Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier: HH1JoR6KCXnr0B+Ztwn3qJbsOs5XOHMskoq8VHiRaaE=
Subject key identifier: DD:13:59:D4:FD:C9:86:11:99:05:0A:F7:81:CE:C3:42:4D:21:D9:06
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial: 019A7293FEB30BF51D5A2896F7C97A00FD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: XhoORhEXNeJwu1QECXyQpJ0Dm3rRyWSkIDKwyx9MxfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fe:b3:0b:f5:1d:5a:28:96:f7:c9:7a:00:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=dd1359d4fdc9861199050af781cec3424d21d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:0e:db:bf:3b:c0:81:d5:74:5e:7d:82:66:
f6:80:65:4b:15:f8:c3:13:9b:d1:8e:24:82:c5:25:
37:50:be:2b:11:54:71:8b:09:f5:23:dc:d0:9f:b1:
c9:be:2a:13:4b:c4:39:33:0c:bb:f7:a7:bf:12:09:
2f:c2:b2:73:24:8d:cd:7e:16:74:70:15:f2:a6:20:
09:e0:c8:58:2e:ac:a4:9d:db:39:8e:0d:c8:1b:81:
fe:fc:27:cd:6a:3f:6a:d8:fd:b8:bf:03:02:f8:6b:
06:f2:61:3d:a8:d2:88:4e:9d:c9:ac:73:c0:c5:b1:
b5:8e:20:9f:cc:a4:38:fe:4b:e4:a3:25:02:d2:6b:
56:5f:fc:f4:5a:a8:68:07:67:8a:78:63:51:47:76:
5d:ad:d4:1a:6e:87:38:cb:6c:70:33:af:40:9b:b9:
8a:73:ca:1e:1c:04:56:c4:e8:4b:60:f1:7f:f5:ba:
ab:a7:db:99:95:57:d1:1e:dd:a4:40:a1:0f:3b:55:
65:91:f1:24:2a:4f:db:24:f0:16:8f:b3:07:ff:70:
37:53:99:a2:b1:ee:6b:99:a3:53:64:3a:ed:e8:c0:
b8:ee:17:60:3f:7d:7f:db:f4:5b:87:b7:d3:ce:80:
18:9a:96:f9:28:a9:ef:7c:10:26:7e:ea:9a:82:a2:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:59:D4:FD:C9:86:11:99:05:0A:F7:81:CE:C3:42:4D:21:D9:06
X509v3 Authority Key Identifier:
keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:71:cc:c0:cf:cc:df:08:68:db:40:e4:14:ed:5f:8d:ac:
9b:60:69:87:c0:e9:1a:84:67:15:e8:94:c8:cb:22:c2:f1:0a:
23:84:09:39:8b:b6:40:24:cd:3c:ee:ed:7b:a0:2c:ef:70:fa:
48:06:da:6e:5b:6c:d1:4b:f6:3f:ca:af:67:66:65:aa:1d:3a:
33:95:af:72:30:40:ba:8d:65:0a:3d:21:1b:00:f4:90:eb:7f:
c3:f6:32:89:04:c8:c3:49:19:f1:63:81:36:d9:a9:1d:67:1f:
28:6e:41:8e:b0:e9:b6:97:6a:28:b8:3c:16:64:d8:67:4b:23:
a0:8b:f7:03:5b:94:99:49:f8:f5:3d:c4:4f:4e:2f:da:4b:94:
0d:c9:d9:0c:85:ef:ad:99:90:2e:38:79:61:42:35:dd:60:ec:
22:b1:97:d5:24:a9:fc:4d:f3:02:38:aa:ec:01:51:e1:56:fc:
18:82:23:0e:a6:40:a3:f4:28:9f:98:c4:64:24:ae:da:c8:e1:
c4:dc:ae:1b:a7:e1:a9:c0:3c:e8:f0:03:db:e2:fd:3a:8d:40:
72:04:ce:36:16:5c:d5:e7:4f:85:ee:38:4d:06:9f:77:a2:e5:
8d:c3:26:bf:e1:c1:38:12:c7:77:ec:fc:f0:1d:88:4a:38:f1:
a8:33:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:07 2025 by rpki-client