Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: ukrdDbFdE//SA2whnxObwNMT6ZPQyqtMPrwkCWnyqA0=
Subject key identifier: D0:00:FD:69:7A:2B:5D:20:31:B9:4A:71:F4:CE:BD:7A:88:9E:4F:98
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 019A7149F74E93364EB09B45741C1DD8F13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 0270
Signing time: Tue 11 Nov 2025 05:01:04 +0000
Manifest this update: Tue 11 Nov 2025 05:01:04 +0000
Manifest next update: Wed 12 Nov 2025 05:01:04 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: 69fuluNCrRE0I+JO4aU4+1Uf3GPBC1nUo/hY5W2J0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f7:4e:93:36:4e:b0:9b:45:74:1c:1d:d8:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Nov 11 05:01:04 2025 GMT
Not After : Nov 12 05:01:04 2025 GMT
Subject: CN=d000fd697a2b5d2031b94a71f4cebd7a889e4f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:3e:7b:67:d1:3e:63:85:c0:c3:3f:44:40:
27:70:a7:84:d9:9f:11:c4:94:35:42:a3:cf:5b:8b:
ec:d8:54:31:19:ee:52:de:16:2c:b2:6c:cf:74:3f:
0e:c8:a5:3f:ca:57:25:e9:3c:d9:23:29:43:bb:cf:
3b:9d:d5:53:f8:1c:dd:1b:be:bc:90:77:e0:39:fc:
f2:21:21:fd:76:84:a2:15:56:ac:94:bd:ef:fb:fe:
a6:d0:5d:b3:8b:19:7d:3d:95:85:66:47:34:ae:9b:
22:d9:ce:aa:a4:78:ff:5d:0c:a8:34:b1:77:09:e6:
cb:72:22:f2:15:95:38:5a:6d:97:bc:bc:78:1d:13:
19:8f:26:ca:de:37:da:ed:82:25:82:1d:14:60:6e:
c0:2a:bf:0d:59:2a:3d:96:32:7e:84:6b:ec:f3:c9:
2f:2d:e6:15:06:a7:72:af:b1:6d:29:99:a7:bc:3f:
e9:28:c6:78:14:8a:d0:ce:cb:d0:9e:37:de:04:3f:
45:a8:69:f5:bd:b4:ff:83:1e:2c:58:25:0f:58:5d:
48:93:04:1d:18:f3:10:5b:5f:a6:d8:cb:75:e3:8d:
0a:26:75:74:ad:3a:f7:40:f1:8c:21:2e:fb:91:18:
69:6a:26:1c:45:db:5c:79:ea:95:35:df:19:b8:9d:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:FD:69:7A:2B:5D:20:31:B9:4A:71:F4:CE:BD:7A:88:9E:4F:98
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:b3:26:9e:cc:26:be:44:7d:49:09:47:9d:30:c0:54:05:
2a:72:fd:e7:5b:dc:2a:36:d4:7b:71:9a:04:66:8f:9c:80:2d:
39:03:5b:5e:33:89:61:a4:ca:b3:1c:77:5f:27:ce:fe:4d:1d:
57:60:79:95:40:c7:fd:a0:b7:db:17:1c:3d:56:e2:1f:07:51:
36:27:c1:e8:50:e8:3c:7c:7a:cf:3e:e3:8b:8a:06:f1:cd:d4:
c0:9c:48:21:16:da:07:1d:49:63:3e:f2:2e:e4:f4:10:e6:89:
f7:d0:13:c1:75:6c:f6:b1:e3:14:1e:cc:6c:c0:20:1e:b6:52:
aa:e5:1b:3d:7b:83:c0:3a:bb:59:bf:47:45:f6:c0:bf:5d:54:
35:9d:54:22:a6:74:87:0e:f0:57:8f:29:b3:6d:c4:94:d0:8b:
e5:14:37:58:ff:70:e6:5b:08:ee:ca:e3:1e:b2:08:d2:bf:8b:
9b:12:76:b7:fc:cc:57:e3:07:1e:a9:79:85:c1:7a:69:1c:b1:
3b:d0:55:d1:9c:0e:0f:c3:46:a3:3a:8b:52:6a:0c:23:23:42:
10:95:8f:6d:23:06:90:be:16:2d:6b:2f:b7:c7:46:a4:96:4e:
2d:6a:0d:9e:c0:b6:04:ba:27:34:1c:f1:5c:a4:1a:de:cc:71:
a2:36:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:29 2025 by rpki-client