:07:ae:dc:fd:36:1c:df:8e:df:
21:15:87:16:0f:74:0a:36:cb:87:75:96:1d:5e:b3:
71:4a:4c:9f:be:ec:3e:4d:f6:1f:bd:db:ba:78:36:
b0:79:a9:95:e3:9c:1b:e1:92:73:4e:15:a8:84:5b:
5a:ca:b6:ff:7d:89:75:36:48:dc:99:5a:0c:10:b5:
13:4d:7f:e3:2e:c7:7c:59:08:b1:79:73:2f:f0:c3:
a8:fe:d1:3f:90:4b:ca:62:ec:9e:29:e7:5f:be:15:
e8:02:8a:b1:26:c1:50:fc:59:b8:a2:93:8f:99:f2:
8e:f5:f9:2a:ad:ba:48:8a:df:6a:3c:31:a4:99:8e:
be:45:89:ae:cd:cc:88:e3:49:02:c5:2c:f2:51:23:
df:bc:15:73:76:fb:a6:65:02:85:62:76:94:6f:b9:
c8:7f:5b:59:ad:5e:f2:34:c9:bf:95:0b:4f:d0:8d:
02:72:0e:42:0c:a4:ff:e6:4a:20:be:14:a2:a3:fb:
70:7a:de:8d:57:71:84:de:2c:3c:69:f6:19:e9:cb:
3c:59:f0:4f:05:c6:40:55:8d:07:3a:83:2b:de:9d:
38:6e:9b:73:36:1d:90:10:16:32:10:fa:7f:e1:c1:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:A1:5B:60:EA:72:A4:F8:F7:77:A2:E7:96:B1:B5:93:00:0C:BD
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:4d:ca:fb:c8:5b:97:ab:ce:23:6c:f6:64:1b:2d:98:16:
85:3c:51:0b:94:02:51:7c:30:cb:35:69:e7:a7:27:29:77:32:
28:8e:43:f4:5e:e7:94:1f:f3:c4:6f:0a:9e:ef:16:30:a9:7e:
05:e2:2f:63:1f:87:e2:30:4b:60:58:69:a3:46:40:bf:c3:bb:
64:fe:2f:40:7b:48:22:9d:56:35:b7:8d:f3:bb:d9:ac:65:47:
1f:3e:a3:3b:dd:58:2e:4c:56:65:cb:fa:53:aa:86:2d:29:88:
76:61:4c:2a:af:35:a1:df:fb:72:61:72:bf:83:a7:df:52:ce:
16:cc:b7:84:9c:c3:0f:35:5d:8c:10:8b:49:44:09:5c:33:6a:
b3:d3:4b:3a:f9:fe:0c:7e:3e:d5:2f:46:af:3a:eb:96:38:98:
16:77:41:51:65:03:eb:33:27:22:92:bb:c9:64:bc:f4:2c:c3:
70:ae:61:c0:12:02:61:c9:08:60:0d:a6:a2:b4:7f:91:c7:58:
23:0f:dc:e6:c8:d7:3c:3c:38:bf:fe:22:50:38:f3:39:2e:48:
6e:e2:20:8b:a1:97:1c:8d:cf:0b:d3:70:ab:17:b4:a2:7f:2c:
9b:20:e9:bc:f3:78:1e:a1:35:97:f0:5e:5d:20:c6:01:c2:68:
53:73:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:31 2025 by rpki-client